CVE-2022-42769

CVE-2022-42769 concerns a vulnerability in the WLAN driver where a missing bounds check could enable local denial of service in WLAN services. Multiple connected sources corroborate a local impact through an out‑of‑bounds condition in the WLAN stack, with references to UNISOC chipset/WLAN context...

CVE-2022-42778

The CVE-2022-42778 entry concerns a missing permission check in the Windows Manager Service, described across multiple sources. The root cause is that the service could be set up without requiring additional execution privileges, enabling potential unauthorized setup. Documents consistently ident...

CVE-2022-47366

CVE-2022-47366 concerns the wlan driver, where a missing bounds check enables an out-of-bounds write. The vulnerability could cause a local denial of service in wlan services. Documents consistently describe the issue, but do not provide concrete product versions, patches, or mitigations within t...

CVE-2022-48369

CVE-2022-48369 affects UNISOC chipsets’ audio service, where a missing permission check in the audio service acts as the root cause. The vulnerability enables local privilege escalation (privileges required: low; attack vector: local; user interaction: none) with impact on confidentiality, integr...

CVE-2023-20616

CVE-2023-20616 describes a type-confusion related out-of-bounds read in ion that could enable local privilege escalation with SYSTEM privileges; exploitation requires no user interaction. A patch is identified (ALPS07560720/ALPS07560720). The connected documents do not specify exact vendor/produc...

CVE-2023-20716

CVE-2023-20716 concerns the wlan component in MediaTek chips, where an out-of-bounds write occurs due to a missing bounds check in the WLAN driver. This can lead to local escalation of privileges with System execution rights, and no user interaction is required. Reported patch: ALPS07796883 (Issu...

CVE-2023-20742

CVE-2023-20742 affects the ril module in MediaTek devices, with an out-of-bounds read caused by a missing bounds check. This could lead to local information disclosure and, potentially, system execution privileges, with no user interaction required. The vulnerability is documented across multiple...

CVE-2023-20826

CVE-2023-20826 describes a vulnerability in the CTA component where a missing permission check allows local information disclosure without additional execution privileges. Exploitation is not dependent on user interaction listed in the report, and the issue is classified with a LOCAL attack vecto...

CVE-2023-21315

CVE-2023-21315 describes a heap-based out-of-bounds read in Bluetooth that could cause remote information disclosure without require­ing privileges or user interaction. The NVD entry assigns CVSSv3.1: AV=Adjacent, AC=L, PR=NONE, UI=NONE, S=U, C=H, I=N, A=N with a base score of 6.5 (Medium). The A...

CVE-2023-21364

CVE-2023-21364 affects Android’s ContactsProvider, causing a crash loop through resource exhaustion that can lead to local persistent DoS in the Phone app. The vulnerability is connected to the ContactsProvider component and is exploitable with local access and low privileges, without user intera...

CVE-2023-21398

CVE-2023-21398 affects the Android ecosystem with a logic error in the sdksandbox component that enables a strandhogg-style overlay attack, leading to local elevation of privilege without extra execution privileges and with no user interaction required. Multiple sources (NVD, Red Hat, CNVD, CN) d...

CVE-2023-32825

The CVE-2023-32825 entry documents an out-of-bounds read in the bluethooth service due to improper input validation, enabling local information disclosure without user interaction. The vulnerability affects the bluethooth component described in the MediaTek context and is associated with patch AL...

CVE-2023-40652

CVE-2023-40652 concerns the jpg driver failing due to an out-of-bounds write caused by improper input validation. The vulnerability allows local denial of service with System execution privileges required, as stated in the NVD entry. Connected records corroborate the issue location but do not pro...

CVE-2023-42654

CVE-2023-42654 affects Unisoc-based systems where the dm service lacks a required permission check, leading to local information disclosure. The NVD entry notes a Local attack vector with LOW privileges required and no user interaction, but excluding any impact on integrity or availability. Sever...

CVE-2023-52536

CVE-2023-52536 involves a vulnerability in the faceid service where a missing bounds check allows an out-of-bounds read, potentially causing local denial of service with System execution privileges. Affected software is the faceid service in UNISOC chipsets; records cite a CVSS v3.1 base score of...

CVE-2024-20138

CVE-2024-20138 concerns the WLAN driver in affected MediaTek MediaTek-based chipsets, where improper input validation can cause an out-of-bounds read. This leads to remote information disclosure without additional privileges and without user interaction. The issue is documented across multiple so...

CVE-2025-20652

CVE-2025-20652 describes a potential out-of-bounds read in V5 DA caused by a missing bounds check, leading to local information disclosure. Exploitation requires physical access to the device and does not require prior execution privileges, with user interaction needed for exploitation. A patch i...

CVE-2025-20671

CVE-2025-20671 concerns MediaTek chipsets. The issue is an out-of-bounds write caused by a race condition in the thermal subsystem, enabling local escalation of privilege for an attacker already with System privileges. Exploitation reportedly does not require user interaction. A patch is listed (...

CVE-2026-0041

In the connected disclosures, CVE-2026-0041 is tied to an integer overflow in multiple functions of ubsan_throwing_runtime.cpp, causing a UBSan failure that can lead to remote denial of service without extra privileges or user interaction. PT-2026-4712 explicitly flags Chromium as affected, notin...

CVE-2014-9786

CVE-2014-9786 describes a heap-based buffer overflow in the Qualcomm camera actuator driver (drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c) within Android on Nexus 5 and 7 (2013) devices prior to 2016-07-05. The underlying fault allows a crafted application to escalate privi...

CVE-2015-3828

CVE-2015-3828 affects Android’s libstagefright MPEG4Extractor.cpp, where MPEG4Extractor::parse3GPPMetaData does not enforce a minimum size for UTF-16 strings containing a BOM. This can enable a remote attacker to execute arbitrary code or cause a denial of service (integer underflow and memory co...

CVE-2015-6634

CVE-2015-6634 concerns memory corruption/remote code execution in Android’s display drivers prior to 5.1.1 LMY48Z when processing a crafted media file. The vulnerability, tracked as internal bug 24163261, could allow remote attackers to execute arbitrary code or cause a denial of service via medi...

CVE-2016-0819

CVE-2016-0819 affects the Qualcomm performance component in Android, with exploitation possible by a crafted application to gain privileges in the kernel. Affected versions are Android 4.x up to 4.4.3, 5.x up to 5.1.0 LMY49H, and 6.x before 2016-03-01. The issue is described as an elevation-of-pr...

CVE-2016-2489

CVE-2016-2489 is an elevation-of-privilege vulnerability in the Qualcomm video driver for Android, affecting Nexus devices (Nexus 5, 5X, 6, 6P) before 2016-06-01. A crafted local application could trigger memory/cpu access in the Qualcomm video driver, enabling code execution with kernel privileg...

CVE-2016-3861

CVE-2016-3861 involves LibUtils on Android (4.x up to 4.4.4; 5.x; 6.x up to 2016-09-01; 7.0 before 2016-09-01) where conversions between Unicode encodings of different widths are mishandled, allowing remote code execution or a heap-based buffer overflow via a crafted file. Exploitation is evidenc...

CVE-2017-0415

CVE-2017-0415 is an elevation of privilege in Android’s Mediaserver. A local attacker could exploit this to run arbitrary code with privileged process rights. Affected versions: Android 6.0, 6.0.1, 7.0, 7.1.1 (Mediaserver). The provided connected documents identify the issue but do not specify a ...

CVE-2017-0420

CVE-2017-0420 is an information-disclosure vulnerability in AOSP Mail. A local malicious app could bypass OS protections that isolate app data, potentially accessing data from other apps. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The connected sources conf...

CVE-2017-0436

Summary of CVE-2017-0436 (Qualcomm sound driver privilege escalation) : The vulnerability affects Android, specifically the Qualcomm sound driver within kernel contexts (kernel versions 3.10 and 3.18). It enables a local, malicious application to elevate privileges and execute arbitrary code in t...

CVE-2017-0448

CVE-2017-0448 is an information-disclosure vulnerability in the NVIDIA Tegra NVHOST kernel driver. The root cause is a memory handling flaw (use-after-free/memory after free) that can allow a local attacker to access data outside the process permissions. Affected stack: Android devices using Kern...

CVE-2017-0451

CVE-2017-0451 describes an information-disclosure vulnerability in the Qualcomm sound driver on Android. The issue enables a local malicious application to access data outside its granted permissions after compromising a privileged process. Affected components include Android kernels around 3.10 ...

CVE-2017-0466

CVE-2017-0466 is a remote code execution vulnerability in Android’s Mediaserver. A specially crafted file could trigger memory corruption during media file and data processing, allowing an attacker to execute code within the Mediaserver process. Affected products/versions are Android 6.0, 6.0.1, ...

CVE-2017-0486

CVE-2017-0486 describes a denial-of-service vulnerability in Android’s Mediaserver. A specially crafted file could cause a device Hang or Reboot on affected Android versions (6.0, 6.0.1, 7.0, 7.1.1). The issue is described as High severity; attack vector is listed as Local (per CVSS3) with user i...

CVE-2017-0668

The CVE-2017-0668 entry describes an information disclosure vulnerability in the Android framework affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID A-22011579). The connected sources re-iterate that this is an information disclosure issue in Framework/...

CVE-2017-0759

CVE-2017-0759 is a Remote Code Execution vulnerability in Android’s media framework (libstagefright) affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The issue is associated with the Media Framework component and is reported in multiple sources (NVD entry for CVE-2017-0759; Android Security B...

CVE-2017-0796

CVE-2017-0796 is an Elevation of Privilege in the MediaTek AUXADC driver within the Android kernel. Affected component: MediaTek AUXADC driver (on Android devices). Root cause: unspecified in the provided text beyond the vendor/product mapping; the entry states elevation of privilege. Impact acco...

CVE-2017-0863

CVE-2017-0863 is an elevation-of-privilege vulnerability in the Upstream kernel video driver affecting the Android kernel on Pixel/Nexus devices. The issue enables a local attacker to escalate privileges (local exploit, low attack complexity, no user interaction), with partial confidentiality, in...

CVE-2017-8260

CVE-2017-8260 is a Qualcomm component issue mapped to the Camera driver in Qualcomm parts. Root cause: a type downcast in CAF Linux kernel code allows a value to bypass validation, enabling an out-of-bounds write. Impact: local kernel context elevation via the Camera driver (per the CVE entry in ...

CVE-2018-9364

CVE-2018-9364 corresponds to an Elevation of Privilege in the LG LGLAF bootloader component. The connected sources indicate the issue involves a special command that permitted modification of certain partitions, enabling bypass of secure boot. The Red Hat and Android bulletin entries corroborate ...

CVE-2018-9374

CVE-2018-9374 affects Android’s PackageManagerService.java, specifically installPackageLI, enabling a possible permissions bypass that could lead to local elevation of privilege. Exploitation would require local user privileges with no user interaction, per the CVE description. The issue is liste...

CVE-2018-9376

CVE-2018-9376 affects the Mediatek ECCCI Port RPC kernel code (drivers/misc/mediatek/eccci/port_rpc.c). The root cause is an incorrect bounds check that can lead to an out-of-bounds write. This may allow local escalation of privilege with System execution privileges, and exploitation does not req...

CVE-2018-9393

CVE-2018-9393 affects the MTK WLAN driver: a possible out-of-bounds write in procfile_write() of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c due to a missing bounds check. This can lead to local privilege escalation with System execution privileges; exploitation reportedly doe...

CVE-2018-9400

The CVE-2018-9400 issue affects Mediatek GT1151 touchscreen drivers (GT1151/gt1x_generic.c and gt1x_tools.c). Root cause: missing bounds check enabling an out-of-bounds write in gt1x_debug_write_proc and gt1x_tool_write. Impact: local escalation of privilege with System execution privileges requi...

CVE-2018-9404

The CVE-2018-9404 issue affects Google Pixel/Nexus devices and is centered on the oemCallback function in ril.cpp, where an out-of-bounds write can result from an integer overflow. This could enable local elevation of privilege with System execution privileges required, and exploitation does not ...

CVE-2018-9462

CVE-2018-9462 describes an out-of-bounds write in the Android kernel component ftm4_pdc.c, within the store_cmd function, caused by an incorrect bounds check. This can enable local escalation of privilege to system execution privileges, with no user interaction required. The description specifies...

CVE-2018-9492

CVE-2018-9492 concerns Android’s ActivityManagerService.checkGrantUriPermissionLocked, where a permissions bypass could allow local elevation of privilege without user interaction. Affected Android versions are 8.0, 8.1, and 9.0. The vulnerability’s impact is a local, privilege-escalation risk; t...

CVE-2018-9527

The CVE-2018-9527 issue affects Android’s Media framework, specifically in vorbis_book_decodev_set of codebook.c, where a missing bounds check can cause an out-of-bounds write. This could enable remote code execution with no extra privileges, requiring user interaction to exploit. Affected versio...

CVE-2018-9549

CVE-2018-9549 is a concrete Android vulnerability in the Media Framework (lppTransposer function in lpp_tran.cpp) caused by a missing bounds check that enables a remote code execution via a crafted file. It affects Android versions 7.0 (Nougat) through 9 (Pie). The Android bulletin identifies it ...

CVE-2018-9586

The CVE-2018-9586 issue affects Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1 and 9.0. It stems from a race condition in InstallPackageTask.java that can leave package verification turned off, enabling local elevation of privilege with no extra execution privileges or user interaction required. Affected pr...

CVE-2019-2050

CVE-2019-2050 affects Android 8.0–9 due to a use-after-free in tearDownClientInterface() within WificondControl.java caused by improper locking. This enables local elevation of privilege with no additional execution privileges and no user interaction required. Public docs indicate a platform-wide...

CVE-2019-2063

CVE-2019-2063 affects Android 10 via libxaac where an out-of-bounds write is caused by a missing bounds check. The issue can lead to remote code execution in the media server, requiring user interaction to exploit. The CVE is documented by NVD with a high-severity vector (CVSS 3.1: AV:N/AC:L/PR:N...