CVE-2022-39899

CVE-2022-39899 is an improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1. The issue can allow a local attacker to send input events via S Pen gestures due to insufficient authentication around the WindowManagerService. Affected software is Samsung...

CVE-2022-42537

CVE-2022-42537 is a remote code execution issue impacting Chromecast devices, described in the Chromecast Security Bulletin under the AMLogic Secure Monitor component with High severity (CVSS v3.1: 9.8). The Chromium/Android bulletin confirms it as a RCE in the Secure Monitor path and attributes ...

CVE-2022-47327

CVE-2022-47327 affects WLAN driver components with a missing permission check that can lead to local information disclosure. Multiple connected sources (including Red Hat, NVD, CNNVD) corroborate the core flaw: unauthorized local access to sensitive information due to insufficient privilege valid...

CVE-2022-47364

The CVE-2022-47364 entry concerns a vulnerability in the wlan driver caused by a missing bounds check, enabling an out-of-bounds write that could lead to local denial of service in wlan services. Documents consistently identify the affected component as the wlan driver and describe the impact as ...

CVE-2022-47452

CVE-2022-47452 affects the gnss driver, caused by a missing bounds check that enables an out-of-bounds write. This can lead to a local denial of service in WLAN services. Exploit details, affected versions, and a concrete fix are not provided in the supplied documents; some sources (e.g., PT-2023...

CVE-2022-47455

CVE-2022-47455 relates to the UNISOC WLAN driver, where a missing parameter check in the WLAN subsystem can cause local denial of service to WLAN services. Affected software is described as the WLAN driver in UNISOC chipsets; the root cause is a lack of validation for input parameters. The CVE no...

CVE-2022-47480

CVE-2022-47480 concerns a missing permission check in the telephony service, causing a local denial of service with no extra privileges required. Documents refer to telephony modules (e.g., UNISOC chipsets) but do not specify affected products, versions, or a patch. The CVSSv3.1 base score is 5.5...

CVE-2023-20607

CVE-2023-20607 affects the ccu component in MediaTek devices. The vulnerability is a memory corruption caused by a race condition, enabling local escalation of privilege with System execution privileges required. It does not require user interaction for exploitation. The issue is mitigated by Pat...

CVE-2023-20609

CVE-2023-20609 affects the MediaTek chip ccu component. The vulnerability is described as an out-of-bounds read caused by a logic error, potentially leading to local information disclosure with SYSTEM-level privileges required. Exploitation does not require user interaction. A patch is identified...

CVE-2023-20611

CVE-2023-20611 concerns a race-condition related use-after-free in the GPU component, leading to local escalation of privilege with SYSTEM privileges required and no user interaction. Patch ALPS07588678/ALPS07588678 is referenced. Multiple sources (NVD, Red Hat, CVE listings) corroborate the same...

CVE-2023-20739

The CVE-2023-20739 issue affects the vcu component in MediaTek chips. It describes a memory corruption resulting from a logic error, enabling local escalation of privilege with SYSTEM execution privileges, without user interaction. Reported patch ID: ALPS07559819 (Issue ALPS07559819). Connected s...

CVE-2023-21353

CVE-2023-21353 affects a component labeled NFA in Android, where a missing bounds check can cause an out-of-bounds read. The resulting vulnerability leads to remote information disclosure without requiring privileges or user interaction. Documents consistently describe the impact as information d...

CVE-2023-21357

The vulnerability CVE-2023-21357 affects Android NFC and is due to a missing bounds check that enables an out-of-bounds read. This can lead to local information disclosure, with the potential for System-level execution privileges, and does not require user interaction to exploit. Public details c...

CVE-2023-21365

CVE-2023-21365 affects Android’s Phone app, where the Contacts component can enter a crash loop due to resource exhaustion. This leads to a local denial of service with User privileges required and no user interaction needed. Public details from the provided sources confirm the DoS impact and loc...

CVE-2023-21374

The CVE-2023-21374 entry concerns Android System UI: a logic error that enables a factory reset protection bypass, leading to local elevation of privilege with no extra execution privileges and no user interaction required. Affected component: System UI on Android; vulnerability type is Elevation...

CVE-2023-42739

CVE-2023-42739 affects the engineermode service, where a missing permission check could allow an app to write permission usage records. This enables local escalation of privilege with no extra execution privileges required. Documented impact is HIGH (CVSS v3.1: AV=L, AC=L, PR=L, UI=N, S=U, C=H, I...

CVE-2023-48339

CVE-2023-48339 affects the jpg driver and is caused by a missing permission check in the driver, potentially enabling local information disclosure with System execution privileges required. The CVSSv3.1 vector indicates Local access, High privileges, Confidentiality impact High, and no documented...

CVE-2023-52343

CVE-2023-52343 concerns UNISOC chipsets with a vulnerability in the SecurityCommand message after security is activated. The root cause is improper input validation, which could lead to remote information disclosure without requiring additional execution privileges. Documents do not specify affec...

CVE-2024-20079

The CVE-2024-20079 entry concerns the gnss service with an out-of-bounds write caused by improper input validation. The vulnerability could allow local escalation of privilege with system execution privileges, and exploitation does not require user interaction. A patch is referenced (ALPS08044040...

CVE-2024-20098

The CVE-2024-20098 issue concerns Power module boundary checks: a possible out-of-bounds write may enable local escalation of privilege with System execution privileges required, and no user interaction is needed. Multiple connected sources (NVD, Red Hat, OSV, CVE lists, PT Security, CNNVD) corro...

CVE-2025-20642

CVE-2025-20642 describes an out-of-bounds write in the DA module caused by a missing bounds check. This could enable local privilege escalation when an attacker has physical access to the device, with user interaction required for exploitation. A patch is identified as ALPS09291146 (MSV-2057); no...

CVE-2025-20660

CVE-2025-20660 : In PlayReady TA, a missing bounds check enables an out-of-bounds read that can lead to local privilege escalation when the attacker already has System privileges. The issue does not require user interaction. A patch is available (Patch ID: DTV04436357; MSV-3186). Exploitation sta...

CVE-2025-31711

The CVE-2025-31711 entry concerns the cplog service, where a null pointer dereference can cause a system crash leading to local denial of service (no extra privileges required). Connections across sources (e.g., Red Hat advisory, UNISOC-related postings) reiterate the same impact and local exploi...

CVE-2026-0059

Technical details about CVE-2026-0059 are not publicly available in the provided documents; no affected products, versions, root cause, or mitigations are disclosed here. Monitor for updates.

CVE-2011-2357

CVE-2011-2357 describes a cross-application scripting flaw in Android’s Browser URL loading, enabling a non-privileged app to inject JavaScript into arbitrary domains and break sandboxing. The vulnerability has two exploitation vectors: (1) exhausting MAX_TABS and loading a target URL followed by...

CVE-2014-7916

CVE-2014-7916 affects Android’s libstagefright SampleTable.cpp; an integer overflow in SampleTable.cpp in Android before 5.0.0 has unspecified impact. Connected sources confirm the affected component and root cause; no explicit remediation or patch version is provided in the supplied documents.

CVE-2014-9780

The CVE-2014-9780 issue affects the Qualcomm mdp3_ctrl.c driver in Android before 2016-07-05 on Nexus 5, 5X, and 6P. It does not validate start and length values, enabling local privilege escalation via a crafted app. Root cause: improper input validation in the MDSS hardware block. Impact stated...

CVE-2014-9961

CVE-2014-9961 is disclosed for Android builds from CAF that use the Linux kernel, describing a vulnerability in eMMC write protection that can be exploited to bypass power-on write protection. The issue is exploitable locally (attack vector: local) with user interaction potentially required, and ...

CVE-2015-3845

CVE-2015-3845 affects Android Binder’s Parcel handling: the Parcel::appendFrom function in libs/binder/Parcel.cpp does not consider parcel boundaries when identifying binder objects, in Android versions before 5.1.1 LMY48M. The underlying flaw can allow a crafted application to obtain privileges ...

CVE-2015-3867

CVE-2015-3867 is a vulnerability in Android’s libstagefright prior to 5.1.1 LMY48T where processing a specially crafted media file can cause memory corruption and remote code execution in the mediaserver service. The root cause is tied to libstagefright’s handling of media data, enabling an attac...

CVE-2015-6604

CVE-2015-6604 affects Android’s libstagefright before 5.1.1 LMY48T. A crafted media file could cause memory corruption in mediaserver, enabling remote code execution or a denial of service. Root cause is memory corruption in the media processing pipeline. The public description confirms the compo...

CVE-2015-6620

Android libstagefright vulnerabilities in mediaserver allow local privilege escalation to Signature or SignatureOrSystem for devices running before 5.1.1 LMY48Z and before 2015-12-01 for 6.0. Root cause: flaws in libstagefright enabling memory/logic errors during crafted media processing. Impact ...

CVE-2015-7716

CVE-2015-7716 affects Android 5.x before 5.1.1 LMY48T, where the libstagefright media pipeline is vulnerable to memory corruption when processing a crafted media file. This can allow remote attackers to execute arbitrary code or cause a denial of service. The entry maps to internal bug 20721050 a...

CVE-2016-0810

CVE-2016-0810 affects Android mediaserver’s mediaserver component, specifically the MediaLib SoundPool handling in media/libmedia/SoundPool.cpp. The root cause is mishandled locking requirements, which can allow a crafted application to escalate privileges to obtain Signature or SignatureOrSystem...

CVE-2016-0835

Summary (CVE-2016-0835): Affects mediaserver on Android 6.x (decoder/impeg2d_dec_hdr.c). A crafted media file can trigger a negative-value path in the MPEG-2 decoding header, causing memory corruption and enabling remote code execution or a denial of service. The issue is exploitable remotely via...

CVE-2016-2474

The CVE-2016-2474 issue is an Elevation of Privilege in the Qualcomm Wi‑Fi driver on Android devices (notably Nexus 5X) prior to the 2016-06-01 patch. A crafted application could exploit the vulnerable Qualcomm Wi‑Fi kernel/driver code to gain elevated privileges on the device. The Android securi...

CVE-2016-8462

CVE-2016-8462 is an information-disclosure vulnerability in the Android bootloader that could allow a local attacker to access data outside the attacker’s permission level. Connected sources confirm affected devices include Pixel and Pixel XL, with patch guidance in the Android security bulletin ...

CVE-2017-0387

CVE-2017-0387 affects Android MediaServer: elevation of privilege allowing a local malicious app to execute code in a privileged process. Affected: Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1 (Android ID A-32660278). Description in connected sources reiterates that MediaServer is the vuln...

CVE-2017-0394

CVE-2017-0394 is a denial-of-service vulnerability in Android’s Telephony, allowing a remote attacker to cause a device hang or reboot. Affected are Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The initial records do not provide exploit details or a confirmed root-cause description ...

CVE-2017-0410

CVE-2017-0410 is an elevation-of-privilege vulnerability in Android’s Framework APIs that could allow a local malicious app to execute code in a privileged process. Affected: Android devices/versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 (Android ID A-31929765). Root cause: framework API weakness ...

CVE-2017-0414

CVE-2017-0414 refers to an information-disclosure vulnerability in AOSP Messaging on Android (versions 6.0, 6.0.1, 7.0, 7.1.1). The issue allows a local malicious application to bypass OS protections that isolate app data, potentially accessing data the app should not access. The connected docume...

CVE-2017-0419

The CVE-2017-0419 entry concerns Android Audioserver. A local elevation-of-privilege flaw could allow a malicious local app to execute arbitrary code within the context of a privileged process. Affected products include Android versions 4.4.4 through 7.1.1. The issue’s root cause is described as ...

CVE-2017-0434

CVE-2017-0434 affects the Synaptics touchscreen driver in the Android kernel (Kernel-3.18). It is an elevation of privilege vulnerability that could allow a local malicious application to execute arbitrary code within the context of the touchscreen chipset after compromising a privileged process....

CVE-2017-0435

CVE-2017-0435 is an elevation-of-privilege in the Qualcomm sound driver affecting Android kernels (Kernel-3.10 and Kernel-3.18). The vulnerability could let a local malicious app execute arbitrary code in the kernel context after compromising a privileged process. The CVE is documented with Qualc...

CVE-2017-0497

CVE-2017-0497 describes a denial-of-service vulnerability in Android's Mediaserver. A specially crafted file could cause a device hang or reboot on affected builds (Android 7.0 and 7.1.1). The issue is documented with moderate severity and an uncommon device configuration required for exploitatio...

CVE-2017-0498

CVE-2017-0498 describes a denial-of-service condition in Android Setup Wizard that could let a local attacker force a Google account sign-in after a factory reset. Affected versions include Android 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The vulnerability is local in scope, with no exploitation detail...

CVE-2017-0566

CVE-2017-0566 describes an elevation of privilege in the MediaTek camera driver for Android, enabling a local malicious application to execute arbitrary code in the kernel context. The issue affects the MediaTek camera driver within Android’s stack and is categorized as High due to requiring comp...

CVE-2017-0592

CVE-2017-0592 describes a remote code execution vulnerability in Mediaserver’s FLACExtractor.cpp (libstagefright) on Android. The issue allows memory corruption when processing specially crafted media files, potentially enabling code execution within the Mediaserver process. Affected Android vers...

CVE-2017-0595

Mode C: CVE-2017-0595 affects Android Mediaserver (libstagefright) and is an elevation-of-privilege flaw that could let a local malicious app execute code in the context of a privileged process. Affected products/versions include Android 4.4.4–7.1.1. Root cause is described as memory/process hand...

CVE-2017-0616

CVE-2017-0616 describes an elevation of privilege in the MediaTek system management interrupt driver that could allow a local malicious Android app to execute arbitrary code in the kernel context. Affected product: Android. Impact is rated High, because exploitation requires first compromising a ...