CVE-2017-13218

The CVE-2017-13218 entry documents a side-channel information-disclosure vulnerability caused by access to CNTVCT_EL0 in various ARM-based devices (e.g., Small Cell SoC, Snapdragon lines). Affected components include listed CPUs/SoCs (FSM9055, IPQ4019, IPQ8064, MDM9xxx, SD series, etc.) and relat...

CVE-2017-6284

CVE-2017-6284 describes a vulnerability in NVIDIA Security Engine’s DRBG where initialization/storage of sensitive data is flawed and encryption is weakened, potentially leading to information disclosure. NVIDIA’s NVIDIA Jetson TX1/TX2 Linux for Tegra updates (R28.3) address multiple issues inclu...

CVE-2018-5841

CVE-2018-5841 affects Qualcomm DCC (display/graphics driver) within Android CAF releases. The root cause is that dcc_curr_list is initialized to a default invalid value, which is intended to be programmed via a sysfs node; this could allow an elevation of privilege (EoP) when the value is imprope...

CVE-2018-9353

CVE-2018-9353 affects the ihevcd_parse_slice_data function in ihevcd_parse_slice.c used by Google Android. The root cause is a missing bounds check that enables a heap buffer out-of-bounds read, allowing remote denial of service with no single execution privilege required. Exploitation requires u...

CVE-2018-9365

A Remote Code Execution (RCE) vulnerability exists in the System component of Google Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1 . The root cause is a missing bounds check in the smp_data_received function of smp_l2c.cc, which can lead to an out-of-bounds read followed by code ex...

CVE-2018-9374

CVE-2018-9374 affects Android’s PackageManagerService.java, specifically installPackageLI, enabling a possible permissions bypass that could lead to local elevation of privilege. Exploitation would require local user privileges with no user interaction, per the CVE description. The issue is liste...

CVE-2018-9471

The Google Android Framework component is vulnerable to a type confusion issue in the deserialization constructor of NanoAppFilter.java . This flaw could allow a local attacker to achieve a local escalation of privilege in the system server without requiring additional execution privileges or use...

CVE-2018-9492

CVE-2018-9492 concerns Android’s ActivityManagerService.checkGrantUriPermissionLocked, where a permissions bypass could allow local elevation of privilege without user interaction. Affected Android versions are 8.0, 8.1, and 9.0. The vulnerability’s impact is a local, privilege-escalation risk; t...

CVE-2018-9527

The CVE-2018-9527 issue affects Android’s Media framework, specifically in vorbis_book_decodev_set of codebook.c, where a missing bounds check can cause an out-of-bounds write. This could enable remote code execution with no extra privileges, requiring user interaction to exploit. Affected versio...

CVE-2019-11516

CVE-2019-11516 affects the Bluetooth stack in Cypress/Broadcom Wireless IoT. The issue arises from improper handling of Extended Inquiry Responses (EIRs): RFU bits are not discarded in eir_handleRx(), causing EIR length overflow beyond 240 bytes and a heap-based overflow in eir_getReceivedEIR() i...

CVE-2019-1992

CVE-2019-1992 affects Android. In the code path bta_hl_sdp_query_results within bta_hl_main.cc a race condition can cause a use-after-free, leading to remote code execution with no extra privileges needed. The issue is tied to Android versions 7.0–7.1.2, 8.0, 8.1, and 9 (Android ID: A-116222069)....

CVE-2019-9257

CVE-2019-9257 affects Android 10 Bluetooth stack. The flaw is an out-of-bounds write caused by an integer overflow in Bluetooth, enabling local escalation of privilege with no user interaction required. Affected component: Bluetooth handling in Android 10; impact is local attacker privilege escal...

CVE-2019-9283

CVE-2019-9283 affects the Android 10 AAC Codec, where a vulnerability in input validation can cause resource exhaustion leading to a remote Denial of Service. The impact is DoS with high availability impact, and exploitation requires user interaction. The root cause is improper input validation w...

CVE-2019-9356

CVE-2019-9356 affects Android 10 NFC server and is caused by a missing bounds check that enables an out-of-bounds read. This can lead to local information disclosure with no additional execution privileges required, and user interaction is needed for exploitation. The issue is documented in Andro...

CVE-2019-9380

CVE-2019-9380 affects Android 10, specifically a spoofing vulnerability in the Settings UI due to a missing permission check in the Framework. The underlying issue could allow a user to inadvertently change permission settings without additional execution privileges. Exploitation requires user in...

CVE-2019-9408

CVE-2019-9408 affects Android 10 via the libavc component in the Media Framework. Root cause: uninitialized data in libavc can lead to information disclosure. Impact: remote information disclosure without full execution privileges; CVSS notes show confidentiality impact (PARTIAL to HIGH) dependin...

CVE-2019-9430

CVE-2019-9430 is a Bluetooth vulnerability affecting Android 10 where a null pointer dereference due to a missing null check could enable remote DoS without user interaction. The issue is described as a Bluetooth component failure in Android 10, with the root cause categorized as a null pointer d...

CVE-2020-0006

CVE-2020-0006 affects Android 8.0–10, with a heap information-disclosure in rw_i93_send_cmd_write_single_block (rw_i93.cc). The underlying issue is uninitialized data leading to remote information disclosure in the NFC server; exploitation requires user interaction. Impact per the sources is info...

CVE-2020-0033

CVE-2020-0033 involves an out-of-bounds write in CryptoPlugin::decrypt (CryptoPlugin.cpp) causing local elevation of privilege on Android. The issue arises from a stale pointer in the CryptoPlugin decryption path, requiring LOCAL access with LOW attack complexity and no user interaction (per CVSS...

CVE-2020-0036

CVE-2020-0036 is an Android Elevation of Privilege issue described in the Android Security Bulletin as part of the System section. In PermissionMonitor.hasPermissions, there is a permissions bypass that could allow a local malicious actor to access restricted permissions without additional execut...

CVE-2020-10831

The provided documents identify CVE-2020-10831 as affecting Samsung mobile devices running O(8.x), P(9.0), and Q(10.0) software, where attackers can trigger an update to arbitrary touch‑screen firmware. The root cause and exact vulnerable component are not elaborated in the supplied sources, and ...

CVE-2020-11605

CVE-2020-11605 affects Samsung mobile devices running O(8.x), P(9.0), and Q(10.0). The issue is a sensitive information exposure from dumpstate in NFC logs. Root cause details are not explicitly provided in the connected documents beyond the exposure description. What is vulnerable: the NFC-relat...

CVE-2020-26604

CVE-2020-26604 affects Samsung Android SystemUI across O(8.x) to R(11.0). The issue enables a network-sourced attack via PendingIntent where an unprivileged process can access contact numbers. Affected component: SystemUI on Samsung devices; root cause: incorrect handling of PendingIntent permiss...

CVE-2020-28340

Samsung CVE-2020-28340 affects mobile devices running O(8.x) to R(11.0) and describes a vulnerability that allows bypassing Factory Reset Protection via Secure Folder (Samsung ID SVE-2020-18546). NVD reports CVSSv3.1 base score 9.8 (CRITICAL) and CVSSv2 base score 7.5 (HIGH); attack vector NETWOR...

CVE-2021-0526

CVE-2021-0526 concerns the Android memory management driver (MediaTek) with an out-of-bounds write caused by uninitialized data. The issue enables local escalation of privilege without extra execution privileges, and does not require user interaction. Multiple sources (NVD, Red Hat, CVE records, ...

CVE-2021-1019

CVE-2021-1019 affects Android 12 where in snoozeNotification() of NotificationListenerService.java a permission confusion arises from a misleading user consent dialog. This enables local elevation of privilege with user interaction required for exploitation. The NVD notes a base CVSSv3.1 score of...

CVE-2021-1037

The CVE-2021-1037 issue concerns a broadcast from the DevicePickerFragment when a new device is paired that lacks permission checks. Affected software: Android 9–12. Vulnerable component/behavior: the DevicePickerFragment broadcast is listenable by any app without BLUETOOTH permissions, enabling ...

CVE-2021-38591

CVE-2021-38591 affects LG mobile devices running Android P/Q on mt6762/mt6765/mt6883. Root cause: misconfiguration of a debug command that allows attackers to modify NvRAM content. Documented impact is limited to NvRAM manipulation; no exploit details or in‑the‑wild data are provided. No remediat...

CVE-2022-20256

The CVE-2022-20256 issue affects Android 13’s Audio HAL, where a race condition can cause an out-of-bounds write. This could enable local escalation of privileges to System level without user interaction. The description is consistent across Android/Open Source and Red Hat/NVD entries, and it is ...

CVE-2022-20296

This CVE affects Android 13 ContentService. The issue is a missing permission check that allows an attacker with local access to determine whether an account exists on the device, enabling local information disclosure. Exploitation is rated as LOCAL with LOW exploit complexity and requires LOW pr...

CVE-2022-20302

CVE-2022-20302 concerns a sandbox-escape in Android 13 Settings that can bypass factory reset protections, allowing local privilege escalation with physical access and no user interaction. Affected software is Android 13; the issue originates from the Settings component and is described consisten...

CVE-2022-20306

CVE-2022-20306 affects Android 13 via the Camera Provider HAL. The issue is a memory corruption due to a use-after-free in the Camera Provider HAL, enabling local elevation of privileges with SYSTEM rights and no user interaction required. The vulnerability impact is described as local EoP with h...

CVE-2022-21789

MediaTek audio ipi contains a race condition that can cause memory corruption and local privilege escalation without user interaction. Root cause: race in the audio ipi path leading to memory corruption; impact described as local escalation of privilege with System execution privileges. Exploitat...

CVE-2022-32624

CVE-2022-32624 describes an out-of-bounds write caused by an incorrect buffer-size calculation in the throttling mechanism. This can lead to local escalation of privileges with SYSTEM-level execution privileges. Exploitation is described as local and does not require user interaction. The issue i...

CVE-2022-32649

CVE-2022-32649 describes a local use-after-free in the jpeg component caused by a logic error, enabling local privilege escalation to SYSTEM with no user interaction. Affected software is described only as jpeg (no vendor/product version details provided in the documents). The vulnerability’s imp...

CVE-2022-33687

Exposure of Sensitive Information in telephony-common.jar prior to the Samsung SMR July‑2022 Release 1 allows a local attacker with log access to obtain IMSI from device logs. The issue stems from information disclosure in telephony-common.jar on Samsung mobile devices. Affected component: teleph...

CVE-2022-36847

CVE-2022-36847 describes a use-after-free in the MTP driver’s mtp_send_signal function on Samsung Mobile devices, prior to the SMR Sep-2022 Release 1. The vulnerability could enable attackers to perform malicious actions locally; affected component is the MTP driver, with impact described as high...

CVE-2022-39117

A security vulnerability exists in the messaging service of UNISOC chipsets due to a missing permission check . This flaw allows an attacker to cause a local information disclosure without requiring additional execution privileges. Affected products include SC9863A, SC9832E, SC7731E, T610, T310, ...

CVE-2022-42765

CVE-2022-42765 concerns a missing bounds check in the wlan driver, leading to local denial of service in wlan services. The Red Hat/NVD descriptions and related feeds consistently cite a bound-check omission in the wlan driver as the root cause, with local attacker context and impact on availabil...

CVE-2022-47329

CVE-2022-47329 involves a missing permission check in the WLAN driver that could lead to local information disclosure. The vulnerability’s root cause is an insufficient authorization check in the WLAN driver, with local attack potential and confidentiality impact described as high. The connected ...

CVE-2022-47348

CVE-2022-47348 describes a missing permission check in engineermode services, enabling local denial of service. The vulnerability affects engineermode components (local privilege context) with local attack vector and low/none privilege requirements per CVSS vectors. Exploitation status is not det...

CVE-2022-47364

The CVE-2022-47364 entry concerns a vulnerability in the wlan driver caused by a missing bounds check, enabling an out-of-bounds write that could lead to local denial of service in wlan services. Documents consistently identify the affected component as the wlan driver and describe the impact as ...

CVE-2022-47480

CVE-2022-47480 concerns a missing permission check in the telephony service, causing a local denial of service with no extra privileges required. Documents refer to telephony modules (e.g., UNISOC chipsets) but do not specify affected products, versions, or a patch. The CVSSv3.1 base score is 5.5...

CVE-2023-20608

The CVE-2023-20608 issue concerns MediaTek chip display DRM and is caused by a race condition leading to a use-after-free, enabling local privilege escalation with SYSTEM privileges. Affected component is the display DRM path; impact is local escalation of privileges (no user interaction required...

CVE-2023-20682

CVE-2023-20682 affects the MediaTek wlan component, describing an out-of-bounds write caused by an integer overflow that could enable local privilege escalation with system execution privileges required. User interaction is not needed. A patch is noted: ALPS07441605 (Issue ALPS07441605). Connecte...

CVE-2023-20735

CVE-2023-20735 concerns the vcu component in MediaTek chips, where a missing bounds check can cause an out-of-bounds write. The under-lying flaw is a lack of boundary verification in vcu, potentially enabling local escalation of privilege with System-level execution privileges required. Exploitat...

CVE-2023-20751

CVE-2023-20751 affects the MediaTek keymange component, with a reported out-of-bounds write caused by a missing bounds check. This can lead to local escalation of privilege with SYSTEM execution privileges required, and no user interaction is needed. A patch is referenced (Patch ID: ALPS07825502;...

CVE-2023-21309

CVE-2023-21309 affects libcore (Android). The vulnerability is an out-of-bounds read caused by a missing bounds check, potentially enabling local information disclosure without extra privileges or user interaction. Exploitation details beyond this are not provided in the supplied documents. No sp...

CVE-2023-21364

CVE-2023-21364 affects Android’s ContactsProvider, causing a crash loop through resource exhaustion that can lead to local persistent DoS in the Phone app. The vulnerability is connected to the ContactsProvider component and is exploitable with local access and low privileges, without user intera...

CVE-2023-21369

CVE-2023-21369 concerns Android: a permissions bypass in Usage Access that can cause a local denial of service by displaying a Settings usage access restriction toggle screen. Exploitation requires user interaction but not remote code execution; impact is limited to DoS on the device. Affected co...