CVE-2022-20305

CVE-2022-20305 affects Android 13 ContentService. The issue is a missing permission check that allows a local attacker to disclose information about available account types. Exploitation requires user execution privileges but does not require user interaction. The CVSSv3.1 vector indicates a Loca...

CVE-2022-20290

CVE-2022-20290 affects Android 13 and involves a permissions bypass in the Midi component that can reveal private MIDI devices, enabling local privilege escalation without user interaction. Exploitation details are not provided in the supplied documents. The issue is associated with Android 13 se...

CVE-2022-21777

CVE-2022-21777 affects MediaTek Autoboot: a permission bypass caused by a missing permission check enables local escalation of privileges without user interaction. Multiple sources (NVD entry and Red Hat/CVE pages) describe the issue as allowing an attacker with local access to elevate privileges...

CVE-2022-21791

CVE-2022-21791 affects MediaTek camera ISP components, causing an out-of-bounds read due to a missing bounds check. This could enable local information disclosure with SYSTEM execution privileges needed and requires no user interaction. Patch ALPS06478059 (Issue ALPS06478059) has been issued; aff...

CVE-2022-26426

The CVE-2022-26426 entry concerns MediaTek’s camera ISP (in-camera image signal processor) with an out-of-bounds write caused by a missing bounds check. The vulnerability could allow local privilege escalation with System execution privileges, and does not require user interaction. Connected sour...

CVE-2022-33688

CVE-2022-33688 refers to a local-information-disclosure vulnerability in Samsung SecTelephonyProvider’s EventType, allowing a user with log access to extract IMSI from device logs prior to the SMR July 2022 Release 1. The issue is described across multiple feeds (NVD, Red Hat, CNVD, CVE records) ...

CVE-2022-33692

CVE-2022-33692 refers to an information-disclosure vulnerability in Samsung’s Message App on Samsung mobile devices. The available connected documents describe that prior to the SMR July 2022 Release 1, a local attacker could access IMSI and ICCID via logs produced by the Messaging application. T...

CVE-2022-38680

In CVE-2022-38680, the vulnerability is in the WLAN driver where a missing parameter check can allow local denial of service against WLAN services. Affected component: WLAN driver (details on exact versions not provided). Root cause: insufficient validation of parameters leading to resource disru...

CVE-2022-42769

CVE-2022-42769 concerns a vulnerability in the WLAN driver where a missing bounds check could enable local denial of service in WLAN services. Multiple connected sources corroborate a local impact through an out‑of‑bounds condition in the WLAN stack, with references to UNISOC chipset/WLAN context...

CVE-2022-47342

CVE-2022-47342: Affected via engineermode services on Unisoc chipsets; root cause is a missing permission check that allows local access to sensitive engineermode functionality, causing local denial of service. Impact is indicated as High for availability with local attack vector and low privileg...

CVE-2023-20607

CVE-2023-20607 affects the ccu component in MediaTek devices. The vulnerability is a memory corruption caused by a race condition, enabling local escalation of privilege with System execution privileges required. It does not require user interaction for exploitation. The issue is mitigated by Pat...

CVE-2023-20609

CVE-2023-20609 affects the MediaTek chip ccu component. The vulnerability is described as an out-of-bounds read caused by a logic error, potentially leading to local information disclosure with SYSTEM-level privileges required. Exploitation does not require user interaction. A patch is identified...

CVE-2023-20611

CVE-2023-20611 concerns a race-condition related use-after-free in the GPU component, leading to local escalation of privilege with SYSTEM privileges required and no user interaction. Patch ALPS07588678/ALPS07588678 is referenced. Multiple sources (NVD, Red Hat, CVE listings) corroborate the same...

CVE-2023-20661

CVE-2023-20661 affects the wlan component (MediaTek-related stack) and is caused by an out-of-bounds write resulting from an integer overflow. The vulnerability can lead to local privilege escalation with System execution privileges required and does not require user interaction. Reported impact ...

CVE-2023-20679

CVE-2023-20679 affects MediaTek WLAN in which a missing bounds check allows an out-of-bounds read, enabling local escalation of privilege without user interaction. Impact: confidentiality impact listed as high; privilege requirement is high with local attack vector, no UI interaction needed. Root...

CVE-2023-20704

The CVE-2023-20704 involves the apu component in MediaTek chips, where a missing bounds check can trigger an out-of-bounds read and local information disclosure without requiring user interaction. Affected element: apu on MediaTek hardware. Root cause: bounds-check omission leading to memory read...

CVE-2023-20733

CVE-2023-20733 affects the vcu component in MediaTek chips. The vulnerability is a use-after-free caused by improper locking, enabling local escalation of privilege with System execution privileges required. Exploitation details are not provided in the supplied documents. Patch ID ALPS07645149 (I...

CVE-2023-20745

The CVE-2023-20745 entry relates to the vcu module in MediaTek chips, where an out-of-bounds write can occur due to improper locking. This could enable local escalation of privilege to SYSTEM with no user interaction required. Available references consistently describe the issue as a local-privil...

CVE-2023-20802

In imgsys, a memory corruption vulnerability arises from improper input validation that could enable local escalation of privilege requiring System execution privileges. User interaction is needed for exploitation. A patch is identified (Patch ID: ALPS07420968; Issue ID: ALPS07420976). Public tec...

CVE-2023-20835

CVE-2023-20835 affects the camsys component and is described as a use-after-free introduced by a race condition, enabling local privilege escalation with System privileges required and no user interaction. Multiple connected records corroborate the issue, its local-exploitability, and the listed ...

CVE-2023-21146

CVE-2023-21146 affects the Android kernel. The described flaw is a use-after-free memory corruption that could enable local privilege escalation to SYSTEM with System execution privileges needed, and requires no user interaction. Exploitation details and concrete fixes are not provided in the sup...

CVE-2023-21167

CVE-2023-21167 affects Android 13, in DevicePolicyManagerService.setProfileName. The issue is an out-of-bounds/ missing bounds check that can crash the SystemUI menu, causing local denial of service without extra privileges and without user interaction. Public documents consistently frame this as...

CVE-2023-21205

CVE-2023-21205 is an Android 13 vulnerability affecting the function startWpsPinDisplayInternal in sta_iface.cpp, where unsafe deserialization can cause an out-of-bounds read. This leads to local information disclosure with no additional execution privileges required and does not require user int...

CVE-2023-21385

CVE-2023-21385 describes a memory corruption–related out-of-bounds read in Whitechapel that could enable local information disclosure without user interaction. The vulnerability is classified as a local issue with a high potential impact on confidentiality, per the NVD entry (CVSS v3.1: 5.5, MEDI...

CVE-2023-35648

CVE-2023-35648 affects Google Pixel baseband firmware through a missing bounds check in ProtocolMiscLceIndAdapter::GetConfLevel() within protocolmiscadapter.cpp. This causes an out-of-bounds read that could enable remote information disclosure and requires baseband firmware compromise, with no us...

CVE-2023-52536

CVE-2023-52536 involves a vulnerability in the faceid service where a missing bounds check allows an out-of-bounds read, potentially causing local denial of service with System execution privileges. Affected software is the faceid service in UNISOC chipsets; records cite a CVSS v3.1 base score of...

CVE-2024-20030

A security vulnerability exists in MediaTek chips (specifically referenced in relation to Mt6739 ) within the da module . The flaw is caused by improper input validation , which can result in local information disclosure . Exploitation requires System execution privileges , and no user interactio...

CVE-2024-20098

A security vulnerability exists in MediaTek chips due to a missing bounds check in the power module . This flaw can lead to an out-of-bounds write , potentially allowing for local escalation of privilege with System execution privileges required. Exploitation does not require user interaction. Wh...

CVE-2024-31328

A logic error in the broadcastIntentLockedTraced function within BroadcastController.java of the Framework component allows for the launching of arbitrary activities from the background on a paired companion phone. This vulnerability, affecting AOSP versions 14 and 16 , can lead to local escalati...

CVE-2024-39435

CVE-2024-39435 affects the Logmanager service. The root cause is a missing verification/input validation in the service, enabling local escalation of privilege without additional execution privileges. The available sources do not specify affected products/vendors beyond the Logmanager service, no...

CVE-2025-20787

A memory corruption vulnerability exists in MediaTek Chipsets within the display component due to a use after free (reuse after release) condition. This flaw could enable a malicious actor who has already obtained System privileges to achieve local escalation of privilege without requiring any us...

CVE-2026-0059

A heap buffer overflow vulnerability exists in multiple functions of the sdp_discovery.cc script within the Android operating system. This flaw allows an attacker to perform operations outside of the memory buffer, potentially leading to remote code execution (proximal/adjacent) without requiring...

CVE-2012-4222

CVE-2012-4222 refers to the Qualcomm KGSL kernel-mode driver in Android 2.3–4.2, where a crafted kgsl_ioctl input can trigger a NULL pointer dereference, causing DoS. Connected docs also cover CVE-2012-4220 (diagchar_core.c) and CVE-2012-4221 (diagchar_core.c/integer overflow) with local DIAG/DIA...

CVE-2015-3824

The entry CVE-2015-3824 concerns MPEG4Extractor::parseChunk in Android’s libstagefright (mediaserver). The flaw arises when processing MP4 tx3g atoms, where size calculations are not properly bounded, enabling remote attackers to cause memory corruption and potentially remote code execution or a ...

CVE-2015-6598

CVE-2015-6598 affects Android’s libstagefright (before 5.1.1 LMY48T). The issue is memory corruption in media processing, which could enable remote code execution or a denial of service when handling a crafted media file, potentially via mediaserver. Root cause centers on memory corruption within...

CVE-2015-8942

Summary of CVE-2015-8942 (CVE entry) : In Android on Nexus 6, the Qualcomm component driver at drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c fails to validate the stream state, enabling a local attacker with a crafted application to gain privileges. The issue is tied to the Qualcomm in...

CVE-2016-0820

CVE-2016-0820 concerns the MediaTek Wi‑Fi kernel driver in Android 6.0.1 prior to 2016-03-01. The root cause is a linear data‑section overflow due to insufficient bounds checking, enabling a local attacker to gain privileges in the kernel via a crafted app. The Android Nexus bulletin confirms thi...

CVE-2016-2430

CVE-2016-2430 affects Android debuggerd: libbacktrace/Backtrace.cpp in debuggerd on Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01. A crafted symbol name can escalate privileges within the same device (local). Root cause: vulnerable Backtrace handling ...

CVE-2017-0396

CVE-2017-0396 is an information-disclosure vulnerability in Android’s Mediaserver. It affects Mediaserver’s libeffects component (visualizer/EffectVisualizer.cpp) and could allow a local malicious app to access data beyond its permission level. Affected versions span Android 4.4.4 through 7.1.1. ...

CVE-2017-0399

CVE-2017-0399 describes an information-disclosure vulnerability in the Qualcomm audio post processor path: libeffects at lvm/wrapper/Bundle/EffectBundle.cpp. It could allow a local malicious Android app to access data outside its permission level. Affected Android versions are 5.0.2, 5.1.1, 6.0, ...

CVE-2017-0430

CVE-2017-0430 affects Android, involving an elevation of privilege in the Broadcom Wi‑Fi driver that could allow a local malicious application to execute arbitrary code in the kernel context. Affected components are Android kernels 3.10 and 3.18 with Broadcom Wi‑Fi driver involvement; the issue i...

CVE-2017-0448

CVE-2017-0448 is an information-disclosure vulnerability in the NVIDIA Tegra NVHOST kernel driver. The root cause is a memory handling flaw (use-after-free/memory after free) that can allow a local attacker to access data outside the process permissions. Affected stack: Android devices using Kern...

CVE-2017-0451

CVE-2017-0451 describes an information-disclosure vulnerability in the Qualcomm sound driver on Android. The issue enables a local malicious application to access data outside its granted permissions after compromising a privileged process. Affected components include Android kernels around 3.10 ...

CVE-2017-0769

CVE-2017-0769 is an Elevation of Privilege flaw in Android's media framework (libstagefright), affecting Android 7.0, 7.1.1, 7.1.2, and 8.0. The NVD entry lists it as a Local EoP with UI interaction required and high impact (C/H/I/A = High). Publicly disclosed details are limited to the affected ...

CVE-2017-0778

CVE-2017-0778 is an information disclosure vulnerability in Android’s Media Framework affecting Android 7.0, 7.1.1, and 7.1.2. The description confirms affected product and versions; the root cause and precise vulnerable component/function are not detailed in the provided documents. The NVD entry...

CVE-2017-0814

CVE-2017-0814 is an information-disclosure vulnerability in the Android media framework. The Pixel/Nexus bulletin lists this CVE under the Media framework component with a mitigation path via security patches at the 2017-10-05 patch level, addressing devices updated to Android 7.0, 7.1.1, 7.1.2, ...

CVE-2017-13195

CVE-2017-13195 affects Android Media Framework (ihevcd_parse_headers.c: ihevcd_parse_sps). The issue arises when several parameter values could be negative, causing negative indexes and an infinite loop, enabling remote denial of service of a privileged system process with no privileges and no us...

CVE-2017-13227

The CVE-2017-13227 issue affects the Android Autofill framework specifically stating that the package name provided by the app process is trusted inappropriately, leading to potential information disclosure with no additional privileges required. The description indicates a local attack vector wi...

CVE-2017-13277

CVE-2017-13277 affects Android’s ihevcd_fmt_conv.c, with an out-of-bounds write due to a missing bounds check. This could enable remote code execution and requires user interaction to exploit. Affected versions include Android 6.0 through 8.1. The issue is documented in multiple sources, all attr...

CVE-2018-9378

The AudioPolicyService component in Google Pixel and Google Nexus devices is vulnerable to a possible information disclosure due to uninitialized data within the BnAudioPolicyService::onTransact function of IAudioPolicyService.cpp. An attacker could exploit this flaw to leak sensitive information...