CVE-2017-0547

CVE-2017-0547 is an information-disclosure vulnerability in Android’s Mediaserver (libmedia). The issue allows a local malicious application to access data outside its permission levels due to a bypass in Mediaserver protections. Affected Android versions include 4.4.4–7.1.1 (as listed in the ini...

CVE-2017-0812

CVE-2017-0812 is an elevation-of-privilege vulnerability in Google's Android media framework (audio hal). Affected products: Android 7.0, 7.1.1, 7.1.2, and 8.0 (Android ID A-62873231). The issue is categorized as EoP in the Media framework component and is documented in the Android Security Bulle...

CVE-2017-8259

CVE-2017-8259 is a buffer overflow in Qualcomm CAF Android/Linux kernel service locator. Root cause: a buffer size variable is not used to indicate the actual buffer size. Documented impact is high severity with local code execution possibilities, requiring user interaction (CVSS3: HIGH, LOCAL, U...

CVE-2018-9418

CVE-2018-9418 involves a possible stack buffer overflow in the Android kernel/user-space component described as dtif_rc.cc:handle_app_cur_val_response, caused by a missing bounds check. The Red Hat/NVD/CVE records align with the Android Pixel/Nexus security bulletin noting this issue as a Remote ...

CVE-2019-2059

CVE-2019-2059 affects Android 10 in the libxaac library, where a missing bounds check can cause an out-of-bounds write. This vulnerability could enable remote code execution with user interaction required. The issue is documented across multiple sources (e.g., NVD and Red Hat advisories) with And...

CVE-2019-9239

The CVE-2019-9239 entry concerns Android 10 where NFC processing is subject to an out-of-bounds read due to a missing bounds check. This can lead to local information disclosure without requiring advanced privileges; exploitation requires user interaction. The concrete affected product/edition no...

CVE-2019-9322

CVE-2019-9322 affects the Android 10 media framework component (libavc) and involves an information disclosure due to uninitialized data. The issue could allow remote information disclosure with no execution privileges required, and exploitation requires user interaction. The vulnerability is doc...

CVE-2019-9338

CVE-2019-9338 affects Android 10 via the Media Framework libavc, where uninitialized data allows information disclosure. Impact is remote information disclosure with user interaction needed; exploit details are not provided. No patch/version is specified in the connected documents; refer to Andro...

CVE-2019-9369

CVE-2019-9369 affects Android 10 Bluetooth code, where a use of an uninitialized variable could lead to local information disclosure without user interaction. The NVD/Red Hat/CNVD entries all describe the same issue; impact is information disclosure (confidentiality partial), with local attack ve...

CVE-2019-9370

Summary: CVE-2019-9370 affects the Android 10 platform’s sonivox component, where an out-of-bounds read occurs due to an incorrect bounds check. This can lead to remote information disclosure, with no additional execution privileges required, and requires user interaction to exploit. The issue is...

CVE-2019-9401

CVE-2019-9401 affects Android 10 Bluetooth with a missing bounds check in a Bluetooth component, enabling remote Denial of Service over the network without user interaction or privileges. The CVSSv3.1 base score is 7.5 (Network, Privileges None, UI None, Availability High; scope Unchanged). Conne...

CVE-2019-9410

CVE-2019-9410 affects the Android 10 libavc library, where information disclosure can occur due to uninitialized data in the media handling path. The vulnerability enables remote disclosure without additional code execution, with network as the attack surface and user interaction required for exp...

CVE-2019-9412

CVE-2019-9412 affects Android 10 via the libSBRdec component, where an out-of-bounds read due to an incorrect bounds check could allow remote information disclosure. Exploitation requires user interaction; no execution privileges are needed. The connected sources describe the issue and reference ...

CVE-2021-0402

CVE-2021-0402 affects Android 11 in the jpeg component, where an out-of-bounds write arises from improper input validation. This could enable local escalation of privilege with system execution privileges required, and exploitation reportedly does not require user interaction. The issue is corrob...

CVE-2021-0537

CVE-2021-0537 refers to an elevation-of-privilege in Android’s WiFiInstaller.java. The issue arises on Android 11 where an attacker could exploit a tapjacking/overlay attack during onCreate to install a malicious Hotspot 2.0 configuration, enabling local privilege escalation with user-interaction...

CVE-2021-0976

CVE-2021-0976 concerns an out-of-bounds read in Android’s toBARK implementation (floor0.c). The root cause is a missing bounds check, enabling possible remote information disclosure with no execution privileges; exploitation requires user interaction. Affected software is Android 12 (Android ID A...

CVE-2021-1006

CVE-2021-1006 affects Android 12 where DatabaseManager.java functions leak Bluetooth MAC addresses via log information disclosure. The root cause is log exposure of MAC addresses, enabling local information disclosure with System privileges needed (no user interaction). Exploitation details are n...

CVE-2021-1021

CVE-2021-1021 affects Google Android 12 (and related Android builds) where a flaw in SnoozeNotificationInt within NotificationManagerService.java allows disabling notifications for an arbitrary user due to improper input validation. This can enable local elevation of privilege with user-execution...

CVE-2021-1024

CVE-2021-1024 affects Android 12 and is described in multiple connected sources as a flaw in EventResultPersister.java where an intent redirection can occur due to a confused deputy. This leads to local escalation of privilege with system execution privileges potentially required. The exploitatio...

CVE-2021-1028

CVE-2021-1028 : In Android 12, the vulnerability is in SurfaceFlinger.cpp within setClientStateLocked, where a use-after-free can trigger an out-of-bounds write. This leads to local privilege escalation with no extra execution privileges required and no user interaction. Public documents consiste...

CVE-2021-25340

CVE-2021-25340 concerns Samsung Keyboard prior to SMR Feb‑2021 Release 1, with an improper access control flaw that enables physically proximate attackers to change arbitrary settings during the Initialization State. The issue affects Samsung Keyboard software and is exploitable without user inte...

CVE-2021-39637

The CVE-2021-39637 entry describes an out-of-bounds read in CreateDeviceInfo of trusty_remote_provisioning_context.cpp due to a missing bounds check. This vulnerability could allow local information disclosure with system privileges required, and is exploitable without user interaction. Affected ...

CVE-2021-39647

CVE-2021-39647 concerns the Samsung Exynos 9845-based GS101/boot path where in mon_smc_load_sp of gs101-sc/plat/samsung/exynos/soc/exynos9845/smc_booting.S there is a likely reinitialization of the Trusted Execution Environment due to improper locking. This can enable local information disclosure...

CVE-2022-20262

The CVE-2022-20262 issue affects Android 13, specifically the ActivityManager component. It describes a missing permission check that could allow a local attacker to check another process’s capabilities, resulting in potential local information disclosure with no user interaction required. The NV...

CVE-2022-21775

CVE-2022-21775 affects MediaTek’s sched driver. The issue is a use-after-free caused by improper locking, enabling local escalation of privileges with System privileges required; user interaction is not needed for exploitation. Affected component: sched driver; root cause: improper locking leadin...

CVE-2022-21784

CVE-2022-21784 affects the WLAN driver on MediaTek-based platforms, caused by a missing bounds check that allows an out-of-bounds write. This can lead to local escalation of privilege with SYSTEM privileges required, and exploitation reportedly does not require user interaction. References point ...

CVE-2022-26431

CVE-2022-26431 affects the MediaTek mailbox controller and is described as an out-of-bounds write caused by a missing bounds check. The issue could allow local escalation of privilege to System level with no user interaction required. Documented impact is high for confidentiality, integrity, and ...

CVE-2022-26435

CVE-2022-26435: A type confusion in the mailbox component can cause an out-of-bounds write, enabling local privilege escalation to System level without user interaction. Documents (NVD/Red Hat/NVD list) cite Patch ALPS07138435/Issue ALPS07138435 as the remediation. Exploitation status is not prov...

CVE-2022-27567

This CVE (CVE-2022-27567) affects the libsimba library via a null pointer dereference in the parser_hvcC function, leading to an out-of-bounds write. The issue is triggered remotely by attackers and is tied to the libsimba code before SMR Apr-2022 Release 1. Several connected sources corroborate ...

CVE-2022-28794

CVE-2022-28794 describes a sensitive information exposure in Samsung mobile devices. The issue concerns the low-battery dumpstate log, which can reveal SIM card information to a local attacker. The root cause is exposure of stored log data prior to SMR Jun-2022 Release 1, enabling local access to...

CVE-2022-32589

The CVE-2022-32589 entry concerns a denial-of-service issue in the Wi‑Fi driver related to improper resource release in MediaTek-based implementations. Affected component is the Wi‑Fi driver; root cause is improper resource handling leading to a remote DoS without requiring privileges or user int...

CVE-2022-32628

CVE-2022-32628 describes an out-of-bounds write in the isp component caused by a missing bounds check, enabling local escalation of privilege with System-level execution privileges required. User interaction is not required. The vulnerability impact is described with high confidentiality, integri...

CVE-2022-33718

CVE-2022-33718 concerns Samsung devices with the Wi‑Fi Service before SMR AUG-2022 Release 1. The issue is an improper access control that lets untrusted applications manipulate the list of apps allowed to use mobile data. Impacted component is the Wi‑Fi Service; risk is that untrusted apps could...

CVE-2022-36863

CVE-2022-36863 is a heap-based overflow in GetCorrectDbLanguageTypeEsPKc of libSDKRecognitionText.spensdk.samsung.so, affecting Samsung mobile SDK prior to the SMR Sep-2022 Release 1. Exploitation could cause a memory access fault; attack path is local and does not require user interaction per th...

CVE-2022-39907

CVE-2022-39907 affects Samsung decoding library used in Samsung Mobile devices. The issue is an integer overflow in the library that handles video thumbnails, enabling a local attacker to trigger an out-of-bounds write. Impact is described as high (confidentiality/integiry/availability concerns)....

CVE-2022-47358

Technical details about CVE-2022-47358 are not publicly provided in the supplied documents; no affected products/versions are specified here. Monitor for updates in connected sources.

CVE-2022-48250

CVE-2022-48250 concerns UNISOC chipsets’ audio service where a missing permission check may allow local privilege escalation. The connected documents consistently describe a lack of privilege verification in the audio service as the root cause, with impact stated as local escalation of privilege ...

CVE-2023-20715

CVE-2023-20715 affects the wlan component in MediaTek-based devices. The issue is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privileges with SYSTEM execution rights required. Exploitation reportedly does not require user interaction. The vulnerability’s ...

CVE-2023-20729

CVE-2023-20729 reflects a WLAN module issue in MediaTek chips where a missing bounds check enables an out-of-bounds read. The vulnerability could lead to local information disclosure, with execution privileges required and no user interaction needed. Documented impact is limited to information di...

CVE-2023-20743

The CVE-2023-20743 issue affects the vcu module in MediaTek chips. It stems from improper locking that enables an out-of-bounds write, potentially allowing local escalation of privilege to SYSTEM level without user interaction. The vulnerability impact is described as high for confidentiality, in...

CVE-2023-20805

The CVE-2023-20805 entry concerns the imgsys component. A missing bounds check leads to an out-of-bounds write, enabling local escalation of privileges with System execution privileges required. Exploitation reportedly does not require user interaction. A patch is available (Patch ID: ALPS0719977...

CVE-2023-20845

CVE-2023-20845 affects imgsys. The vulnerability is an out-of-bounds read caused by missing valid range checking, leading to local information disclosure with system execution privileges required and user interaction for exploitation. Patch ID ALPS07197795 / Issue ID ALPS07340357 is associated wi...

CVE-2023-20923

In CVE-2023-20923, the issue affects ShannonRcs content providers in Android kernel space. The root cause is a permissions bypass in exported content providers that can grant access to protected content providers without additional execution privileges. The practical impact is local information d...

CVE-2023-21028

CVE-2023-21028 affects Android 13 and is tied to ipphelper.c in parse_printerAttributes, where an out-of-bounds read can occur from a string not terminated with a null character. This leads to remote information disclosure without additional execution privileges and does not require user interact...

CVE-2023-21160

CVE-2023-21160 affects the Android kernel via a heap buffer overflow in BuildSetTcsFci (protocolmiscbuilder.cpp) that can cause a local out-of-bounds read and information disclosure without requiring user interaction. Public details across sources confirm the impact as local information disclosur...

CVE-2023-21202

CVE-2023-21202 affects Android 13 Bluetooth stack as described in the Android CVE entry. The issue is located in the function btm_delete_stored_link_key_complete in btm_devctl.cc , where a missing bounds check can cause an out-of-bounds read. This can lead to local information disclosure over Blu...

CVE-2023-21348

The CVE-2023-21348 entry concerns Android Window Manager side-channel leakage that allows an app to be detected as installed without query permissions, causing local information disclosure. Connected sources corroborate the issue as an information-disclosure vulnerability (Framework category) wit...

CVE-2023-21419

CVE-2023-21419 describes an issue in Samsung Secure Folder where improper implementation logic can cause the Secure Folder container to remain unlocked under certain conditions. Affected software: Secure Folder on Samsung devices (prior to SMR Jan-2023 Release 1). Root cause: implementation flaw ...

CVE-2024-20037

CVE-2024-20037 affects the pq component/module, where an incorrect bounds check enables a potential write-what-where condition leading to local escalation of privilege with System-level execution privileges required. Exploitation is reported as local (no user interaction). Affected versions are n...

CVE-2024-20041

The CVE-2024-20041 entry affects MediaTek devices (da module) and is due to a missing bounds check causing an out-of-bounds read. This can lead to local information disclosure with System execution privileges needed; no user interaction is required. The public records cite Patch ID ALPS08541746 (...