CVE-2023-20746

The CVE-2023-20746 entry details a vulnerability in the vcu component of MediaTek chips. Root cause: an out-of-bounds write caused by improper locking. Impact: local escalation of privilege to SYSTEM level with no user interaction required. Affected scope is limited to the vcu module; exploitatio...

CVE-2023-20847

CVE-2023-20847 affects MediaTek chips, specifically the imgsys_cmdq component, where a missing valid range check can cause an out-of-bounds read. This vulnerability can lead to local denial of service with SYSTEM privileges required, and exploitation requires user interaction. The known remedy in...

CVE-2023-21146

CVE-2023-21146 affects the Android kernel. The described flaw is a use-after-free memory corruption that could enable local privilege escalation to SYSTEM with System execution privileges needed, and requires no user interaction. Exploitation details and concrete fixes are not provided in the sup...

CVE-2023-21205

CVE-2023-21205 is an Android 13 vulnerability affecting the function startWpsPinDisplayInternal in sta_iface.cpp, where unsafe deserialization can cause an out-of-bounds read. This leads to local information disclosure with no additional execution privileges required and does not require user int...

CVE-2023-21369

CVE-2023-21369 concerns Android: a permissions bypass in Usage Access that can cause a local denial of service by displaying a Settings usage access restriction toggle screen. Exploitation requires user interaction but not remote code execution; impact is limited to DoS on the device. Affected co...

CVE-2023-21385

CVE-2023-21385 describes a memory corruption–related out-of-bounds read in Whitechapel that could enable local information disclosure without user interaction. The vulnerability is classified as a local issue with a high potential impact on confidentiality, per the NVD entry (CVSS v3.1: 5.5, MEDI...

CVE-2023-32815

The CVE-2023-32815 issue affects the gnss service and is caused by improper input validation that can trigger an out-of-bounds read, potentially enabling local information disclosure with System execution privileges required. No user interaction is needed for exploitation. A patch is referenced (...

CVE-2023-35648

CVE-2023-35648 affects Google Pixel baseband firmware through a missing bounds check in ProtocolMiscLceIndAdapter::GetConfLevel() within protocolmiscadapter.cpp. This causes an out-of-bounds read that could enable remote information disclosure and requires baseband firmware compromise, with no us...

CVE-2024-20029

CVE-2024-20029 concerns the wlan firmware with a vulnerability described as an out-of-bounds write caused by improper input validation. The underlying issue can lead to a local escalation of privilege with System execution privileges, and exploitation does not require user interaction. The availa...

CVE-2024-20032

CVE-2024-20032 affects the aee component and describes a permission bypass due to a missing permission check, enabling local escalation of privilege with System execution privileges required. Exploitation is noted as not requiring user interaction. Connected documents corroborate the issue across...

CVE-2024-20043

CVE-2024-20043 concerns a potential out-of-bounds write in the MediaTek component/module labeled as “da,” caused by a missing bounds check. The issue could allow local escalation of privilege to SYSTEM privileges without user interaction. Public exploitation details are not provided in the docume...

CVE-2024-20044

The CVE 2024-20044 affects the da module in MediaTek chips, where a missing bounds check enables an out-of-bounds write. This could allow local escalation of privilege to SYSTEM-level execution with no user interaction required. Patch ALPS08541784/ALPS08541784 is referenced as the mitigation. Con...

CVE-2024-20064

CVE-2024-20064 : MediaTek wlan service contains an out-of-bounds write caused by improper input validation, enabling local privilege escalation with no user interaction. Impact is described as high (C/H/I/A). Exploitation is local with low privileges required; UI interaction is not needed. Patch ...

CVE-2012-4222

CVE-2012-4222 refers to the Qualcomm KGSL kernel-mode driver in Android 2.3–4.2, where a crafted kgsl_ioctl input can trigger a NULL pointer dereference, causing DoS. Connected docs also cover CVE-2012-4220 (diagchar_core.c) and CVE-2012-4221 (diagchar_core.c/integer overflow) with local DIAG/DIA...

CVE-2014-9801

CVE-2014-9801 concerns Android components on Nexus 5 (Qualcomm) where multiple integer overflows in lib/libfdt/fdt_rw.c can be triggered by a crafted application to gain privileges. The issue is described as an Android internal bug 28822060 and a Qualcomm internal bug CR705078, affecting Qualcomm...

CVE-2014-9880

CVE-2014-9880 affects Android on Nexus 7 (2013) via Qualcomm drivers: the venc.c video engine fails to validate VEN_IOCTL_GET_SEQUENCE_HDR ioctl, enabling privilege escalation with a crafted app. Root cause: lack of validation in drivers/video/msm/vidc/common/enc/venc.c. Android bug 28769352 and ...

CVE-2015-3827

Android Stagefright: CVE-2015-3827 is a vulnerability in libstagefright’s MPEG4 covr handling. The MPEG4Extractor::parseChunk path does not validate the relationship between chunk sizes and skip sizes, causing an integer underflow that can lead to remote code execution or memory corruption via cr...

CVE-2015-6641

CVE-2015-6641: Bluetooth in Android 6.0 before 2016-01-01 allows a remote attacker who can pair with the device to obtain sensitive Contacts information. The vulnerability is discussed across multiple sources (NVD entry and Android Security Bulletin). The issue is tied to the Bluetooth implementa...

CVE-2015-8942

Summary of CVE-2015-8942 (CVE entry) : In Android on Nexus 6, the Qualcomm component driver at drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c fails to validate the stream state, enabling a local attacker with a crafted application to gain privileges. The issue is tied to the Qualcomm in...

CVE-2016-0820

CVE-2016-0820 concerns the MediaTek Wi‑Fi kernel driver in Android 6.0.1 prior to 2016-03-01. The root cause is a linear data‑section overflow due to insufficient bounds checking, enabling a local attacker to gain privileges in the kernel via a crafted app. The Android Nexus bulletin confirms thi...

CVE-2016-0824

The CVE-2016-0824 issue affects Android 6.x via the libmpeg2 component in libstagefright. The vulnerability arises in libmpeg2’s handling of crafted Bitstream data, enabling an information disclosure that could bypass a protection mechanism and grant Signature or SignatureOrSystem access. Affecte...

CVE-2016-1940

CVE-2016-1940 affects Mozilla Firefox on Android (pre-44.0). A data: URL mishandling during shortcut opening or BOOKMARK/intent processing allows remote attackers to spoof the address bar. Affected: Firefox on Android before 44.0. Impact: address-bar spoofing. Mitigation: upgrade to Firefox 44.0 ...

CVE-2016-2427

The CVE-2016-2427 entry concerns AES-GCM-ICVlen = 12 octets in the AES-GCM implementation used by Android 5.x–6.x. The NVD description cites a potential weakness that could defeat cryptographic protection and reveal an authentication key via a crafted app. However, Android’s vendor notes state th...

CVE-2016-2430

CVE-2016-2430 affects Android debuggerd: libbacktrace/Backtrace.cpp in debuggerd on Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01. A crafted symbol name can escalate privileges within the same device (local). Root cause: vulnerable Backtrace handling ...

CVE-2016-6749

CVE-2016-6749 is an information-disclosure vulnerability in Qualcomm components used by Android (GPU driver, power driver, SMSM Point-to-Point driver, and sound driver) that could let a local malicious app access data outside its permissions if a privileged process is compromised. Android ID A-30...

CVE-2017-0418

CVE-2017-0418 is an elevation of privilege in Android’s Audioserver that could allow a local malicious application to run arbitrary code in the context of a privileged process. Affected products are Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The provided documents consisten...

CVE-2017-0443

CVE-2017-0443 describes an elevation of privilege in the Qualcomm Wi‑Fi driver on Android, allowing a local malicious application to execute arbitrary code in the kernel context. The vulnerability requires compromising a privileged process to gain initial access, and affects Android devices using...

CVE-2017-0446

CVE-2017-0446: Elevation of privilege in the HTC touchscreen driver on Android kernel 3.18, allowing a local attacker to execute arbitrary code in kernel context. Exploitation requires compromising a privileged process and local access. Publicly available patch/fix details are not provided in the...

CVE-2017-0594

CVE-2017-0594 affects Android Mediaserver’s Mediaserver component, specifically codecs/aacenc/SoftAACEncoder2.cpp in libstagefright. The issue is an elevation of privilege vulnerability that could allow a local malicious application to execute arbitrary code within the context of a privileged pro...

CVE-2017-0625

The CVE-2017-0625 entry corresponds to an information disclosure vulnerability in the MediaTek command queue driver affecting Android. Connected CNVD records describe impact as local information disclosure enabling a malicious local app to access data outside its permissions, with Android version...

CVE-2017-0642

CVE-2017-0642 describes a remote denial-of-service in libhevc within Mediaserver on Android. The vulnerability can be triggered by processing a specially crafted media file, potentially causing the device to hang or reboot. Affected Android versions are 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7...

CVE-2017-0644

CVE-2017-0644 is an Android Mediaserver/Media framework DoS vulnerability. A specially crafted file could cause a device hang or reboot, enabling remote denial of service. Affected products/versions include Android 4.4.4–6.0.1. The issue is listed under the Android 2017-06-01 and 2017-06-05 patch...

CVE-2017-0679

CVE-2017-0679 is a remote code execution vulnerability in the Android media framework. Affected products/versions: Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. Description in CVE notes a remote code execution vulnerability within the Media framework, with impact described as requiring user interact...

CVE-2017-0719

CVE-2017-0719 is a remote code execution vulnerability in the Android media framework (mpeg2 decoder) affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The available descriptions consistently cite RCE via the media framework’s MPEG-2 decoding path; the exact root cause is not detailed in the p...

CVE-2017-0777

CVE-2017-0777 is an information-disclosure vulnerability in the Android media framework affecting Android 7.0, 7.1.1 and 7.1.2. The supplied documents state an information-disclosure issue but do not specify the exact root cause, vulnerable component versioning beyond the Android OS versions, or ...

CVE-2017-0778

CVE-2017-0778 is an information disclosure vulnerability in Android’s Media Framework affecting Android 7.0, 7.1.1, and 7.1.2. The description confirms affected product and versions; the root cause and precise vulnerable component/function are not detailed in the provided documents. The NVD entry...

CVE-2017-0798

CVE-2017-0798 is an elevation of privilege vulnerability in the MediaTek kernel within Android’s kernel. The issue affects MediaTek kernel components (kernel level) and is classified as an EoP with High impact, enabling a local attacker with some access to gain higher privileges. The CVE entry re...

CVE-2017-0820

CVE-2017-0820 is a DoS vulnerability in the Android media framework affecting Android versions 7.0, 7.1.1, 7.1.2 and 8.0. The issue is tracked in multiple feeds and is listed in the October 2017 Pixel/Nexus Security Bulletin under the Media framework with DoS as the type and NSI as the status. Th...

CVE-2017-0842

CVE-2017-0842 is an Elevation of Privilege vulnerability in Android Bluetooth affecting Android 6.0–8.0. The issue allows a local attacker to gain privileges within the system Bluetooth stack. Public sources classify it as EoP with HIGH severity (CVSS v3 base 7.8). The vulnerability is documented...

CVE-2017-0878

CVE-2017-0878 is a remote code execution vulnerability in Android's Media Framework (libhevc) affecting Android 8.0. The issue enables code execution in the context of a privileged process when a device processes a specially crafted media file. Public sources in the connected documents confirm th...

CVE-2017-13195

CVE-2017-13195 affects Android Media Framework (ihevcd_parse_headers.c: ihevcd_parse_sps). The issue arises when several parameter values could be negative, causing negative indexes and an infinite loop, enabling remote denial of service of a privileged system process with no privileges and no us...

CVE-2017-13196

CVE-2017-13196 affects Android’s Media Framework, caused by a dead loop in ihevcd_decode.c when processing incomplete frames. This can lead to memory leaks and a remote denial of service of a critical system process, without user interaction. Affected Android versions include 5.1.1, 6.0, 6.0.1, 7...

CVE-2017-13253

CVE-2017-13253 affects Android 8.0–8.1 via the Media framework CryptoPlugin::decrypt, where a missing bounds check in CryptoPlugin.cpp allows an out-of-bounds write. This can lead to local elevation of privilege, with user interaction required for exploitation. There is a patch listed in the Andr...

CVE-2017-13277

CVE-2017-13277 affects Android’s ihevcd_fmt_conv.c, with an out-of-bounds write due to a missing bounds check. This could enable remote code execution and requires user interaction to exploit. Affected versions include Android 6.0 through 8.1. The issue is documented in multiple sources, all attr...

CVE-2018-9398

The CVE-2018-9398 entry concerns the Mediatek FM radio driver (fm_set_stat) with an out-of-bounds write caused by improper input validation. Affected component: Mediatek FM radio driver; vulnerable function: fm_set_stat. Impact: local escalation of privilege with System execution privileges requi...

CVE-2018-9468

CVE-2018-9468 is a vulnerability in Android’s DownloadManager (DownloadManager.java, Framework) where a permissions bypass could permit reading/writing arbitrary files. This leads to local information disclosure and potential file rewriting without extra execution privileges, with exploitation no...

CVE-2018-9583

CVE-2018-9583 describes a remote code execution risk in the Android Bluetooth server due to an out-of-bounds write in bta_ag_parse_cmer (bta_ag_cmd.cc) across Android 7.0–9.0. Exploitation requires no user interaction and can occur over the network. The issue is listed in the Android Security Bul...

CVE-2019-2062

Summary of CVE-2019-2062 : A vulnerability in the Android 10 libxaac library allows an out-of-bounds write due to a missing bounds check. This can enable remote code execution with user interaction required for exploitation, as reported in multiple sources (NVD/Red Hat/CNVD) and reflected in Andr...

CVE-2019-20771

CVE-2019-20771 affects LG mobile devices running Android 7.x–9.x. The WapService component is vulnerable to unconfirmed configuration changes via a modified OMACP message, enabling change of device configuration without user confirmation. Root cause: unverified OMACP processing in WapService (LG ...

CVE-2019-2160

CVE-2019-2160 affects the Android 10 libxaac library, where a missing bounds check can cause an out-of-bounds read. This leads to potential information disclosure without executing code, with user interaction required for exploitation. The vulnerability is documented across multiple feeds (NVD/Re...