CVE-2017-13323

CVE-2017-13323 is a Google/Android elevation-of-privilege flaw caused by an out-of-bounds write in String16.cpp due to an integer overflow. The Red Hat and CNVD entries restate the issue; Android/Pixel bulletin notes this CVE as EoP (Moderate) and indicates patches are included in the 2018-05-05 ...

CVE-2022-38686

The documents confirm a vulnerability in the wlan driver caused by a missing parameter check, enabling local denial of service in wlan services. Affected component: wlan driver (no specific vendor or version provided in the sources). Root cause: insufficient input validation leading to a service ...

CVE-2015-6617

CVE-2015-6617 affects Skia in Android builds prior to 5.1.1 LMY48Z and 6.0 before 2015-12-01. A crafted media file could cause memory corruption, enabling remote code execution or a denial of service. The issue is addressed in Nexus updates (Builds LMY48Z+ and Android 6.0 with patch level 2015-12...

CVE-2016-10398

CVE-2016-10398 affects Android 6.0 where an authentication bypass exists for attackers with root and physical access. AuthTokens used by the Trusted Execution Environment (TEE) are protected by a weak challenge, enabling replay of captured responses and use of the TEE without authenticating. All ...

CVE-2017-0708

CVE-2017-0708 is an information-disclosure issue in the HTC sound driver (Android kernel). The HTC component entry flags it as an Information Disclosure (ID) vulnerability, Moderate severity, within the Android stack. The Android bulletin for 2017-07-05 lists this HTC sound-driver CVE under the H...

CVE-2017-13261

CVE-2017-13261 affects Android Bluetooth via the BNEP implementation, specifically the bnep_process_control_packet path in bnep_utils.cc. The flaw is an out-of-bounds read caused by a missing bounds check, enabling remote information disclosure without user interaction over a Bluetooth network co...

CVE-2018-9409

The CVE-2018-9409 entry affects Android’s Media framework, specifically the HWC (Hardware Composer) path: HWCSession::SetColorModeById in hwc_session.cpp. The root cause is a missing bounds check, leading to a possible out-of-bounds write. This could enable local elevation of privilege with no ad...

CVE-2018-9425

CVE-2018-9425 affects the Android Platform (Platform) on Android 10, where a missing permission check enables bypass of user interaction requirements, causing local escalation of privilege without extra execution privileges. The issue is categorized as Elevation of Privilege (EoP) with local atta...

CVE-2019-2047

CVE-2019-2047 is an Android vulnerability in the UpdateLoadElement path of the ic.cc file, caused by a type confusion that can trigger an out-of-bounds write. This could allow remote code execution in the proxy auto-config (PAC) context, with no required privileges and no user interaction. The we...

CVE-2019-2072

CVE-2019-2072 affects Android 10 through the libxaac library. The issue is an out-of-bounds write caused by a missing bounds check in libxaac, enabling remote code execution with the attacker’s interaction required. Impact is described as RCE with high severity under CVSS 3.1 (HIGH, network attac...

CVE-2019-9243

CVE-2019-9243 affects wpa_supplicant_8 in Android 10. The vulnerability is an out-of-bounds read caused by a missing bounds check in a component of wpa_supplicant_8, leading to local information disclosure without requiring privileges; no user interaction is needed. Several connected records corr...

CVE-2020-13833

CVE-2020-13833 affects Samsung mobile devices running O(8.x), P(9.0), and Q(10.0). The issue enables arbitrary file overwrites in the system area via a symlink attack. The root cause is a symlink-based overwrite vulnerability in the system area, leading to potential integrity impact (unauthorized...

CVE-2021-0536

CVE-2021-0536 affects Android 11: in the DropFile path of WiFiInstaller there is a mechanism that allows deletion of files accessible to CertInstaller due to a confused deputy, enabling local escalation of privilege with no additional execution privileges needed; exploitation does not require use...

CVE-2021-0539

CVE-2021-0539 concerns an elevation of privilege in Android 11 via the MmsService.java component. The vulnerability arises in the method archiveStoredConversation , where a missing permission check could allow an attacker to archive a message conversation without user consent. This enables local ...

CVE-2021-0543

CVE-2021-0543 : A vulnerability in phNxpNciHal_ext.cc (function phNxpNciHal_process_ext_rsp) allows a possible out-of-bounds write due to an integer overflow, enabling local elevation of privilege with System execution privileges. Exploitation does not require user interaction. Affected: Android ...

CVE-2021-0993

CVE-2021-0993 affects Android 12 and is due to a resource exhaustion condition in TextLine.java’s getOffsetBeforeAfter. The issue can cause remote denial of service with no extra privileges, and exploitation requires user interaction. Public references in the connected records corroborate a DoS i...

CVE-2021-1000

The CVE-2021-1000 entry affects Android 12L and points to the ConnectedDevicesSliceProvider.java createBluetoothDeviceSlice, where an unsafe PendingIntent allows a permission bypass. This enables local privilege escalation with no extra execution privileges required, and no user interaction is ne...

CVE-2021-1006

CVE-2021-1006 affects Android 12 where DatabaseManager.java functions leak Bluetooth MAC addresses via log information disclosure. The root cause is log exposure of MAC addresses, enabling local information disclosure with System privileges needed (no user interaction). Exploitation details are n...

CVE-2021-1026

Affected software: Android 12 (CVE-2021-1026) involves the RttServiceImpl.java startRanging flow. Vulnerability summary: A side-channel information disclosure could allow a local attacker to infer whether an app is installed without query permissions, leading to local information disclosure with ...

CVE-2021-1034

CVE-2021-1034 affects Android 12 via the PhoneInterfaceManager.getLine1NumberForDisplay path. A missing permission check enables an app to infer whether another app is installed, causing local information disclosure without requiring additional execution privileges. The vulnerability stems from i...

CVE-2021-1044

CVE-2021-1044 affects the Android kernel component in the function eicOpsDecryptAes128Gcm of acropora/app/identity/identity_support.c , where a missing bounds check enables an out-of-bounds write. This can lead to local elevation of privilege with no extra execution privileges or user interaction...

CVE-2021-1045

CVE-2021-1045 is acknowledged in multiple feeds as affecting the Android kernel component Titan‑M used in Google Pixel devices. The Pixel Update Bulletin groups CVE-2021-1045 under Pixel → Titan‑M with severity High, indicating a kernel‑level issue likely resolved in the 2021‑11‑05 patch level. T...

CVE-2021-25340

CVE-2021-25340 concerns Samsung Keyboard prior to SMR Feb‑2021 Release 1, with an improper access control flaw that enables physically proximate attackers to change arbitrary settings during the Initialization State. The issue affects Samsung Keyboard software and is exploitable without user inte...

CVE-2021-25345

CVE-2021-25345 concerns Samsung hwcomposer. Descriptions across sources identify a graphics format mismatch when hwcomposer converts video formats, occurring prior to SMR Mar-2021 Release 1, which results in a kernel panic due to an unsupported format. The vulnerability is tied to the hwcomposer ...

CVE-2022-20264

CVE-2022-20264 affects Android’s Usage Stats Service . The vulnerability describes a side-channel disclosure that can reveal whether an app is installed without requiring query permissions. The resulting exposure is a local information disclosure with no additional execution privileges, and explo...

CVE-2022-20276

CVE-2022-20276 concerns the Android 13 framework where the DevicePolicyManager exposes a side-channel that can reveal whether an app is installed without query permissions. The vulnerability is described as a local information-disclosure issue that does not require user interaction. The affected ...

CVE-2022-20329

The CVE-2022-20329 entry concerns Android 13 where Wifi can be enabled without required permissions due to a missing permission check. Root cause: a permission-check gap in the Wifi pathway. Impact: local escalation of privilege without additional execution privileges, with exploitation described...

CVE-2022-20561

CVE-2022-20561 affects the Android kernel in aud_hal_tunnel.c, where a use-after-free can cause memory corruption. The impact is local elevation of privilege with no extra execution privileges required and no user interaction needed. Affected component: Android kernel (aud_hal_tunnel.c). Root cau...

CVE-2022-21784

CVE-2022-21784 affects the WLAN driver on MediaTek-based platforms, caused by a missing bounds check that allows an out-of-bounds write. This can lead to local escalation of privilege with SYSTEM privileges required, and exploitation reportedly does not require user interaction. References point ...

CVE-2022-26091

CVE-2022-26091 affects Samsung Knox Manage with an improper access control vulnerability that can allow a local, physical attacker to bypass Knox Manage by using a function key on the hardware keyboard. The issue is described as a bypass of access controls via a hardware-key function, impacting c...

CVE-2022-26094

The CVE-2022-26094 entry describes a null pointer dereference in the parser_auxC function of the libsimba library, prior to Samsung SMR Apr-2022 Release 1, which allows remote attackers to cause an out-of-bounds write. The vulnerability is discussed across multiple feeds (NVD/Red Hat/CNVD/CVELIST...

CVE-2022-26099

CVE-2022-26099 is a null pointer dereference in the parser_infe function of the libsimba library, applicable before the Samsung SMR Apr-2022 Release 1. The vulnerability can cause out-of-bounds reads and is exploitable remotely without authentication, per the CVE description. Connected sources re...

CVE-2022-28785

CVE-2022-28785 concerns an improper buffer size check in the aviextractor library prior to Samsung’s SMR May-2022 Release 1, enabling out-of-bounds reads and a potential temporary denial-of-service. Multiple connected sources (NVD, Red Hat advisory, CVE listings, Samsung SMR notes) confirm the is...

CVE-2022-33686

CVE-2022-33686 affects Samsung GsmAlarmManager where sensitive information (ICCID) can be disclosed via logs due to insufficient protection. The issue is local in scope and is tied to GsmAlarmManager behavior prior to the SMR July 2022 Release 1. Public descriptions in NVD/Red Hat/CNVD and relate...

CVE-2022-33724

The CVE-2022-33724 entry concerns Exposure of Sensitive Information in the Samsung Dialer app, where a local attacker could access the ICCID via logs prior to SMR Aug-2022 Release 1. The Red Hat and other records corroborate the description; no exploit details or affected versions beyond this ris...

CVE-2022-36863

CVE-2022-36863 is a heap-based overflow in GetCorrectDbLanguageTypeEsPKc of libSDKRecognitionText.spensdk.samsung.so, affecting Samsung mobile SDK prior to the SMR Sep-2022 Release 1. Exploitation could cause a memory access fault; attack path is local and does not require user interaction per th...

CVE-2022-38698

CVE-2022-38698 involves a missing permission check in the messaging service that enables elevation of privilege in the contacts service. The vulnerability is exploitable locally with low privileges and does not require user interaction. The CVSSv3.1 metrics indicate a high impact on confidentiali...

CVE-2022-39887

CVE-2022-39887 refers to an improper access‑control vulnerability in the Samsung MiscPolicy function clearAllGlobalProxy (before SMR Nov-2022 Release 1) that allows a local attacker to configure EDM settings. The NVD entry shows a low to medium overall risk depending on vector/impact metrics, wit...

CVE-2022-39907

CVE-2022-39907 affects Samsung decoding library used in Samsung Mobile devices. The issue is an integer overflow in the library that handles video thumbnails, enabling a local attacker to trigger an out-of-bounds write. Impact is described as high (confidentiality/integiry/availability concerns)....

CVE-2022-47323

CVE-2022-47323 affects the WLAN driver due to missing parameter checks, enabling local denial of service in WLAN services. The issue is documented with local-attack vector and impact on availability (NVD CVSS 3.1 base 5.5; CNA CVSS 3.1 base 6.4), stemming from insufficient input validation in the...

CVE-2023-20728

CVE-2023-20728 affects the MediaTek wlan module. Root cause: a missing bounds check leads to an out-of-bounds read. Impact: local information disclosure with system execution privileges required; exploitation does not require user interaction. A patch is available (Patch ID: ALPS07573603; Issue I...

CVE-2023-20736

CVE-2023-20736 affects the vcu component. The vulnerability is an out-of-bounds write caused by a race condition, enabling local escalation of privilege with System execution privileges required and no user interaction. A patch is referenced: ALPS07645149 (Issue ALPS07645189). Exploitation detail...

CVE-2023-20923

In CVE-2023-20923, the issue affects ShannonRcs content providers in Android kernel space. The root cause is a permissions bypass in exported content providers that can grant access to protected content providers without additional execution privileges. The practical impact is local information d...

CVE-2023-21161

CVE-2023-21161 affects the Android kernel, caused by an out-of-bounds write in the Parse function of simdata.cpp due to a missing bounds check. This can lead to local escalation of privilege with System execution privileges required, and exploitation does not require user interaction. Several con...

CVE-2023-21214

CVE-2023-21214 describes an out-of-bounds read caused by unsafe deserialization in the Android component p2p_iface.cpp, within addGroupWithConfigInternal. This leads to local information disclosure with potential system-level execution privileges required for exploitation, and does not require us...

CVE-2023-21367

CVE-2023-21367 concerns the Android Scudo memory allocator. The connected documents confirm a heap OOB read/write due to an insecure implementation/design, enabling local information disclosure without extra execution privileges and with no user interaction required. The Android 14 security relea...

CVE-2023-32810

The CVE-2023-32810 entry applies to the Bluetooth driver in MediaTek devices. The vulnerability is an out-of-bounds read caused by improper input validation in the Bluetooth driver, which can lead to local information leakage and potentially System-level execution privileges. Exploitation is desc...

CVE-2023-35694

CVE-2023-35694 corresponds to an out-of-bounds read in DMPixelLogger_ProcessDmCommand within DMPixelLogger.cpp. The issue allows remote information disclosure without extra execution privileges and does not require user interaction. Documents consistently describe a bounds-check omission as the r...

CVE-2024-0028

The CVE-2024-0028 entry describes an information-disclosure flaw in Android’s Audio Service where a missing permission check could let an attacker obtain the MAC addresses of nearby Bluetooth devices. This is a local issue with low attack complexity and no user interaction required, potentially e...

CVE-2024-20043

CVE-2024-20043 concerns a potential out-of-bounds write in the MediaTek component/module labeled as “da,” caused by a missing bounds check. The issue could allow local escalation of privilege to SYSTEM privileges without user interaction. Public exploitation details are not provided in the docume...