CVE-2019-20605

CVE-2019-20605 affects Samsung mobile devices running N(7.x), O(8.x), and P(9.0) on Exynos chipsets. The issue is a heap overflow in the Shannon baseband modem, as described in multiple sources (Samsung ID SVE-2019-14071). CVSS metrics from NVD indicate a high/critical risk: Network attack vector...

CVE-2018-9558

CVE-2018-9558 describes an out-of-bounds write in the NFC kernel due to a missing bounds check in rw_t2t_handle_tlv_detect (rw_t2t_ndef.cc). This could enable local elevation of privilege on Android devices without requiring prior privileges, with user interaction not strictly required for exploi...

CVE-2019-1991

CVE-2019-1991 affects Google Android; vulnerable component is btif_dm_data_copy in btif_core.cc. The issue is an out-of-bounds write caused by a buffer overflow, enabling remote code execution with network access and requiring user interaction for exploitation. Affected Android versions include 7...

CVE-2019-20546

Samsung mobile devices running Android N (7.x), O (8.x), and P (9.0) with Broadcom Wi‑Fi chipsets are affected by a denial‑of‑service risk via a shared interface with Broadcom Bluetooth. The issue, tracked as SVE‑2019‑15350, is documented across CVE‑2019‑20546 and related feeds. No exploitation d...

CVE-2019-20614

The CVE-2019-20614 entry concerns Samsung mobile devices running N(7.x), O(8.x), and P(9.0) where the Allshare component can let attackers access sensitive information. The available sources (NVD entry and Red Hat advisory) confirm the affected platform and the vulnerability description but do no...

CVE-2019-9261

CVE-2019-9261 affects Android 10 via the libxaac library. The issue is an out-of-bounds read caused by a missing bounds check within libxaac, leading to information disclosure. Exploitation requires user interaction, with network exposure possible per CVSS data. The vulnerability is documented ac...

CVE-2019-9269

CVE-2019-9269 is an Android 10 elevation-of-privilege issue described as a local permissions bypass in System Settings caused by a cached Linux user ID. The vulnerability could allow a local attacker to bypass permissions with no additional execution privileges required; exploitation reportedly r...

CVE-2019-9290

CVE-2019-9290 affects the tzdata component in Android 10, where a mismatch between allocation and deallocation can cause memory corruption. This could enable local privilege escalation without user interaction. The Android 10 security release notes indicate this issue is addressed by patches in t...

CVE-2020-0306

CVE-2020-0306 concerns LLVM: an ineffective stack cookie placement due to stack frame double reservation, enabling local elevation of privilege on Android 11 without extra execution privileges or user interaction. The issue is documented across multiple feeds (NVD, Red Hat, Ubuntu, Debian) with t...

CVE-2020-0313

In CVE-2020-0313, the issue is in Android’s NotificationManagerService where an unsafe PendingIntent can bypass permissions, enabling local information disclosure with low requirements (local access, no user interaction). The vulnerability affects Android 11 and is characterized by a LOCAL attack...

CVE-2020-28345

CVE-2020-28345 affects LG mobile devices running Android 10. The issue is in the Wi‑Fi subsystem, where a missing NULL parameter check can cause a crash. This is described in multiple sources (e.g., NVD/Red Hat entries) with no public details on a fix in the provided documents. Impact is indicate...

CVE-2021-0674

CVE-2021-0674 affects the ALAC (ALAC decoder) used in MediaTek and related chipsets. The issue is an out-of-bounds read caused by an incorrect bounds check in the ALAC decoder, leading to local information disclosure without user interaction. Affected state: local access, no privileges required. ...

CVE-2021-0975

CVE-2021-0975 affects Android 13 with a side-channel in USB Manager that can reveal whether an app is installed without query permissions. This enables local information disclosure of installed packages with no extra execution privileges and no user interaction required. Exploitation status is no...

CVE-2021-1007

CVE-2021-1007 corresponds to an Android 12 vulnerability in the Bluetooth host stack: in btu_hcif_process_event (btu_hcif.cc) there is an out-of-bounds read caused by an incorrect bounds check. The impact is local information disclosure with the potential for system-level privileges, with no user...

CVE-2021-1014

CVE-2021-1014 affects Android 12 via the getNetworkTypeForSubscriber path in PhoneInterfaceManager.java. The vulnerability arises from a side-channel that lets a local attacker determine whether an app is installed without query permissions, enabling local information disclosure without additiona...

CVE-2021-25339

The CVE-2021-25339 entry relates to Samsung mobile devices with an improper address validation in HArx. Root cause stated: incorrect address validation can allow memory corruption in EL2 when the kernel is compromised. Affected scope is Samsung mobile devices prior to SMR Mar-2021 Release 1; expl...

CVE-2021-25358

CVE-2021-25358 affects Samsung SMR (system patch package). Before SMR APR-2021 Release 1, IMSI values could be stored in an improper path, enabling local attackers to access IMSI values via untrusted applications. Vulnerability is localized to affected SMR components; root cause is improper stora...

CVE-2021-39644

CVE-2021-39644 affects Google Pixel bootloader (Pixel component) with Elevation of Privilege (EoP) vulnerability. The Pixel security bulletin lists it under Pixel with High severity and a Bootloader impact. No exploitation details are provided in the provided connected documents. The remediation ...

CVE-2022-20282

CVE-2022-20282 affects Android 13: AppWidget can start an activity from the background due to a missing permission check, enabling local privilege escalation without extra execution privileges. Impact: local compromise with high confidentiality, integrity, and availability implications per CVSSv3...

CVE-2022-20309

CVE-2022-20309 affects Android 13, specifically the PackageInstaller component. The issue is a side-channel information disclosure that can determine whether an app is installed without query permissions, leading to local information disclosure with no additional execution privileges required. Ex...

CVE-2022-26095

CVE-2022-26095 affects the libsimba library, with a null pointer dereference in the parser_colr function prior to Samsung SMR Apr-2022 Release 1, enabling out-of-bounds writes by a remote attacker. Impacts and mitigations from connected docs indicate vulnerable component is the parser_colr code p...

CVE-2022-26448

CVE-2022-26448 affects the apusys component and is caused by a missing bounds check resulting in an out-of-bounds write. The vulnerability can lead to local privilege escalation with System privileges, and does not require user interaction to exploit. Patch ALPS07063849 (Issue ALPS07063849) is id...

CVE-2022-26455

The CVE-2022-26455 entry concerns the gz module on MediaTek devices. A memory corruption fault arises from incorrect error handling, enabling local escalation of privilege with SYSTEM privileges required; no user interaction is needed. A patch is referenced (ALPS07177858 / ALPS07177858). Connecte...

CVE-2022-32622

CVE-2022-32622 involves a memory corruption in gz caused by a missing bounds check, leading to local escalation of privilege with System execution privileges required and no user interaction. The vulnerability is associated with gz and is supported by multiple connected records, which also refere...

CVE-2022-33693

The vulnerability CVE-2022-33693 affects Samsung Mobile CID Manager prior to the SMR July 2022 release, allowing a local attacker to access ICCID information via logs. The issue is described as an information disclosure originating from CID Manager logging behavior, with the impact limited to con...

CVE-2022-33702

CVE-2022-33702 affects Samsung Knoxguard; an improper authorization flaw allows a local attacker to disable the keyguard and bypass the Knoxguard lock via a factory reset on Knoxguard versions prior to SMR Jul-2022 Release 1. The issue is documented across multiple sources (NVD, Red Hat, CNVD, PR...

CVE-2022-39906

Impermissible access control in SecTelephonyProvider prior to SMR Dec-2022 Release 1 allows local attackers to access message information. Affected component: SecTelephonyProvider. Root cause: improper access control. Impact: exposure of message information (local access). Remediation: update to ...

CVE-2022-42537

CVE-2022-42537 is a remote code execution issue impacting Chromecast devices, described in the Chromecast Security Bulletin under the AMLogic Secure Monitor component with High severity (CVSS v3.1: 9.8). The Chromium/Android bulletin confirms it as a RCE in the Secure Monitor path and attributes ...

CVE-2022-42779

CVE-2022-42779 affects the WLAN driver (notably in UNISOC-based chipsets) where a missing bounds check can cause local denial of service in WLAN services. The NVD entry cites a CVSS v3.1 base score of 5.5 (MEDIUM) with LOCAL attack vector, LOW attack complexity, LOW privileges required, no user i...

CVE-2022-42782

The CVE-2022-42782 entry concerns a missing permission check in the WLAN driver that can lead to local information disclosure. Connected sources (Red Hat, NVD, CNNVD, CVE listings) confirm the issue centers on the WLAN driver of the affected chipset; they do not provide an explicit patched versio...

CVE-2022-47346

In CVE-2022-47346, the issue affects engineermode services where a missing permission check enables local denial of service. The CVE is described as a local vulnerability with a DoS impact, relying on local access to trigger the flaw. The provided metrics indicate a local attack vector with low c...

CVE-2022-47363

CVE-2022-47363 describes a local denial-of-service risk in the WLAN driver caused by a missing bounds check that can lead to an out-of-bounds read. Affected component is the WLAN driver, with impact described as local DoS in WLAN services. Several connected sources confirm the condition but do no...

CVE-2022-47475

CVE-2022-47475 : A missing permission check in the telephony service allows local information disclosure with no additional privileges. The issue is described across multiple sources as a lack of privilege verification within the telephony module (confidentiality impact: HIGH). No concrete exploi...

CVE-2022-48234

CVE-2022-48234 affects UNISOC chipsets’ FM service module. The entry notes a missing parameter check in FM service, enabling local denial of service. Documents list NVD/Red Hat/CVE records with CVSS v3.1 metrics (AV:L, AC:L, PR:L/H, UI:N, S:U, C:N/I:N/A:H) and a base score around 5.5 (NVD) or 4.4...

CVE-2022-48247

CVE-2022-48247 targets UNISOC audio service with a missing permission check, enabling local escalation of privilege. Root cause: insufficient permission validation in the audio service leading to unauthorized access. Affected: audio service on UNISOC chipsets; attack vector LOCAL, complexity LOW,...

CVE-2023-20605

CVE-2023-20605 describes an out-of-bounds read in MediaTek keyinstall caused by a missing bounds check, potentially enabling local information disclosure with SYSTEM privileges and no user interaction. The advisory notes a patch (Patch ID: ALPS07550104; Issue ID: ALPS07550104). Exploitation detai...

CVE-2023-20619

The CVE-2023-20619 entry concerns the vcu component, with a memory corruption issue caused by improper locking. The vulnerability enables local escalation of privileges to System execution level and does not require user interaction. A patch is identified as ALPS07519159 (Issue ALPS07519159). Pub...

CVE-2023-20674

The CVE-2023-20674 issue affects the WLAN component in MediaTek devices, caused by an out-of-bounds read due to a missing bounds check. This vulnerability could allow local information disclosure and may enable system-level execution privileges, with no user interaction required. Multiple feeds (...

CVE-2023-21172

CVE-2023-21172 affects Android 13 where the WifiCallingSettings.java functions allow changing calling preferences for the admin user due to a permissions bypass. This enables local elevation of privilege with no extra execution privileges needed and requires no user interaction to exploit. No spe...

CVE-2023-21336

CVE-2023-21336 concerns an information disclosure vulnerability in Android’s Input Method, where side-channel information can reveal whether an app is installed without query permissions. The issue is described as a local information disclosure with no extra execution privileges required, and exp...

CVE-2023-32885

The CVE-2023-32885 entry concerns a memory corruption issue in the display DRM module, affecting MediaTek chips. The root cause is a missing bounds check, enabling local privilege escalation with System execution privileges needed; exploitation requires local access and no user interaction is req...

CVE-2023-40645

CVE-2023-40645 concerns a missing permission check in the Messaging component of UNISOC chipsets. The root cause described across sources is an insufficient permission validation that can enable local information disclosure without requiring additional execution privileges. Affected environment i...

CVE-2023-52348

A security vulnerability exists in UNISOC Chipsets (from China's Purple Spreadtrum) due to a missing bounds check in the ril service . This flaw can lead to an out-of-bounds write , potentially resulting in a local denial of service . Exploitation requires System execution privileges . Affected c...

CVE-2024-20021

A logic error in the atf spm module of MediaTek chips allows for the remapping of physical memory to virtual memory. This vulnerability can lead to local escalation of privilege , requiring System execution privileges for exploitation, and does not require user interaction. While a specific patch...

CVE-2024-20079

A vulnerability exists in the gnss service involving an out-of-bounds write caused by improper input validation. This flaw could allow for local escalation of privilege , requiring System execution privileges to exploit. Notably, no user interaction is required for exploitation. The vulnerability...

CVE-2024-20116

A security vulnerability exists in cmdq within MediaTek Chipsets due to a missing bounds check . This oversight allows for a possible out-of-bounds read , which could result in local information disclosure . Exploitation of this vulnerability requires System execution privileges and does not requ...

CVE-2024-20153

A security vulnerability exists in the wlan STA module of MediaTek Chipsets . An attacker can trick a client into connecting to an access point (AP) using a spoofed SSID . This flaw can lead to remote information disclosure without requiring additional execution privileges or user interaction. Re...

CVE-2025-20643

A buffer error vulnerability exists in MediaTek Chipsets within the DA module due to a missing bounds check . This flaw can lead to an out-of-bounds read , potentially resulting in local information disclosure . Exploitation requires physical access to the device, System-level privileges , and us...

CVE-2025-20660

A security vulnerability exists in the PlayReady TA microprogramming software component of MediaTek chipsets. The root cause is a missing bounds check , which can lead to an out-of-bounds read in memory. A malicious actor who has already obtained System privilege could exploit this to achieve loc...

CVE-2025-31711

The CVE-2025-31711 entry concerns the cplog service, where a null pointer dereference can cause a system crash leading to local denial of service (no extra privileges required). Connections across sources (e.g., Red Hat advisory, UNISOC-related postings) reiterate the same impact and local exploi...