CVE-2024-20041

The CVE-2024-20041 entry affects MediaTek devices (da module) and is due to a missing bounds check causing an out-of-bounds read. This can lead to local information disclosure with System execution privileges needed; no user interaction is required. The public records cite Patch ID ALPS08541746 (...

CVE-2024-20118

CVE-2024-20118 affects the MediaTek mms component, with an out-of-bounds write caused by an incorrect bounds check. This can lead to local escalation of privilege and SYSTEM privileges are required for exploitation; no user interaction is needed. A patch is referenced as ALPS09062392 (MSV-1621). ...

CVE-2009-2348

Android 1.5 CRBxx allows local users to bypass CAMERA and AUDIO_RECORD permission checks by installing an app that does not request permissions before using the camera or microphone. Affected: all 1.5 CRBxx variants. Root cause: improper permission verification in Android’s runtime/device policy ...

CVE-2015-6617

CVE-2015-6617 affects Skia in Android builds prior to 5.1.1 LMY48Z and 6.0 before 2015-12-01. A crafted media file could cause memory corruption, enabling remote code execution or a denial of service. The issue is addressed in Nexus updates (Builds LMY48Z+ and Android 6.0 with patch level 2015-12...

CVE-2017-0421

CVE-2017-0421 is an information-disclosure vulnerability in the Android Framework APIs that could allow a local malicious app to bypass OS protections and access data it should not. Affected products/versions per the CVE entry include Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. In the conne...

CVE-2017-0439

CVE-2017-0439 describes a local privilege-escalation vulnerability in the Qualcomm Wi‑Fi driver for Android, affecting Kernel-3.10 and Kernel-3.18. The issue could allow a local malicious app to execute arbitrary code in the kernel context after compromising a privileged process. The Android Prod...

CVE-2017-0550

CVE-2017-0550 corresponds to a remote denial-of-service in libavc within Android’s Mediaserver. The vulnerability affects Android 6.0–7.1.1 and could be triggered by a specially crafted file, potentially causing device hang or reboot. Connected documents corroborate the Mediaserver/libavc context...

CVE-2017-0665

CVE-2017-0665 is an Android framework elevation of privilege (EoP) vulnerability affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. The issue is listed as high severity with local attack vector but user interaction required, per CVSS. Public details in the Android July...

CVE-2017-0672

CVE-2017-0672 is a DoS vulnerability in the Android libraries affecting Android 7.0, 7.1.1, and 7.1.2. Public sources (NVD entry and CVE list in the 2017 Android bulletin) describe a denial of service affecting the libraries, with the NVD noting partial availability impact (DoS). The Android bull...

CVE-2017-0761

CVE-2017-0761 affects Android's media framework (libavc). It is a remote code execution vulnerability impacting Android 6.0/6.0.1, 7.0, 7.1.1, 7.1.2 and 8.0. The issue is documented in the Android Security Bulletin with patches released for the 2017-09-01/2017-09-05 patch levels; mitigation is to...

CVE-2017-0795

CVE-2017-0795 is a privilege-escalation vulnerability in the MediaTek accessory detector driver within the Android kernel. The issue is categorized as an EoP with high impact locally (no user interaction required in some contexts, per CVSS data). Affected component: MediaTek accessory detector dr...

CVE-2017-0807

CVE-2017-0807 is an Elevation of Privilege in the Android framework’s UI subsystem. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID: A-35056974). The reference materials indicate this issue resides in the Framework UI component and was addresse...

CVE-2017-0813

Summary of CVE-2017-0813 : A denial-of-service vulnerability exists in the Android media framework (libstagefright) affecting Android versions 7.0, 7.1.1, and 7.1.2. The issue is identified as a DoS in the Media framework component; the provided documents do not specify the root cause details bey...

CVE-2017-0834

CVE-2017-0834 is a remote code execution vulnerability in Android’s media framework (libmpeg2) affecting Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0 (Android ID: A-63125953). The connected documents corroborate RCE in the Media Framework and list the affected versions; no explicit exp...

CVE-2017-0841

CVE-2017-0841 describes a remote code execution vulnerability in Android’s libutils affecting Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0 (Android ID: A-37723026). The Connected documents corroborate the affected component (libutils) and the Android product, but do not p...

CVE-2017-13316

CVE-2017-13316 affects the Android RecognitionService.java: a missing permission check in checkPermissions could allow a local attacker to bypass permissions and escalate privileges without extra execution privileges or user interaction. The Red Hat and NVD/NVD-derived entries confirm the same de...

CVE-2017-9681

In CVE-2017-9681, the issue affects Android devices using the Linux kernel in Qualcomm MSM/CAF builds (including Firefox OS for MSM and QRD Android). The vulnerability arises when a user-supplied kernel memory address is passed from userspace through the iris_vidioc_s_ext_ctrls ioctl, causing the...

CVE-2018-9372

CVE-2018-9372 : The issue is in the Android bootloader path (cmd_flash_mmc_sparse_img in dl_commands.c) where there is a possible out-of-bounds write caused by a missing bounds check. This could allow a local escalation of privilege in the bootloader without additional execution privileges and wi...

CVE-2018-9414

CVE-2018-9414 affects Google Pixel/Android Bluetooth stack. The issue is in the native function gattServerSendResponseNative (com_android_bluetooth_gatt.cpp), where a missing bounds check allows an out-of-bounds stack write. This can lead to local elevation of privilege with user execution privil...

CVE-2019-2046

CVE-2019-2046 affects Android System; the vulnerability is in CalculateInstanceSizeForDerivedClass in objects.cc, causing memory corruption via integer overflow and enabling remote code execution in the proxy auto-config via PAC file processing. No user interaction required. Affected Android vers...

CVE-2019-2118

CVE-2019-2118 affects Android (8.0–9) due to uninitialized/partially initialized stack variables in Parcel.cpp, enabling local information disclosure without user interaction. Impact and exploitation details are limited to the Android security bulletin references; no explicit exploit code or vect...

CVE-2019-2119

CVE-2019-2119 affects Android: multiple functions in key_store_service.cpp allow local information disclosure due to improper locking. Impact is disclosure of protected data with no extra privileges and no user interaction required. Affected versions (from discussed entries): Android 8.0, 8.1, an...

CVE-2019-2128

CVE-2019-2128 is an elevation-of-privilege vulnerability in Android’s Media/ACELP code path. The issue is an out-of-bounds write in ACELP_4t64_fx (c4t64fx.c) caused by a missing bounds check, enabling local privilege escalation without extra execution privileges. Affected products include Android...

CVE-2019-2213

CVE-2019-2213 : A race in binder_free_transaction in binder.c can cause a use-after-free, enabling local privilege escalation without extra privileges. Exploitation is described as LOCAL with no user interaction and relies on the Android kernel’s binder subsystem; it references upstream kernel fi...

CVE-2019-9349

CVE-2019-9349 is a DoS in Android's libstagefright caused by improper input validation that can exhaust resources and trigger a remote denial of service. Exploitation requires user interaction. The vulnerability affects Android 10 (Android Runtime/libstagefright context) and is documented in mult...

CVE-2020-0084

CVE-2020-0084 affects Android 10, where several functions in NotificationManagerService.java lack permission checks. This enables local escalation of privilege by creating fake system notifications with no extra privileges, and exploitation does not require user interaction. The Pixel Update Bull...

CVE-2020-28341

The CVE-2020-28341 entry concerns Samsung mobile devices running Q(10.0) on Exynos990 chips, where the S3K250AF Secure Element CC EAL 5+ chip is affected. The underlying issue is a buffer overflow in the Secure Element component, leading to arbitrary code execution and leakage of sensitive inform...

CVE-2021-0554

CVE-2021-0554 affects Android 11, where isBackupServiceActive in BackupManagerService.java lacks a required permission check, enabling local information disclosure without user interaction. Documented risk: local disclosure with no privileges beyond local access; attack complexity LOW. Remediatio...

CVE-2021-0769

The CVE-2021-0769 issue affects Google Android 12, specifically the AllowBindAppWidgetActivity.java onCreate path where an unclear UI can bypass user interaction requirements. This leads to local privilege escalation with no additional execution privileges needed, with exploitation requiring user...

CVE-2021-1011

CVE-2021-1011 affects Android 12 via a missing permission check in PackageManagerService.java during setPackageStoppedState, enabling local information disclosure without additional execution privileges. The issue allows disclosure of information to an attacker with local access and does not requ...

CVE-2021-1018

CVE-2021-1018 describes a local information-disclosure issue in Android 12: in AudioService.adjustStreamVolume, a side-channel could reveal whether an app is installed without query permissions, enabling limited information disclosure without extra privileges. Multiple connected records (NVD, Red...

CVE-2021-1027

CVE-2021-1027 affects Android 12, specifically the SurfaceFlinger component during setTransactionState. The root cause is improper casting in SurfaceFlinger that can allow arbitrary code execution in a privileged process, leading to local elevation of privilege with no extra execution privileges ...

CVE-2021-1046

CVE-2021-1046 affects the Android kernel, specifically the lwis_dpm_update_clock function in lwis_device_dpm.c. The issue is an out-of-bounds read caused by an incorrect bounds check, which could enable local information disclosure with System-level privileges required. Exploitation does not requ...

CVE-2021-25335

Technical details about CVE-2021-25335 are not publicly available in the provided connected documents. No affected product/version specifics or exploitation details are given here. Monitor for updates from Samsung security advisories and NVD entries.

CVE-2021-25345

CVE-2021-25345 concerns Samsung hwcomposer. Descriptions across sources identify a graphics format mismatch when hwcomposer converts video formats, occurring prior to SMR Mar-2021 Release 1, which results in a kernel panic due to an unsupported format. The vulnerability is tied to the hwcomposer ...

CVE-2021-39638

CVE-2021-39638 relates to the Android kernel: in the function periodic_io_work_func of lwis_periodic_io.c there is an out-of-bounds write caused by a use-after-free. This leads to local elevation of privilege with System execution privileges required and no user interaction needed. The descriptio...

CVE-2022-20234

CVE-2022-20234 affects Android 12L in the Car/AAOS context where the NotificationAccessConfirmationActivity is exported. An unprivileged app can supply a malicious component name while presenting a benign package title (e.g., Settings) to persuade users to grant notification access to the malicio...

CVE-2022-20272

CVE-2022-20272 affects Android 13 and is tied to the PermissionController component. The issue stems from misleading text about the default SMS app’s permission set, which could lead to local information disclosure. Impact is limited to information exposure with user privileges required and explo...

CVE-2022-20299

CVE-2022-20299 affects the Android 13 ContentService. The vulnerability stems from a missing permission check that allows checking if a given account exists on the device, leading to local information disclosure. Exploitation would require local access with user privileges but does not require us...

CVE-2022-21770

CVE-2022-21770 concerns a vulnerability in the sound driver where a symlink following flaw can lead to local information disclosure, with System execution privileges needed. The NVD entry states an impact on confidentiality, integrity, and availability (C/I/A: Partial/Partial/Partial) and a local...

CVE-2022-21777

CVE-2022-21777 affects MediaTek Autoboot: a permission bypass caused by a missing permission check enables local escalation of privileges without user interaction. Multiple sources (NVD entry and Red Hat/CVE pages) describe the issue as allowing an attacker with local access to elevate privileges...

CVE-2022-27574

CVE-2022-27574 affects the Samsung libsimba library prior to SMR Apr-2022 Release 1, caused by improper input validation in parser_iloc and sheifd_find_itemIndexin functions, enabling an out-of-bounds write by a privileged attacker. Documented impact indicators in NVD and Red Hat/CVE feeds descri...

CVE-2022-28785

CVE-2022-28785 concerns an improper buffer size check in the aviextractor library prior to Samsung’s SMR May-2022 Release 1, enabling out-of-bounds reads and a potential temporary denial-of-service. Multiple connected sources (NVD, Red Hat advisory, CVE listings, Samsung SMR notes) confirm the is...

CVE-2022-32618

Summary of CVE-2022-32618 : A miscalculation of buffer size in the Type-C functionality can cause an out-of-bounds write. This vulnerability could enable local privilege escalation on devices with physical access and does not require user interaction. The issue is described across multiple source...

CVE-2022-33686

CVE-2022-33686 affects Samsung GsmAlarmManager where sensitive information (ICCID) can be disclosed via logs due to insufficient protection. The issue is local in scope and is tied to GsmAlarmManager behavior prior to the SMR July 2022 Release 1. Public descriptions in NVD/Red Hat/CNVD and relate...

CVE-2022-33688

CVE-2022-33688 refers to a local-information-disclosure vulnerability in Samsung SecTelephonyProvider’s EventType, allowing a user with log access to extract IMSI from device logs prior to the SMR July 2022 Release 1. The issue is described across multiple feeds (NVD, Red Hat, CNVD, CVE records) ...

CVE-2022-38698

CVE-2022-38698 involves a missing permission check in the messaging service that enables elevation of privilege in the contacts service. The vulnerability is exploitable locally with low privileges and does not require user interaction. The CVSSv3.1 metrics indicate a high impact on confidentiali...

CVE-2022-47367

The CVE-2022-47367 entry concerns a missing permission check in the Bluetooth driver, enabling local information disclosure without additional execution privileges. Affected component: Bluetooth driver (no vendor/product/version details provided). Root cause: insufficient permission verification ...

CVE-2023-20790

The CVE-2023-20790 entry maps to MediaTek devices with an nvram module vulnerability caused by a missing bounds check, leading to an out-of-bounds write. This can result in local information disclosure and, per the description, requires system execution privileges with no user interaction. Public...

CVE-2023-20802

In imgsys, a memory corruption vulnerability arises from improper input validation that could enable local escalation of privilege requiring System execution privileges. User interaction is needed for exploitation. A patch is identified (Patch ID: ALPS07420968; Issue ID: ALPS07420976). Public tec...