CVE-2017-0839

CVE-2017-0839 is an information-disclosure in the Android media framework (libeffects) affecting Android 5.0.2–8.0. The issue is a information leak vulnerability in the Media Framework, with no exploited vectors detailed in the provided documents. The Android Security Bulletin lists this CVE unde...

CVE-2017-0877

CVE-2017-0877 describes a remote code execution vulnerability in the Android media framework (libavc) affecting Android 6.0. The issue is triggered via a specially crafted file, allowing an attacker to execute code in the context of a privileged process. The vulnerability is categorized as Media ...

CVE-2017-11001

CVE-2017-11001 affects Qualcomm components: Wi-Fi driver in Android CAF/Linux kernel. The root cause is an unchecked MAC address length, which may cause an out-of-bounds read. This can lead to a potential information disclosure (confidentiality impact Partial). CVSS details in the provided record...

CVE-2017-13164

The CVE-2017-13164 entry is an information disclosure vulnerability in the Android kernel Binder driver. Affected component: Android kernel (Binder). Root cause and details are limited in the provided documents, but the NVD entry assigns a Confidentiality impact of PARTIAL (CVSSv2) and HIGH (CVSS...

CVE-2017-13180

CVE-2017-13180 affects the Android Media Framework (SoftAVCDec) where a bad header can cause a loop, enabling a use-after-free that leads to an out-of-bounds write. This can result in local privilege elevation with code execution in a privileged process, without user interaction. The vulnerabilit...

CVE-2017-13250

CVE-2017-13250 affects Android and targets the media decoding path in ih264d_utils.c, specifically ih264d_fmt_conv_420sp_to_420p. The root cause is an out-of-bounds write caused by a multiplication error, enabling remote code execution with user interaction required on affected builds. Affected v...

CVE-2017-13276

CVE-2017-13276 concerns a stack buffer overflow in the Android tpdec_asc.cpp module, specifically in the function CProgramConfig_ReadHeightExt, caused by a missing bounds check. This vulnerability could enable remote code execution with the attacker having no special privileges beyond a user on t...

CVE-2017-13309

CVE-2017-13309 affects ConscryptEngine.java in Android's Conscrypt implementation. In readEncryptedData, there is a plaintext leak due to improper crypto usage, enabling local information disclosure without extra privileges or user interaction. The Android security bulletin (2018-05-01) associate...

CVE-2017-13310

The CVE-2017-13310 issue is described as a read/write serialization bug in ViewPager.java.createFromParcel, causing a permissions bypass and enabling local escalation of privilege (an app could start an activity with system privileges without extra execution privileges). The vulnerability affects...

CVE-2017-14881

CVE-2017-14881 describes a use-after-free in the IPA IOCTL handler (IPA_IOC_ADD_HDR_PROC_CTX) on Android for MSM/Firefox OS for MSM/QRD Android prior to 2017-10-13. The vulnerability is in the ipa driver (Qualcomm) and is categorized in the Android Pixel bulletin as an Elevation of Privilege issu...

CVE-2017-6248

CVE-2017-6248 affects NVIDIA Tegra kernel audio driver (Audio DSP). The issue arises when an invalid user parameter is copied, potentially allowing a local attacker to cause a denial of service or escalate privileges by executing code in the kernel context. Affected platforms include NVIDIA Jetso...

CVE-2017-9720

CVE-2017-9720 affects Qualcomm camera driver in Android CAF Linux kernel builds, where an off-by-one error can trigger an out-of-bounds read/write. The vulnerability is listed under Qualcomm components as an Elevation of Privilege (EoP) risk with the camera driver as the affected component; expli...

CVE-2018-21072

CVE-2018-21072 affects Samsung mobile devices running M(6.0), N(7.x) and O(8.0) on Exynos chipsets. A kernel driver flaw enables out-of-bounds read/write and may allow arbitrary code execution (Samsung ID SVE-2018-11358). The connected documents confirm the vulnerability class and impact but do n...

CVE-2018-21087

CVE-2018-21087 affects Samsung mobile devices running L(5.x), M(6.x), and N(7.x) software. The vulnerability is a heap-based overflow in the vnswap path reached via the store function, leading to privilege escalation. Affected component/function: vnswap heap allocation/overflow within the store o...

CVE-2018-5907

The CVE-2018-5907 entry describes a vulnerability in the Qualcomm Audio DSP path: the function msm_adsp_stream_callback_put allows a buffer overflow due to insufficient input validation of user-provided data, leading to an integer overflow. Affected are Android for MSM, Firefox OS for MSM, and QR...

CVE-2018-9381

CVE-2018-9381 affects the gatt_sr.c component, specifically the gatts_process_read_by_type_req path, where uninitialized data can cause information disclosure. The issue enables remote information disclosure without additional execution privileges and requires no user interaction. Publicly disclo...

CVE-2018-9433

CVE-2018-9433 affects Android’s Framework via the ArrayConcatVisitor in builtins-array.cc, where improper input validation can cause a type confusion vulnerability. The issue could allow remote code execution without extra privileges, with exploitation requiring user interaction per the primary d...

CVE-2018-9472

The CVE-2018-9472 entry concerns a flaw in xmlMemStrdupLoc within xmlmemory.c, causing an out-of-bounds write due to an integer overflow. This could enable remote code execution in an unprivileged process with no extra privileges, and requires user interaction to exploit. Red Hat and CVE sources ...

CVE-2018-9550

CVE-2018-9550 : In CAacDecoder_Init of aacdecoder.cpp, Android 9 contains an out-of-bounds write leading to remote code execution. Exploitation requires user interaction. This is a Media Framework RCE issue reported in the Android 2018-12 bulletin; patches at the 2018-12-01/2018-12-05 levels addr...

CVE-2019-2027

CVE-2019-2027 affects Android’s Media framework. The vulnerability is a floor0_inverse1 out-of-bounds write in floor0.c caused by an incorrect bounds check, leading to remote code execution. Exploitation requires user interaction, and impact is rated high (RCE) across Android 7.0 through 9 in the...

CVE-2019-2045

CVE-2019-2045 is an Android RCE vulnerability in the JSCallTyper of typer.cc caused by an out-of-bounds write due to an incorrect bounds check. It affects Android 7.0 (7.0) through 9 (7.1.2, 8.1, 9) per the records. The issue could allow a remote attacker to execute code with the privileges of a ...

CVE-2019-2070

CVE-2019-2070 describes an out-of-bounds write in libxaac on Android 10 caused by a missing bounds check. This could enable remote code execution with no privileges required, with user interaction needed for exploitation. Connected sources (NVD, Red Hat, CNVD, PRION/CVE-2019-2070 aggregates) cons...

CVE-2019-20777

CVE-2019-20777 affects LG mobile devices running Android 7.0–9.0 (V40 and G7 family). The issue is in WapService during OTA Provisioning, where OTA provisioning handling is mishandled, constituting the root cause. Documents describe the vulnerable component and affected OS versions but do not pro...

CVE-2019-2129

CVE-2019-2129 affects Android's Media/MR components (TextDescriptions.cpp, extract3GPPGlobalDescriptions) with an out-of-bounds read that can lead to remote information disclosure. Impact: no execution privileges required; user interaction is needed. Affected Android versions include 7.0–9. Patch...

CVE-2019-2136

CVE-2019-2136 affects Android: the issue is in Status::readFromParcel of Status.cpp where an out-of-bounds read due to inadequate input validation can lead to local information disclosure without requires user interaction. Impact is confined to Android versions 7.0 through 9 as listed in the desc...

CVE-2019-9385

In Android-10, the libxaac library contains an out-of-bounds read due to a missing bounds check, enabling remote information disclosure with no extra execution privileges. User interaction is required to exploit. The issue is documented across multiple sources (NVD, Red Hat CVE entry, CVE lists) ...

CVE-2019-9400

CVE-2019-9400 affects Android 10 Bluetooth stack: a null pointer dereference caused by a missing null check can allow remote denial of service without user interaction. Exploitation is described as network‑based with low complexity; impact is DoS with availability affected. Mitigation per Android...

CVE-2020-0035

Technical details for CVE-2020-0035 are not provided in the connected documents; the available materials describe a local information disclosure in TelephonyProvider.java affecting Android 8.0–9. Monitor for updates.

CVE-2020-0036

CVE-2020-0036 is an Android Elevation of Privilege issue described in the Android Security Bulletin as part of the System section. In PermissionMonitor.hasPermissions, there is a permissions bypass that could allow a local malicious actor to access restricted permissions without additional execut...

CVE-2020-0299

CVE-2020-0299 affects Android 11 via a Bluetooth component issue: spoofing of Bluetooth device metadata due to a missing permission check. This enables local elevation of privilege with user rights and no user interaction required. The vulnerability is documented across multiple sources (NVD, Red...

CVE-2020-26605

Technical details about CVE-2020-26605 are not publicly provided in the supplied documents. Monitor for updates from vendors (Samsung security page, Red Hat, NCSC advisories) for affected products, fixes, and impact.

CVE-2021-0420

CVE-2021-0420 concerns a missing bounds check in the in-memory management driver, enabling local denial of service without user interaction. Impact is described as a system crash leading to local DoS; exploitation details are not provided in the documents. Mitigation references a patch: ALPS05403...

CVE-2021-0895

In CVE-2021-0895, the affected component is MediaTek Apusys (apusys). The issue is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privileges with System execution privileges required; exploitation is possible without user interaction. The vulnerability is li...

CVE-2021-1036

CVE-2021-1036 corresponds to an elevation-of-privilege vulnerability in Android’s LocationSettingsActivity via a tapjacking/overlay attack. Public records across NVD, Red Hat, CNVD and related sources confirm: affected products are Android 9–12 (and specifically AAOS references) with the vulnerab...

CVE-2021-25339

The CVE-2021-25339 entry relates to Samsung mobile devices with an improper address validation in HArx. Root cause stated: incorrect address validation can allow memory corruption in EL2 when the kernel is compromised. Affected scope is Samsung mobile devices prior to SMR Mar-2021 Release 1; expl...

CVE-2022-20288

In Android 13, CVE-2022-20288 affects AppSearchManagerService and describes a side-channel information disclosure allowing a possible check if an app is installed without query permissions. Impact is local information disclosure with no additional execution privileges required; attack vector is L...

CVE-2022-20289

CVE-2022-20289 affects Android 13: a side-channel in PackageInstaller can reveal whether an app is installed without query permissions, causing local information disclosure with no user interaction. Root cause: information disclosure via PackageInstaller side channel. Impact: potential exposure o...

CVE-2022-20291

CVE-2022-20291 affects Android 13 (AppOpsService) and enables a side-channel to determine whether an app is installed without query permissions, leading to local information disclosure with no user interaction. No exploit code is provided in the documents. Android 13 security notes indicate fixes...

CVE-2022-20318

CVE-2022-20318 affects Google's Android 13, specifically the PackageInstaller component. The issue arises from a side-channel information disclosure that allows a local attacker to determine whether an app is installed without any query permissions. Exploitation does not require user interaction,...

CVE-2022-22267

Samsung ActivityMetricsLogger on mobile devices is affected by CVE-2022-22267: an implicit intent hijacking flaw that can disclose information about a running application. The vulnerability is tied to ActivityMetricsLogger before SMR Jan-2022 Release 1. Documented impact is information disclosure...

CVE-2022-26436

The vulnerability CVE-2022-26436 affects the emi mpu component and is caused by a missing bounds check, leading to an out-of-bounds read. This can lead to local information disclosure with System execution privileges required, and no user interaction is needed. A patch identified as ALPS07023666 ...

CVE-2022-26448

CVE-2022-26448 affects the apusys component and is caused by a missing bounds check resulting in an out-of-bounds write. The vulnerability can lead to local privilege escalation with System privileges, and does not require user interaction to exploit. Patch ALPS07063849 (Issue ALPS07063849) is id...

CVE-2022-26464

CVE-2022-26464 is a vulnerability described in IBM Datacap-related advisories as an out-of-bounds write in vow that can lead to local privilege elevation. The IBM bulletin lists affected products/versions as Datacap Navigator 9.1.7, 9.1.8, and 9.1.9, with a remediation recommendation to upgrade t...

CVE-2022-28784

CVE-2022-28784 describes a path traversal vulnerability in Samsung Galaxy Themes prior to SMR May-2022 Release 1. The issue stems from incorrect file path validation logic, allowing a system user to list file names in arbitrary directories. Affected component: Galaxy Themes (on Samsung devices) w...

CVE-2022-30751

CVE-2022-30751 affects SemWifiApClient before the Samsung SMR Jul-2022 Release 1. The issue is an improper access control in the sendDHCPACKBroadcast function that can let an attacker access the Wi-Fi AP client MAC address of devices connected via the WIFI_AP_STA_DHCPACK_EVENT action. Public sour...

CVE-2022-32639

CVE-2022-32639 concerns watchdog with an out-of-bounds read caused by a missing bounds check. The vulnerability enables local escalation of privilege to System execution level; exploitation does not require user interaction. Patch ID ALPS07494487 is cited in the records. Current connected documen...

CVE-2022-33693

The vulnerability CVE-2022-33693 affects Samsung Mobile CID Manager prior to the SMR July 2022 release, allowing a local attacker to access ICCID information via logs. The issue is described as an information disclosure originating from CID Manager logging behavior, with the impact limited to con...

CVE-2022-33697

CVE-2022-33697 corresponds to a local information-disclosure vulnerability in Samsung ImsCore, specifically ImsServiceSwitchBase, where IMSI can be exposed via device logs. Affected software: ImsCore prior to SMR Jul-2022 Release 1. Root cause: failure to protect sensitive information in logs; re...

CVE-2022-36849

CVE-2022-36849 is a use-after-free vulnerability in the sdp_mm_set_process_sensitive function of the sdpmm driver, affecting Samsung devices in the SMR Sep-2022 Release 1. The issue arises from post-release reuse in the sdpmm driver and could allow malicious actions. Publicly documented impact fo...

CVE-2022-42775

CVE-2022-42775 involves the UNISOC camera driver, where improper locking can cause memory corruption and a local kernel denial of service. Concrete details across connected sources reiterate the vulnerability class but do not specify affected products/versions or a confirmed remediation. In summa...