CVE-2020-0354

CVE-2020-0354 concerns Android 11 Bluetooth where a missing bounds check enables an out-of-bounds write, potentially allowing remote code execution without privileges or user interaction. Affected software is the Android 11 Bluetooth stack; root cause is an out-of-bounds write in the Bluetooth im...

CVE-2020-0478

CVE-2020-0478 targets Android-11, with a vulnerability in restoration.c (extend_frame_lowbd) causing an out-of-bounds write due to a missing bounds check. This can enable local privilege escalation and requires user interaction for exploitation. Affects Android-11; exploitation details or patch/v...

CVE-2021-0367

The CVE-2021-0367 entry describes a race-condition induced memory corruption in Android’s vpu component, enabling local escalation of privilege with System permissions required and no user interaction. Affected products are Android 10 and Android 11; the issue is tied to patch ALPS05371580 (Issue...

CVE-2021-25428

The CVE-2021-25428 entry concerns Samsung’s PackageManager, affected before the SMR July-2021 Release 1. The root cause is an improper validation check in PackageManager that can let untrusted apps obtain dangerous level permissions without user confirmation in limited circumstances (local, low c...

CVE-2022-20256

The CVE-2022-20256 issue affects Android 13’s Audio HAL, where a race condition can cause an out-of-bounds write. This could enable local escalation of privileges to System level without user interaction. The description is consistent across Android/Open Source and Red Hat/NVD entries, and it is ...

CVE-2022-20259

CVE-2022-20259 affects Android 13 Telephony: a missing permission check enables local disclosure of ICCID and EID without user interaction. Impact is information disclosure with no privilege escalation; exploitability is local. Remediation is applying the Android 13 security patches (patch level ...

CVE-2022-20260

CVE-2022-20260 affects the Android Phone app on Android 13. The issue is a resource-exhaustion induced crash loop that can cause local persistent DoS with user privileges and no user interaction needed. The vulnerability is tied to the Phone app’s handling leading to a crash under resource pressu...

CVE-2022-20283

CVE-2022-20283 is a Bluetooth vulnerability in Android 13 where an integer overflow can cause an out-of-bounds write in the Bluetooth stack, enabling remote code execution with no privileges and no user interaction. The issue is evidenced by Android security notes and multiple CVE aggregations, w...

CVE-2022-20287

CVE-2022-20287 affects Android 13, specifically the AppSearchManagerService. The issue lets a local attacker determine whether an app is installed without query permissions via a side-channel information disclosure, causing local information disclosure with no extra execution privileges needed. E...

CVE-2022-20302

CVE-2022-20302 concerns a sandbox-escape in Android 13 Settings that can bypass factory reset protections, allowing local privilege escalation with physical access and no user interaction. Affected software is Android 13; the issue originates from the Settings component and is described consisten...

CVE-2022-21765

CVE-2022-21765 affects the CCCI component. The root cause is a missing bounds check that enables an out-of-bounds write, leading to local escalation of privilege with SYSTEM-level execution rights. Exploitation reportedly does not require user interaction. A patch is referenced (Patch ID: ALPS066...

CVE-2022-21778

The CVE-2022-21778 issue affects MediaTek’s vpu, where an incorrect bounds check can trigger information disclosure and potentially local privilege escalation. The vulnerability requires local access (attack vector: LOCAL), with no user interaction, and a high privileges requirement for exploitat...

CVE-2022-22269

CVE-2022-22269 – concrete details found. The vulnerability concerns an unprotected BluetoothSettingsProvider on Samsung Android devices prior to the SMR Jan-2022 Release 1. This leakage enables untrusted applications with local access to read the device’s Bluetooth MAC address. Root cause: Blueto...

CVE-2022-26095

CVE-2022-26095 affects the libsimba library, with a null pointer dereference in the parser_colr function prior to Samsung SMR Apr-2022 Release 1, enabling out-of-bounds writes by a remote attacker. Impacts and mitigations from connected docs indicate vulnerable component is the parser_colr code p...

CVE-2022-26473

CVE-2022-26473 concerns a use-after-free in the vdec fmt component caused by improper locking, enabling local privilege escalation with System privileges required. Exploitation status is not detailed in the provided documents. Multiple sources (NVD, Red Hat, CVE lists, CNVD, PRION, CNNVD, PRON, P...

CVE-2022-32622

CVE-2022-32622 involves a memory corruption in gz caused by a missing bounds check, leading to local escalation of privilege with System execution privileges required and no user interaction. The vulnerability is associated with gz and is supported by multiple connected records, which also refere...

CVE-2022-32651

In mtk-aie, there is a use-after-free caused by a logic error that can lead to local escalation of privilege with System execution privileges required. Exploitation does not require user interaction. Patch ID ALPS07225857 (Issue ID ALPS07225857) is noted as the fix in the CVE record. Multiple con...

CVE-2022-39081

CVE-2022-39081 describes a missing permission check in a network service that could enable local privilege escalation with System execution privileges required. The available connected documents corroborate the issue as a local-elevation flaw, but they do not provide concrete details on affected ...

CVE-2022-39087

CVE-2022-39087 involves a missing permission check in a network service that could allow local escalation of privilege to System execution level. The CVE is linked across multiple feeds to a UNISOC chipset context, suggesting the issue affects a network-service component on UNISOC-based devices, ...

CVE-2022-42536

Chromecast security bulletin (ANDROID CHROMECAST-2023-07-01) documents CVE-2022-42536 as a remote code execution affecting Chromecast devices. The issue is categorized under AMLogic Secure Monitor with high severity (CVSSv3.1: 9.8, network vector, no user interaction). The bulletin confirms a fun...

CVE-2022-42779

CVE-2022-42779 affects the WLAN driver (notably in UNISOC-based chipsets) where a missing bounds check can cause local denial of service in WLAN services. The NVD entry cites a CVSS v3.1 base score of 5.5 (MEDIUM) with LOCAL attack vector, LOW attack complexity, LOW privileges required, no user i...

CVE-2022-47348

CVE-2022-47348 describes a missing permission check in engineermode services, enabling local denial of service. The vulnerability affects engineermode components (local privilege context) with local attack vector and low/none privilege requirements per CVSS vectors. Exploitation status is not det...

CVE-2022-47368

CVE-2022-47368 affects the wlan driver and stems from a missing parameters check in the driver code, which could enable a local denial of service in wlan services. The impact is a local DoS; exploitation and vendor/version details are not provided in the supplied documents. No patch/version fix i...

CVE-2022-47453

CVE-2022-47453 affects the wcn service , with the root cause stated as a missing parameter check. The consequence described is a local denial of service in the wcn service. The connected documents confirm the issue but do not provide specific vendor/version details or a confirmed patch/fix. No ex...

CVE-2022-47475

CVE-2022-47475 : A missing permission check in the telephony service allows local information disclosure with no additional privileges. The issue is described across multiple sources as a lack of privilege verification within the telephony module (confidentiality impact: HIGH). No concrete exploi...

CVE-2023-20660

CVE-2023-20660 affects the WLAN component in MediaTek devices, with an out-of-bounds read caused by an integer overflow that can lead to local information disclosure. Exploitation requires SYSTEM-level privileges, and no user interaction is needed. A patch is referenced (ALPS07588383 / ALPS075883...

CVE-2023-20733

CVE-2023-20733 affects the vcu component in MediaTek chips. The vulnerability is a use-after-free caused by improper locking, enabling local escalation of privilege with System execution privileges required. Exploitation details are not provided in the supplied documents. Patch ID ALPS07645149 (I...

CVE-2023-20835

CVE-2023-20835 affects the camsys component and is described as a use-after-free introduced by a race condition, enabling local privilege escalation with System privileges required and no user interaction. Multiple connected records corroborate the issue, its local-exploitability, and the listed ...

CVE-2023-21334

CVE-2023-21334 affects Android's App Ops Service. A logic error allows an attacker with local access to disclose information about installed packages without requiring extra execution privileges or user interaction. The vulnerability is documented across multiple sources (NVD/Red Hat/CNNVD) with ...

CVE-2023-21336

CVE-2023-21336 concerns an information disclosure vulnerability in Android’s Input Method, where side-channel information can reveal whether an app is installed without query permissions. The issue is described as a local information disclosure with no extra execution privileges required, and exp...

CVE-2023-21343

CVE-2023-21343 affects Android’s ActivityStarter where an unsafe PendingIntent can trigger a background activity launch, enabling local elevation of privilege without user interaction. Affected component: ActivityStarter (framework). Root cause: unsafe PendingIntent that can be exploited locally....

CVE-2023-21355

CVE-2023-21355 affects the Android libaudioclient component. The issue is an out-of-bounds write caused by a use-after-free, leading to a possible local escalation of privilege. No extra execution privileges are required, and exploitation does not require user interaction. The description indicat...

CVE-2023-21384

CVE-2023-21384 : Affected software is the Android Package Manager. The issue is an information-disclosure vulnerability caused by an unsafe PendingIntent, enabling local information disclosure with low-privilege access. Exploitation requires no user interaction but attacker must have local access...

CVE-2023-21397

CVE-2023-21397 is documented in Android 14 Framework as an elevation of privilege (EoP) vulnerability. The issue originates from the Setup Wizard where an insecure default value permits saving a Wi‑Fi network, enabling local privilege escalation with no additional execution privileges and no user...

CVE-2023-32885

The CVE-2023-32885 entry concerns a memory corruption issue in the display DRM module, affecting MediaTek chips. The root cause is a missing bounds check, enabling local privilege escalation with System execution privileges needed; exploitation requires local access and no user interaction is req...

CVE-2023-35691

Technical details about CVE-2023-35691 are not publicly provided in the supplied documents. No concrete affected products, versions, or remediation are present. Monitor for updates.

CVE-2024-20021

The CVE-2024-20021 issue affects the ARM Trusted Firmware (ATF) SPM component and stems from a logic error that allows remapping of physical memory to virtual memory. This could enable local privilege escalation with System execution privileges (S-mode) required, and exploitable without user inte...

CVE-2024-20038

CVE-2024-20038 affects the pq module (MediaTek-related references in connected documents) with an out-of-bounds read caused by an incorrect bounds check. This can lead to local information disclosure, requiring System execution privileges for exploitation and no user interaction. The vulnerabilit...

CVE-2024-20116

CVE-2024-20116 affects the cmdq component in MediaTek chipsets. The vulnerability is a possible out-of-bounds read caused by a missing bounds check, leading to local information disclosure with system execution privileges required. The issue does not require user interaction. Public references li...

CVE-2024-20153

CVE-2024-20153 affects the WLAN STA module (MediaTek ecosystem) and describes a vulnerability where an attacker could coax a client to attach to an AP using a spoofed SSID, potentially causing remote information disclosure without extra privileges. Exploitation is stated as not requiring user int...

CVE-2025-20696

CVE-2025-20696 pertains to MediaTek DA, where a missing bounds check enables an out-of-bounds write that could lead to local privilege escalation on affected devices. The issue requires physical access and, per the description, user interaction is needed for exploitation. Affected component/versi...

CVE-2009-2999

The CVE-2009-2999 entry affects Android 1.5 CRBxx: remote attackers can cause a DoS (application restart and network disconnection) by sending a malformed WAP Push SMS, triggering an ArrayIndexOutOfBoundsException in com.android.phone. Connected sources confirm a Malformed SMS DoS with fixed vers...

CVE-2015-3842

The CVE-2015-3842 entry describes multiple heap-based overflows in mediaserver’s AudioPolicyService (libeffects) on Android before 5.1.1 LMY48I. The underlying issue is heap corruption due to unchecked/buffer handling in the mediaserver component, enabling arbitrary code execution with remote/ cr...

CVE-2015-3849

CVE-2015-3849 affects Android before 5.1.1 LMY48M, where Region_createFromParcel in core/jni/android/graphics/Region.cpp does not check the return values of certain reads, enabling an attacker to execute arbitrary code by sending a crafted message to a service. The issue is described as an “eleva...

CVE-2015-6596

Technical details for CVE-2015-6596 are not publicly provided in the connected documents. The initial entry notes privileges via crafted apps in Android before 5.1.1, but no vendor/version-specific technical details, fixes, or exploitation information are included here. Monitor for updates.

CVE-2015-6613

CVE-2015-6613 affects Android devices running versions prior to 5.1.1 LMY48X and before 2015-11-01 on 6.0. The issue allows a local attacker via Bluetooth to send commands to a debugging port and gain privileges (Signature or SignatureOrSystem) through a crafted app. The vulnerability is tied to ...

CVE-2015-6619

CVE-2015-6619 affects the Android kernel: elevation of privilege via a crafted app in the Linux-based kernel prior to Android 5.1.1 LMY48Z and 6.0 prior to 2015-12-01. The root cause is an internal bug (23520714) that could allow local attackers to execute arbitrary code with device root privileg...

CVE-2015-6623

CVE-2015-6623 is an Android Wi‑Fi elevation-of-privilege vulnerability affecting Android 6.0 and earlier builds before 2015-12-01. Exploitation could allow a crafted application to gain Signature or SignatureOrSystem access through the Wi‑Fi stack, as described in the Android bulletin’s entry for...

CVE-2015-6632

CVE-2015-6632 affects libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01, allowing remote attackers to obtain sensitive information and potentially bypass a protection mechanism by obtaining Signature or SignatureOrSystem access via unknown vectors. The issue is documented in...

CVE-2015-6633

The CVE-2015-6633 entry describes a memory corruption vulnerability in Android display drivers that can enable remote code execution or a denial of service when processing specially crafted media files. Affected products are Android versions prior to 5.1.1 LMY48Z and Android 6.0 prior to 2015-12-...