CVE-2019-9338

CVE-2019-9338 affects Android 10 via the Media Framework libavc, where uninitialized data allows information disclosure. Impact is remote information disclosure with user interaction needed; exploit details are not provided. No patch/version is specified in the connected documents; refer to Andro...

CVE-2019-9363

CVE-2019-9363 affects Android 10 Bluetooth and describes an out-of-bounds write caused by a missing bounds check. This could allow remote code execution with no privileges, requiring user interaction to exploit. Affected product/area: Android 10 Bluetooth stack. Root cause: improper bounds checki...

CVE-2019-9369

CVE-2019-9369 affects Android 10 Bluetooth code, where a use of an uninitialized variable could lead to local information disclosure without user interaction. The NVD/Red Hat/CNVD entries all describe the same issue; impact is information disclosure (confidentiality partial), with local attack ve...

CVE-2019-9370

Summary: CVE-2019-9370 affects the Android 10 platform’s sonivox component, where an out-of-bounds read occurs due to an incorrect bounds check. This can lead to remote information disclosure, with no additional execution privileges required, and requires user interaction to exploit. The issue is...

CVE-2019-9398

CVE-2019-9398 affects the Android 10 Bluetooth stack. The issue is a missing bounds check in Bluetooth that can allow a remote attacker to cause a denial of service without user interaction. Impact is a DoS, with network-based exploitation. Exploitation status is not described in the provided mat...

CVE-2020-0056

CVE-2020-0056 is an Android 10 vulnerability affecting the btu_hcif_connection_comp_evt function in btu_hcif.cc, where a missing bounds check can trigger an out-of-bounds read. This may lead to local information disclosure without requiring privileges or user interaction. The issue is documented ...

CVE-2020-0295

CVE-2020-0295 affects Android 11’s Telecom stack, where an unsafe PendingIntent allows a permission bypass leading to local information disclosure with user-execution privileges required. Exploitation is listed as local and does not require user interaction, with the impact stated as partial conf...

CVE-2021-0402

CVE-2021-0402 affects Android 11 in the jpeg component, where an out-of-bounds write arises from improper input validation. This could enable local escalation of privilege with system execution privileges required, and exploitation reportedly does not require user interaction. The issue is corrob...

CVE-2021-0568

The CVE-2021-0568 entry relates to Android 11 and specifically the DevicePolicyManagerService.java onReceive path. The vulnerability is described as a missing permission check that could enable disabled profiles, resulting in local elevation of privilege with no extra execution privileges require...

CVE-2021-0984

CVE-2021-0984 affects Android 12, related to onNullBinding in ManagedServices.java. The issue is a permission bypass due to an incorrectly unbound service, enabling local elevation of privilege with no additional privileges and no user interaction required. Documents confirm vulnerability details...

CVE-2021-0995

The CVE-2021-0995 entry affects Android 12 and is tied to the WifiServiceImpl.registerSuggestionConnectionStatusListener function, enabling a side-channel information disclosure to infer whether an app is installed without query permissions. This results in local information disclosure with no ex...

CVE-2021-1023

CVE-2021-1023 relates to an Android information-disclosure issue in the RequestIgnoreBatteryOptimizations.java onCreate path. The vulnerability allows a local attacker to determine whether an app is installed without query permissions via side-channel information disclosure, requiring user intera...

CVE-2021-1024

CVE-2021-1024 affects Android 12 and is described in multiple connected sources as a flaw in EventResultPersister.java where an intent redirection can occur due to a confused deputy. This leads to local escalation of privilege with system execution privileges potentially required. The exploitatio...

CVE-2021-1027

CVE-2021-1027 affects Android 12, specifically the SurfaceFlinger component during setTransactionState. The root cause is improper casting in SurfaceFlinger that can allow arbitrary code execution in a privileged process, leading to local elevation of privilege with no extra execution privileges ...

CVE-2021-25347

CVE-2021-25347 affects the Samsung Email application. A hijacking vulnerability in versions prior to the SMR Feb-2021 Release 1 could allow an attacker to intercept when the provider is executed. The available documents consistently describe interception as the impact, but do not provide detailed...

CVE-2021-25490

CVE-2021-25490 documents a keyblob downgrade attack in Samsung’s Keymaster TA (TrustZone) that enables triggering IV reuse with a privileged process. The root cause is related to the legacy keyblob/blob implementation in Keymaster, allowing misuse of initialization vectors. Affected devices inclu...

CVE-2021-39638

CVE-2021-39638 relates to the Android kernel: in the function periodic_io_work_func of lwis_periodic_io.c there is an out-of-bounds write caused by a use-after-free. This leads to local elevation of privilege with System execution privileges required and no user interaction needed. The descriptio...

CVE-2022-20263

CVE-2022-20263 affects Android 13 in the ActivityManager component. The root cause is a missing permission check that allows reading the process state of other users, enabling local information disclosure of app usage. Exploitation is local, with no user interaction required, and requires User pr...

CVE-2022-20280

CVE-2022-20280 affects Android 13, specifically the MMSProvider component. The issue is described as an SQL injection vulnerability caused by improper input validation that permits reading protected data, potentially exposing short message service (SMS) and multimedia message service (MMS) data. ...

CVE-2022-20325

CVE-2022-20325 affects Android 13 in the Media stack, where a use-after-free leads to potential code execution and local privilege escalation with no user interaction required. The entry consistently describes the vulnerability as a local-privilege-escalation issue due to a use-after-free in the ...

CVE-2022-20330

CVE-2022-20330 : In Android 13, a missing Bluetooth permission check allows connecting or disconnecting Bluetooth devices without user awareness, enabling local elevation of privilege. Exploitation requires low privileges and does not require user interaction (UI: NONE). Impact is limited to elev...

CVE-2022-20341

CVE-2022-20341 affects Android 13’s ConnectivityService, where a missing permission check enables a local bypass of network permissions. This could allow an information disclosure of tethering interfaces with no additional execution privileges required, and does not require user interaction. Expl...

CVE-2022-21770

CVE-2022-21770 concerns a vulnerability in the sound driver where a symlink following flaw can lead to local information disclosure, with System execution privileges needed. The NVD entry states an impact on confidentiality, integrity, and availability (C/I/A: Partial/Partial/Partial) and a local...

CVE-2022-22271

CVE-2022-22271 concerns Samsung TIMA Trustlet where a missing input validation before memory copy allows copying data from arbitrary memory. Connected sources (e.g., PT-2022-15317) specify that TIMA Trustlet versions prior to SMR Jan-2022 Release 1 are affected; remediation is to update to SMR Ja...

CVE-2022-27574

CVE-2022-27574 affects the Samsung libsimba library prior to SMR Apr-2022 Release 1, caused by improper input validation in parser_iloc and sheifd_find_itemIndexin functions, enabling an out-of-bounds write by a privileged attacker. Documented impact indicators in NVD and Red Hat/CVE feeds descri...

CVE-2022-32593

The CVE-2022-32593 entry concerns MediaTek’s vowe component, where a missing bounds check can cause an out-of-bounds write. This vulnerability enables local escalation of privileges with System execution privileges required, and does not require user interaction. The issue is tied to the vowe cod...

CVE-2022-32603

CVE-2022-32603 concerns MediaTek GPU DRM with an out-of-bounds write caused by improper input validation, enabling local privilege escalation with System execution privileges required. User interaction is not needed. A patch (ALPS07310704, Issue ID ALPS07310704) exists; details on affected versio...

CVE-2022-33727

CVE-2022-33727 describes a vulnerability in the SecDevicePickerDialog onCreate prior to Samsung SMR Aug-2022 Release 1, where flawed UI handling enables a tapjacking/overlay attack to trick users into selecting an unwanted Bluetooth device. The issue is documented across multiple sources (NVD, Re...

CVE-2022-33728

CVE-2022-33728 concerns Samsung Mobile devices where Bluetooth before SMR Aug-2022 Release 1 exposes the connected Bluetooth MAC address via Settings.Global. The issue is local: an attacker on the device can access the MAC address without user interaction. Root cause is a leakage in Bluetooth set...

CVE-2022-42783

CVE-2022-42783 involves a vulnerability in the wlan driver where there is a missing parameter check. The disclosed impact across multiple sources is a local denial of service in wlan services. The description is consistently the same across NVD/Red Hat/CNNVD/CVE records, noting the root cause as ...

CVE-2022-44448

CVE-2022-44448 affects the WLAN driver, where a missing parameter check in the wlan driver can lead to local denial of service in WLAN services. Multiple documents confirm the issue description across NVD, Red Hat, CVE listings, and related feeds. Root cause: insufficient parameter validation in ...

CVE-2022-47366

CVE-2022-47366 concerns the wlan driver, where a missing bounds check enables an out-of-bounds write. The vulnerability could cause a local denial of service in wlan services. Documents consistently describe the issue, but do not provide concrete product versions, patches, or mitigations within t...

CVE-2022-47368

CVE-2022-47368 affects the wlan driver and stems from a missing parameters check in the driver code, which could enable a local denial of service in wlan services. The impact is a local DoS; exploitation and vendor/version details are not provided in the supplied documents. No patch/version fix i...

CVE-2023-20741

CVE-2023-20741 affects the ril module in MediaTek chips, with a missing bounds check causing an out-of-bounds read that can lead to local information disclosure and may enable system-level execution privileges. Exploitation is described as not requiring user interaction, and the patch ID ALPS0762...

CVE-2023-20801

In imgsys, a race condition leads to a use-after-free vulnerability that could allow local escalation of privileges with System execution privileges required. Exploitation does not require user interaction, per the CVE descriptions. Patch ALPS07420968 addresses this issue. There are no public exp...

CVE-2023-20826

CVE-2023-20826 describes a vulnerability in the CTA component where a missing permission check allows local information disclosure without additional execution privileges. Exploitation is not dependent on user interaction listed in the report, and the issue is classified with a LOCAL attack vecto...

CVE-2023-20837

CVE-2023-20837 affects the seninf component. The root cause is a missing bounds check that enables an out-of-bounds write, resulting in a local escalation of privilege with SYSTEM execution privileges required. The vulnerability does not require user interaction for exploitation. A patch is ident...

CVE-2023-20990

CVE-2023-20990 affects Android 13, due to an out-of-bounds read in the function btm_ble_rand_enc_complete of btm_ble.cc caused by a missing bounds check. This can lead to local information disclosure with System execution privileges required; no user interaction is needed. The available connected...

CVE-2023-21176

The vulnerability CVE-2023-21176 affects Android 13 via the list_key_entries function in utils.rs, where a path to disable user credentials could exhaust resources, enabling a local DoS with SYSTEM privileges and no user interaction. Exploitation details, affected builds, and official fixes are n...

CVE-2023-21184

CVE-2023-21184 affects Android 13 and is tied to CarrierPrivilegesTracker.java in getCurrentPrivilegedPackagesForAllUsers, where a logic error enables a local privilege bypass with no extra execution privileges and no user interaction required. Public documents consistently describe a permission ...

CVE-2023-21393

CVE-2023-21393 is a local elevation of privilege in Android Settings caused by a missing permission check that could allow a user to change the SIM without interaction. Exploitation is described as local with no user interaction and the impact is elevated permissions with high confidentiality, in...

CVE-2023-21419

CVE-2023-21419 describes an issue in Samsung Secure Folder where improper implementation logic can cause the Secure Folder container to remain unlocked under certain conditions. Affected software: Secure Folder on Samsung devices (prior to SMR Jan-2023 Release 1). Root cause: implementation flaw ...

CVE-2023-32815

The CVE-2023-32815 issue affects the gnss service and is caused by improper input validation that can trigger an out-of-bounds read, potentially enabling local information disclosure with System execution privileges required. No user interaction is needed for exploitation. A patch is referenced (...

CVE-2023-40644

CVE-2023-40644 affects the Messaging component in UNISOC chipsets, due to a missing permission check that could allow local information disclosure without extra execution privileges. The issue is described with a CVSS v3.1 base score of 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Connected sources...

CVE-2023-42654

CVE-2023-42654 affects Unisoc-based systems where the dm service lacks a required permission check, leading to local information disclosure. The NVD entry notes a Local attack vector with LOW privileges required and no user interaction, but excluding any impact on integrity or availability. Sever...

CVE-2023-52535

A security vulnerability exists in the vsp driver within UNISOC Chipsets (from Purple Spreadtrum). The root cause is a missing verification of incorrect input , which could lead to a local denial of service . Exploitation does not require additional execution privileges. No specific affected vers...

CVE-2024-20029

A security vulnerability exists in wlan firmware due to improper input validation , which could lead to an out-of-bounds write . This flaw may allow for local escalation of privilege , requiring System execution privileges to exploit. User interaction is not required for exploitation. While techn...

CVE-2024-20080

A security vulnerability exists in the gnss service within MediaTek chips due to improper certificate validation . This flaw allows for a remote escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS08720039 (Issu...

CVE-2025-20638

CVE-2025-20638 concerns MediaTek chipsets where the DA module exposes a read of uninitialized heap data, enabling local information disclosure. Root cause: uninitialized data in the DA module. Impact: potential leakage of heap contents if an attacker gains physical access; exploitation requires u...

CVE-2025-20640

CVE-2025-20640 affects MediaTek chipsets’ DA module, where a missing bounds check enables an out-of-bounds read. This could cause local information disclosure when an attacker has physical device access; exploitation requires user interaction but no privileges beyond being present. Impact is desc...