CVE-2022-20292

In Android 13 Settings, CVE-2022-20292 is described as a logic error that could bypass factory reset protections, enabling local escalation of privileges without additional privileges and with no user interaction required. Affected product: Android 13; vulnerable area: Settings. The issue is repo...

CVE-2022-20306

CVE-2022-20306 affects Android 13 via the Camera Provider HAL. The issue is a memory corruption due to a use-after-free in the Camera Provider HAL, enabling local elevation of privileges with SYSTEM rights and no user interaction required. The vulnerability impact is described as local EoP with h...

CVE-2022-20339

CVE-2022-20339 affects Android 13 and is caused by an insecure SEpolicy configuration that allows access to the network neighbor table, leading to local information disclosure of network topography with no additional execution privileges and no user interaction required. The incident is described...

CVE-2022-21761

CVE-2022-21761 affects the apusys driver, where an integer overflow can trigger a system crash. This could lead to local denial of service with SYSTEM privileges required and no user interaction. The reported remediation is patch ALPS06479532 (Issue ALPS06479532). The connected sources confirm th...

CVE-2022-21765

CVE-2022-21765 affects the CCCI component. The root cause is a missing bounds check that enables an out-of-bounds write, leading to local escalation of privilege with SYSTEM-level execution rights. Exploitation reportedly does not require user interaction. A patch is referenced (Patch ID: ALPS066...

CVE-2022-21773

CVE-2022-21773 describes a use-after-free in the TEEI driver caused by a race condition, enabling local escalation of privilege to System level without user interaction. Affected component: TEEI driver (details aligned with vendor advisories). The vulnerability could be triggered via a race in th...

CVE-2022-26452

CVE-2022-26452 affects the isp component, describing a use-after-free caused by improper locking. The vulnerability enables local escalation of privilege with System execution privileges required and does not require user interaction. The available connected documents consistently cite a patch id...

CVE-2022-26468

CVE-2022-26468: Out-of-bounds write in the preloader (usb) on MediaTek devices due to a missing bounds check. This can lead to local privilege escalation with physical access and requires user interaction for exploitation. Patch ID ALPS07168125/Issue ALPS07168125 appears in the record; no specifi...

CVE-2022-32612

CVE-2022-32612 concerns a possible memory-use-after-free in the MediaTek/vcu stack caused by a race condition. Reported as enabling local escalation of privilege with System execution privileges required and no user interaction needed. Multiple sources confirm the issue, but public details about ...

CVE-2022-36862

CVE-2022-36862 is a heap-based overflow in HWR::EngineCJK::Impl::Construct() within libSDKRecognitionText.spensdk.samsung.so, affecting Samsung mobile/S pen SDK components prior to the SMR Sep-2022 Release 1. The root cause is a heap overflow that can cause a memory access fault. Public exploitat...

CVE-2022-39087

CVE-2022-39087 involves a missing permission check in a network service that could allow local escalation of privilege to System execution level. The CVE is linked across multiple feeds to a UNISOC chipset context, suggesting the issue affects a network-service component on UNISOC-based devices, ...

CVE-2022-44444

The CVE-2022-44444 entry concerns a vulnerability in the WLAN driver caused by a missing bounds check. Affects the WLAN driver component and could lead to local denial of service in WLAN services. Exploitation details, affected versions, and a confirmed patch/remediation are not disclosed in the ...

CVE-2022-44447

The CVE-2022-44447 vulnerability affects the wlan driver (reported across multiple feeds) due to a missing bounds check that can cause a NULL pointer dereference, leading to local denial of service in wlan services. The issue is characterized by local attack vector, low complexity, and no user in...

CVE-2022-47362

CVE-2022-47362 affects telecom service with a missing permission check, enabling local denial of service. Documented in multiple feeds (NVD/Red Hat/PRION/Gov sources) reports: local exploit possibility; exploitation status not detailed. Some references indicate no disclosed fix version; PT-Securi...

CVE-2022-47455

CVE-2022-47455 relates to the UNISOC WLAN driver, where a missing parameter check in the WLAN subsystem can cause local denial of service to WLAN services. Affected software is described as the WLAN driver in UNISOC chipsets; the root cause is a lack of validation for input parameters. The CVE no...

CVE-2022-47465

CVE-2022-47465 affects the vdsp service, where a missing permission check can cause local denial of service. The CVE description and multiple sources confirm a local, low-privilege issue with no required user interaction, resulting in availability impact. Exploitation details are not provided in ...

CVE-2022-47471

CVE-2022-47471: A missing permission check in the telephony service can lead to local information disclosure without extra privileges. The core issue is in the telephony module; evidence across sources (NVD/Red Hat/ CVE listings) describes a LOCAL attack with high confidentiality impact (C:H, I:N...

CVE-2022-47480

CVE-2022-47480 concerns a missing permission check in the telephony service, causing a local denial of service with no extra privileges required. Documents refer to telephony modules (e.g., UNISOC chipsets) but do not specify affected products, versions, or a patch. The CVSSv3.1 base score is 5.5...

CVE-2023-20614

CVE-2023-20614 affects MediaTek devices in the ril component, where a missing bounds check allows an out-of-bounds write that can escalate to SYSTEM level privileges locally without user interaction. The root cause is a bounds-check omission in ril, enabling a write beyond intended memory. The vu...

CVE-2023-20738

CVE-2023-20738 affects the vcu component in MediaTek chips, caused by a missing bounds check that permits an out-of-bounds write. The vulnerability can lead to local escalation of privilege with SYSTEM-level execution, and exploitation does not require user interaction. Public references consiste...

CVE-2023-20744

The CVE-2023-20744 vulnerability affects the vcu module in MediaTek chips. It is described as a use-after-free caused by a logic error, enabling local escalation of privilege with System execution privileges required and no user interaction needed. Connected documents corroborate a fault in vcu w...

CVE-2023-20796

The CVE-2023-20796 vulnerability affects MediaTek devices in the power module. It is a memory corruption issue caused by an incorrect bounds check, leading to local denial of service with system execution privileges required; no user interaction is needed. A patch is available (ALPS07929790). Exp...

CVE-2023-21159

CVE-2023-21159 affects the Android kernel component, specifically a missing bounds check in the Parse function of simdata.cpp, causing an out-of-bounds write that could enable local escalation of privilege with System-level execution rights and no user interaction required. In available connected...

CVE-2023-21376

CVE-2023-21376 affects Android Telephony and is described as a logic error that allows local information disclosure by retrieving the ICCID without requiring user interaction. The primary impact is information disclosure with a high confidentiality impact and no demonstrated exploitation details ...

CVE-2023-42739

CVE-2023-42739 affects the engineermode service, where a missing permission check could allow an app to write permission usage records. This enables local escalation of privilege with no extra execution privileges required. Documented impact is HIGH (CVSS v3.1: AV=L, AC=L, PR=L, UI=N, S=U, C=H, I...

CVE-2025-20671

CVE-2025-20671 concerns MediaTek chipsets. The issue is an out-of-bounds write caused by a race condition in the thermal subsystem, enabling local escalation of privilege for an attacker already with System privileges. Exploitation reportedly does not require user interaction. A patch is listed (...

CVE-2025-20767

A security vulnerability exists in MediaTek Chipsets caused by an integer overflow within the display component. This flaw can lead to an out-of-bounds write , potentially allowing for local escalation of privilege if a malicious actor has already obtained System privileges. Exploitation does not...

CVE-2026-0043

The Google Android operating system is affected by an integer overflow vulnerability in multiple functions of the ubsan_throwing_runtime.cpp component. This flaw can lead to a persistent denial of service or a local escalation of privilege without requiring additional execution privileges or user...

CVE-2014-9795

CVE-2014-9795 affects the Android/Qualcomm stack on Nexus 5: the aboot.c implementation in Qualcomm components fails to properly guard against an integer overflow when processing crafted start/size values, enabling a local attacker to bypass access restrictions. The issue is tied to Android inter...

CVE-2015-3828

CVE-2015-3828 affects Android’s libstagefright MPEG4Extractor.cpp, where MPEG4Extractor::parse3GPPMetaData does not enforce a minimum size for UTF-16 strings containing a BOM. This can enable a remote attacker to execute arbitrary code or cause a denial of service (integer underflow and memory co...

CVE-2015-3845

CVE-2015-3845 affects Android Binder’s Parcel handling: the Parcel::appendFrom function in libs/binder/Parcel.cpp does not consider parcel boundaries when identifying binder objects, in Android versions before 5.1.1 LMY48M. The underlying flaw can allow a crafted application to obtain privileges ...

CVE-2015-6641

CVE-2015-6641: Bluetooth in Android 6.0 before 2016-01-01 allows a remote attacker who can pair with the device to obtain sensitive Contacts information. The vulnerability is discussed across multiple sources (NVD entry and Android Security Bulletin). The issue is tied to the Bluetooth implementa...

CVE-2016-0835

Summary (CVE-2016-0835): Affects mediaserver on Android 6.x (decoder/impeg2d_dec_hdr.c). A crafted media file can trigger a negative-value path in the MPEG-2 decoding header, causing memory corruption and enabling remote code execution or a denial of service. The issue is exploitable remotely via...

CVE-2016-0841

CVE-2016-0841 affects media/libmedia/mediametadataretriever.cpp in Android mediaserver across 4.x–6.x releases, where cleared service binders are mishandled. The vulnerability allows remote attackers to execute arbitrary code or cause memory corruption by feeding a crafted media file, as describe...

CVE-2016-1621

CVE-2016-1621 affects libvpx in mediaserver on Android (4.x before 4.4.4; 5.x before 5.1.1; 6.0 before 2016-03-01). Root cause: memory corruption in mediaserver triggered by processing crafted media files, linked to libwebm/mkvparser.cpp. Impact: remote code execution or denial of service within ...

CVE-2016-2441

Technical details for CVE-2016-2441 are not publicly provided in the connected documents. The initial description only notes privilege escalation via the Qualcomm buspm driver on Nexus devices. Monitor for updates.

CVE-2016-2504

CVE-2016-2504 concerns the Qualcomm KGSL GPU driver in Android prior to 2016-08-05 on Nexus devices (5, 5X, 6, 6P, 7 (2013)). The issue is a local privilege-escalation vulnerability due to a use-after-free flaw in the KGSL driver (kgsl_mem_entry) that can be triggered by a crafted app, allowing a...

CVE-2016-3861

CVE-2016-3861 involves LibUtils on Android (4.x up to 4.4.4; 5.x; 6.x up to 2016-09-01; 7.0 before 2016-09-01) where conversions between Unicode encodings of different widths are mishandled, allowing remote code execution or a heap-based buffer overflow via a crafted file. Exploitation is evidenc...

CVE-2016-6784

CVE-2016-6784 is an elevation of privilege vulnerability in the MediaTek driver affecting Android. The MediaTek driver could allow a local malicious application to execute arbitrary code in the kernel context. The issue is classified as High because exploitation requires compromising a privileged...

CVE-2017-0326

CVE-2017-0326 affects the NVIDIA Tegra kernel driver (Tegra Display Controller). The vulnerability stems from copying an input buffer to an output buffer without checking input size, potentially enabling a denial of service. Affected component: NVIDIA Tegra kernel/Video driver; root cause: missin...

CVE-2017-0394

CVE-2017-0394 is a denial-of-service vulnerability in Android’s Telephony, allowing a remote attacker to cause a device hang or reboot. Affected are Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The initial records do not provide exploit details or a confirmed root-cause description ...

CVE-2017-0436

Summary of CVE-2017-0436 (Qualcomm sound driver privilege escalation) : The vulnerability affects Android, specifically the Qualcomm sound driver within kernel contexts (kernel versions 3.10 and 3.18). It enables a local, malicious application to elevate privileges and execute arbitrary code in t...

CVE-2017-0443

CVE-2017-0443 describes an elevation of privilege in the Qualcomm Wi‑Fi driver on Android, allowing a local malicious application to execute arbitrary code in the kernel context. The vulnerability requires compromising a privileged process to gain initial access, and affects Android devices using...

CVE-2017-0445

CVE-2017-0445 is a kernel-privilege elevation in the HTC touchscreen driver affecting Google Pixel/Pixel XL devices (Android kernel 3.18). The connected CNVD entry confirms an HTC touchscreen driver flaw allowing a local malicious app to execute code in kernel context, i.e., a local privilege esc...

CVE-2017-0549

CVE-2017-0549 describes a remote denial-of-service vulnerability in Mediaserver’s libavc component used by Android. A specially crafted file could cause memory/processing issues in Mediaserver, allowing a device hang or reboot. Affected products/versions cited: Android 6.0, 6.0.1, 7.0, 7.1.1. The...

CVE-2017-0597

CVE-2017-0597 (Audioserver elevation of privilege) affects Android where a local malicious app could execute code in the context of a privileged process via the Audioserver. Affected products/versions include Android 4.4.4 through 7.1.2. The root cause is a privilege-escalation vulnerability with...

CVE-2017-0598

CVE-2017-0598 is an information-disclosure vulnerability in Android’s Framework APIs. The flaw could allow a local malicious application to bypass OS data isolation protections and access data from other apps. Affected products/versions, per authoritative sources, include Android 4.4.4 through 7....

CVE-2017-0759

CVE-2017-0759 is a Remote Code Execution vulnerability in Android’s media framework (libstagefright) affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The issue is associated with the Media Framework component and is reported in multiple sources (NVD entry for CVE-2017-0759; Android Security B...

CVE-2017-0763

CVE-2017-0763 is a remote code execution vulnerability in Android’s media framework libhevc. Affected products include Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0. The root cause is a flaw in the media framework’s HEVC decoding path that could allow an attacker to run ar...

CVE-2017-0796

CVE-2017-0796 is an Elevation of Privilege in the MediaTek AUXADC driver within the Android kernel. Affected component: MediaTek AUXADC driver (on Android devices). Root cause: unspecified in the provided text beyond the vendor/product mapping; the entry states elevation of privilege. Impact acco...