CVE-2023-20802

In imgsys, a memory corruption vulnerability arises from improper input validation that could enable local escalation of privilege requiring System execution privileges. User interaction is needed for exploitation. A patch is identified (Patch ID: ALPS07420968; Issue ID: ALPS07420976). Public tec...

CVE-2023-20837

CVE-2023-20837 affects the seninf component. The root cause is a missing bounds check that enables an out-of-bounds write, resulting in a local escalation of privilege with SYSTEM execution privileges required. The vulnerability does not require user interaction for exploitation. A patch is ident...

CVE-2023-21393

CVE-2023-21393 is a local elevation of privilege in Android Settings caused by a missing permission check that could allow a user to change the SIM without interaction. Exploitation is described as local with no user interaction and the impact is elevated permissions with high confidentiality, in...

CVE-2023-52535

The CVE-2023-52535 issue affects the vsp driver (Unisoc/UNISOC-chipset context) and is caused by missing verification for an incorrect input. It is described as potentially enabling local denial of service with no additional privileges required. Publicly cited details come from PT-2024-14607 (Vsp...

CVE-2024-20052

In flashc (MediaTek chip/software context), an uncaught exception can cause information disclosure, potentially enabling local information exposure with System privileges. Exploitation requires local access; no user interaction is needed. A patch is referenced (ALPS08541757 / ALPS08541761). No ot...

CVE-2024-20085

CVE-2024-20085 concerns MediaTek Power component vulnerability: a missing bounds check in the power handling can trigger an out-of-bounds read, enabling local information disclosure and potentially system-level execution privileges. Affected: MediaTek chips (power domain); root cause: out-of-boun...

CVE-2024-49740

CVE-2024-49740 affects Google Android and is described as a DoS condition caused by a crash loop from resource exhaustion in multiple locations. Exploitation requires no user interaction and does not need additional privileges (local impact). The Android security bulletin notes patch levels 2025-...

CVE-2025-20979

CVE-2025-20979 concerns an out-of-bounds write in Samsung’s libsavscmn prior to Android 15. Affected component: libsavscmn (cell phone software). Root cause: an out-of-bounds write issue that enables local attackers to execute arbitrary code. Impact: high (local code execution with high confident...

CVE-2015-1541

CVE-2015-1541 affects Android before version 5.1.1 (LMY48I). The issue resides in AppWidgetServiceImpl in Settings, where an application can obtain a URI permission by sending an Intent with FLAG_GRANT_READ_URI_PERMISSION or FLAG_GRANT_WRITE_URI_PERMISSION. This bypasses intended restrictions and...

CVE-2016-2060

CVE-2016-2060 is a local privilege escalation in Qualcomm/netd tethering controls caused by inadequate validation of the upstream interface parameter. FireEye’s analysis and Qualcomm advisories describe that untrusted interface values can be passed through addUpstreamV6Interface to netd, which ul...

CVE-2017-0396

CVE-2017-0396 is an information-disclosure vulnerability in Android’s Mediaserver. It affects Mediaserver’s libeffects component (visualizer/EffectVisualizer.cpp) and could allow a local malicious app to access data beyond its permission level. Affected versions span Android 4.4.4 through 7.1.1. ...

CVE-2017-0430

CVE-2017-0430 affects Android, involving an elevation of privilege in the Broadcom Wi‑Fi driver that could allow a local malicious application to execute arbitrary code in the kernel context. Affected components are Android kernels 3.10 and 3.18 with Broadcom Wi‑Fi driver involvement; the issue i...

CVE-2017-0433

CVE-2017-0433 is an elevation-of-privilege flaw in the Synaptics touchscreen driver for Android, tied to the Kernel-3.10 platform. The vulnerability could allow a local, privileged attacker to execute arbitrary code within the touchscreen chipset context. Several connected sources (including NVD ...

CVE-2017-0555

CVE-2017-0555 is an information disclosure flaw in Android’s Mediaserver libavc component. The vulnerability could allow a local malicious app to access data outside its permissions by exploiting Mediaserver during media processing. Affected: Android 6.0–7.1.1 (versions 6.0, 6.0.1, 7.0, 7.1.1). R...

CVE-2017-13236

CVE-2017-13236 affects the Android KeyStore service (Android 8.0/8.1). The issue is a permissions bypass in KeyStore that can grant access to protected resources, enabling local elevation of privilege with system execution privileges required. Exploitation is local and does not require user inter...

CVE-2017-13252

The CVE (CVE-2017-13252) affects Android 8.0 and 8.1 via CryptoHal::decrypt in CryptoHal.cpp, where improper input validation causes an out-of-bounds write and a read from uninitialized memory. This yields local elevation of privilege with no extra execution privileges required, and exploitation ...

CVE-2017-13312

CVE-2017-13312 affects Android’s Media framework (MediaCas.java) where a parcel read/write mismatch in createFromParcel, due to improper input validation, can enable local elevation of privilege on Android 8.0 (Oreo). An app could start an activity with system privileges without extra execution p...

CVE-2018-6240

CVE-2018-6240 affects NVIDIA Tegra BootRom. A local attacker with kernel privileges can write an arbitrary value to an arbitrary physical address, enabling escalation of privileges. Connected NVIDIA advisories confirm this vulnerability and map fixes to specific Jetson/Linux-for-Tegra releases: T...

CVE-2018-9378

CVE-2018-9378 affects Android Pixel/Nexus devices via BnAudioPolicyService::onTransact in IAudioPolicyService.cpp. The issue is information disclosure caused by uninitialized data, enabling local information leakage without extra execution privileges and without user interaction. The documentatio...

CVE-2018-9396

CVE-2018-9396 affects the Mediatek port_rpc.c code path (drivers/misc/mediatek/eccci/port_rpc.c) where an incorrect bounds check enables an out-of-bounds write. This can lead to local escalation of privilege with SYSTEM execution privileges needed, and exploitation does not require user interacti...

CVE-2018-9466

CVE-2018-9466 : A vulnerability in libxml2’s valid.c xmlSnprintfElementContent can cause an out-of-bounds write, enabling remote escalation of privilege in an unprivileged process with user interaction required. Public details across sources confirm the issue’s presence in libxml2 and describe th...

CVE-2019-2043

CVE-2019-2043 describes a local elevation-of-privilege in Android’s SmsDefaultDialog.onStart due to an overlay attack. The vulnerability could allow a malicious local app to gain privileges without extra user consent, with user interaction required for exploitation and impact on Android 7.0–9. Th...

CVE-2019-2113

CVE-2019-2113 affects Android 9 (Pie) in the System component. The issue stems from a bypass in the setup wizard that skips certain checks when Wi-Fi is not connected, enabling a factory reset protection bypass with no additional privileges and no required user interaction. The vulnerability is c...

CVE-2019-2166

CVE-2019-2166 affects Android 10 in the libxaac library, where uninitialized data leads to information disclosure. The root cause is uninitialized data in lib xaac, enabling disclosure with no execution privileges and requires user interaction for exploitation. The issue is categorized as Informa...

CVE-2019-9237

CVE-2019-9237 describes a Bluetooth out-of-bounds read in Android 10 due to a missing bounds check, enabling potential remote information disclosure. Exploitation requires user interaction, and the issue does not require elevated privileges beyond what the user already has. Affected product is An...

CVE-2019-9281

CVE-2019-9281 affects GoogleContactsSyncAdapter in Android 10. The issue is a path traversal vulnerability caused by improper input sanitization, enabling a bypass of user interaction requirements without extra execution privileges. Impact is described as allowing access outside restricted direct...

CVE-2019-9289

CVE-2019-9289 affects Android 10 via a Bluetooth information-disclosure flaw caused by a missing bounds check that enables a local information leak without user interaction. The issue is described as an out-of-bounds read in Bluetooth, potentially exposing sensitive data on affected devices. The ...

CVE-2019-9295

CVE-2019-9295 affects com.android.apps.tag on Android 10. The vulnerability is described as a bypass of user interaction requirements due to a missing permission check, potentially enabling local escalation of privilege with user execution privileges. The exploitation note states that user intera...

CVE-2019-9311

Summary (CVE-2019-9311): A vulnerability in Android 10’s Bluetooth stack can crash the device due to an integer overflow, enabling remote denial of service on incoming calls without user interaction. The issue affects the Bluetooth component and is exploitable over the network, with no privileges...

CVE-2020-0295

CVE-2020-0295 affects Android 11’s Telecom stack, where an unsafe PendingIntent allows a permission bypass leading to local information disclosure with user-execution privileges required. Exploitation is listed as local and does not require user interaction, with the impact stated as partial conf...

CVE-2020-12753

Summary (CVE-2020-12753): LG mobile devices running Android 7.2–10 are affected by an EL1/EL3 coldboot vulnerability in the bootloader affecting the raw_resources partition, enabling arbitrary code execution. The issue is identified as LG internal tag LVE-SMP-200006 (May 2020). Public sources in ...

CVE-2021-0541

The CVE-2021-0541 issue affects Android 11, tied to phNxpNciHal_ext_process_nfc_init_rsp in phNxpNciHal_ext.cc. It describes a possible out-of-bounds read due to a missing bounds check, enabling local information disclosure in the NFC server with system-level privileges needed. Impact notes from ...

CVE-2021-1012

CVE-2021-1012 affects Android 12 and is described in multiple sources as a side-channel information-disclosure vulnerability within NotificationAccessDetails.java (onResume), enabling an app to infer whether another app is installed without query permissions. The core issue is a local information...

CVE-2021-1020

CVE-2021-1020 affects Android 12 via snoozeNotification in NotificationListenerService.java, where improper input validation could allow disabling notifications for an arbitrary user, enabling local privilege escalation with user interaction required. In-text impact is described as local escalati...

CVE-2021-1023

CVE-2021-1023 relates to an Android information-disclosure issue in the RequestIgnoreBatteryOptimizations.java onCreate path. The vulnerability allows a local attacker to determine whether an app is installed without query permissions via side-channel information disclosure, requiring user intera...

CVE-2021-1047

CVE-2021-1047 affects Android kernel code (cm_access_control.c: valid_ipc_dram_addr). The issue arises from an integer overflow that enables an out-of-bounds read, leading to potential local information disclosure with system-level privileges. Exploitation is described as local and does not requi...

CVE-2021-25344

The CVE-2021-25344 issue affects Samsung knox_custom service (mobile app). Root cause: missing privilege check in knox_custom before SMR Mar-2021 Release 1. Impact: attacker may access the device serial number without permission (local attack). Public details confirm the vulnerability and timing;...

CVE-2022-20263

CVE-2022-20263 affects Android 13 in the ActivityManager component. The root cause is a missing permission check that allows reading the process state of other users, enabling local information disclosure of app usage. Exploitation is local, with no user interaction required, and requires User pr...

CVE-2022-20264

CVE-2022-20264 affects Android’s Usage Stats Service . The vulnerability describes a side-channel disclosure that can reveal whether an app is installed without requiring query permissions. The resulting exposure is a local information disclosure with no additional execution privileges, and explo...

CVE-2022-20290

CVE-2022-20290 affects Android 13 and involves a permissions bypass in the Midi component that can reveal private MIDI devices, enabling local privilege escalation without user interaction. Exploitation details are not provided in the supplied documents. The issue is associated with Android 13 se...

CVE-2022-20316

This CVE-2022-20316 affects Android 13 ContentResolver. The vulnerability involves a side-channel information disclosure that can reveal whether an app is installed without query permissions, enabling local information disclosure with no additional execution privileges required. The issue is docu...

CVE-2022-26458

CVE-2022-26458 affects MediaTek vow. Root cause: a missing bounds check causing an out-of-bounds write, enabling local privilege escalation to SYSTEM with no user interaction. The patch reference ALPS07032678 is noted, but no affected versions or exploitation details are provided in the supplied ...

CVE-2022-30712

CVE-2022-30712 relates to an elevation-of-privilege issue in Samsung KfaOptions on Samsung mobile devices. The root cause is a lack of proper authentication logic in KfaOptions, permitting an attacker to launch certain activities. Multiple sources corroborate this vulnerability description and ti...

CVE-2022-32631

CVE-2022-32631 concerns MediaTek-based Wi‑Fi stacks with an outwardly stated vulnerability: an out-of-bounds write caused by improper input validation. The consequence is local escalation of privilege with SYSTEM execution privileges required, and exploitation reportedly does not require user int...

CVE-2022-32633

CVE-2022-32633 affects MediaTek Wi‑Fi components with a logic error that can cause a memory access violation, enabling local privilege escalation without user interaction. Root cause: memory access violation in Wi‑Fi code; impact据 indicate Local, Privileges required HIGH, with System execution pr...

CVE-2022-33727

CVE-2022-33727 describes a vulnerability in the SecDevicePickerDialog onCreate prior to Samsung SMR Aug-2022 Release 1, where flawed UI handling enables a tapjacking/overlay attack to trick users into selecting an unwanted Bluetooth device. The issue is documented across multiple sources (NVD, Re...

CVE-2022-47492

CVE-2022-47492 affects the UNISOC soter service module. The root cause described across connected sources is a missing permission check in the soter service, which could allow a local attacker to cause a denial of service without gaining execution privileges. Documented impact is local availabili...

CVE-2023-20606

CVE-2023-20606 describes an out-of-bounds read in the apusys component due to a missing bounds check, potentially allowing local information disclosure with SYSTEM privileges. Exploitation is reported to not require user interaction. A patch is available (ALPS07571104; Issue ID ALPS07571104). Con...

CVE-2023-20728

CVE-2023-20728 affects the MediaTek wlan module. Root cause: a missing bounds check leads to an out-of-bounds read. Impact: local information disclosure with system execution privileges required; exploitation does not require user interaction. A patch is available (Patch ID: ALPS07573603; Issue I...

CVE-2023-20730

CVE-2023-20730 concerns the MediaTek WLAN module, where a missing bounds check enables a possible out-of-bounds read. The result is local information disclosure, with system execution privileges required for exploitation and no user interaction needed. Publicly documented patch: ALPS07573552 (Iss...