CVE-2022-47332

The CVE-2022-47332 issue concerns a possible missing permission check in the wlan driver, leading to local information disclosure. Multiple connected sources (e.g., Red Hat advisory, NVD entry, CNNVD) describe the vulnerability as a privilege-check gap in the wlan driver that could enable an atta...

CVE-2022-47370

The CVE-2022-47370 entry concerns the WLAN driver. A missing parameters check in the WLAN driver is described as allowing local denial of service in WLAN services. Affected component: WLAN driver (details about specific hardware/vendor not provided in the documents). Root cause: missing parameter...

CVE-2022-47463

CVE-2022-47463: The connected documents indicate a missing permission check in the telecom service, leading to local denial of service. Affected component: telecom service (no explicit version/bundle provided). Root cause: insufficient permission validation. Impact: local DoS as described; exploi...

CVE-2022-47467

The CVE-2022-47467 issue is a missing permission check in the telecom service component, enabling local denial of service. Affected context repeatedly ties this to UNISOC chipsets and telecom service workflows, but concrete vulnerable versions are not specified in the provided documents. The vuln...

CVE-2022-48234

CVE-2022-48234 affects UNISOC chipsets’ FM service module. The entry notes a missing parameter check in FM service, enabling local denial of service. Documents list NVD/Red Hat/CVE records with CVSS v3.1 metrics (AV:L, AC:L, PR:L/H, UI:N, S:U, C:N/I:N/A:H) and a base score around 5.5 (NVD) or 4.4...

CVE-2023-20619

The CVE-2023-20619 entry concerns the vcu component, with a memory corruption issue caused by improper locking. The vulnerability enables local escalation of privileges to System execution level and does not require user interaction. A patch is identified as ALPS07519159 (Issue ALPS07519159). Pub...

CVE-2023-20751

CVE-2023-20751 affects the MediaTek keymange component, with a reported out-of-bounds write caused by a missing bounds check. This can lead to local escalation of privilege with SYSTEM execution privileges required, and no user interaction is needed. A patch is referenced (Patch ID: ALPS07825502;...

CVE-2023-21396

CVE-2023-21396 affects Android’s Activity Manager (System component) with a logic error that can cause a background activity to launch, enabling local escalation of privilege. Under the Android 14 release notes, this is categorized as EoP (Moderate) in the System group. The description explicitly...

CVE-2023-40649

CVE-2023-40649 concerns a missing permission check in the Messaging component, leading to local information disclosure without requiring additional execution privileges. The Red Hat/NVD entries reiterate the same issue: an information-disclosure risk arising from insufficient access control withi...

CVE-2023-42640

Technical details are not publicly provided in the supplied documents. Monitor for updates from vendors and CVEs to confirm affected products, root cause, and remediation.

CVE-2023-52348

CVE-2023-52348 describes a vulnerability in the ril service observed on UNISOC chipsets where a missing bounds check enables an out-of-bounds write. This can cause local denial of service with System execution privileges. Documents consistently indicate this is a boundary-check issue in ril, but ...

CVE-2023-52350

The CVE-2023-52350 issue affects the ril service in UNISOC chipsets, caused by a missing bounds check that enables an out-of-bounds write. This can lead to local denial of service with System privileges required. Documents consistently state the vulnerability as a possible out-of-bounds write in ...

CVE-2024-20089

CVE-2024-20089 affects MediaTek wlan in various MediaTek chipsets. The vulnerability stems from incorrect error handling in the wlan component, enabling a remote denial of service without user interaction. The issue is classified with a HIGH impact (Availability) and NETWORK attack vector, with n...

CVE-2024-20152

CVE-2024-20152 affects the WLAN STA driver and describes a reachable assertion caused by improper exception handling. The vulnerability permits local denial of service when a user with System privileges can trigger the condition, with no user interaction required. Reported patches include WCNCR00...

CVE-2024-31328

CVE-2024-31328 is documented in Wear OS/Android Wear context. A logic error in the function broadcastIntentLockedTraced of BroadcastController.java may allow launching arbitrary activities from the background on the paired companion phone, resulting in local elevation of privilege without additio...

CVE-2011-2344

The CVE concerns Android Picasa in Android 3.0 and 2.x through 2.3.4, where authToken is transmitted over cleartext HTTP from ClientLogin. This allowed remote attackers to sniff tokens from connections to picasaweb.google.com, enabling privilege escalation to access private pictures and web album...

CVE-2013-6272

The CVE-2013-6272 issue affects Google Android 4.1.1–4.4.2, involving the NotificationBroadcastReceiver in the com.android.phone process. The underlying flaw lets a crafted app bypass access restrictions to initiate calls, dial USSD/MMI codes, or hang up calls. Reported exploitation shows potenti...

CVE-2014-6060

CVE-2014-6060 describes a denial-of-service condition in the DHCP client dhcpcd. Affected versions are 4.0.0 through 6.x (before 6.4.3). The root cause is a vulnerability in how a remote DHCP server can reset the DHO_OPTIONSOVERLOADED option in the bootfile or servername DHCP option, triggering t...

CVE-2014-9882

CVE-2014-9882 is a buffer overflow in drivers/media/radio/radio-iris.c within the Qualcomm component used on Android devices (notably Nexus 7 2013). Exploitation via a crafted application could allow an attacker to gain privileges on the device. Multiple connected sources corroborate this issue a...

CVE-2014-9931

CVE-2014-9931 is a buffer overflow in CAF Linux kernel used by Android; triggered when an OEM customizes app region size due to a hard-coded value. Exploitation is local with user interaction; impact is high on confidentiality, integrity, and availability. No remediation details provided in the s...

CVE-2015-3823

CVE-2015-3823 concerns libstagefright in Android versions before 5.1.1 LMY48T. A crafted media file can cause memory corruption in mediaserver, enabling remote code execution or a denial of service. The NVD description notes remote code execution and memory corruption via specially crafted files ...

CVE-2015-6609

The CVE-2015-6609 issue concerns libutils in Android before 5.1.1 LMY48X and Android 6.0 before 2015-11-01. The root cause is memory corruption triggered by processing a crafted audio file, which could allow remote code execution or cause a denial of service. Affected products are described as An...

CVE-2015-6611

The CVE-2015-6611 entry describes a vulnerability in Android’s mediaserver prior to 5.1.1 LMY48X and 6.0 before 2015-11-01 that allows remote attackers to obtain sensitive information and thereby bypass an unspecified protection mechanism. The issue is categorized as an information-disclosure vul...

CVE-2015-8995

CVE-2015-8995 describes an integer overflow vulnerability in TrustZone that could affect all Android releases from CAF using the Linux kernel. The connected NVD entry attributes this to the TrustZone component, noting potential impacts to confidentiality, integrity, and availability (CVSS base me...

CVE-2016-2435

CVE-2016-2435 affects the NVIDIA video driver in Android on Nexus 9 devices prior to 2016-05-01. The issue allows a local attacker to escalate privileges via a crafted application (elevation of privilege in the NVIDIA video driver). Root cause: vulnerability in the NVIDIA video driver components ...

CVE-2016-2454

The CVE-2016-2454 entry describes a denial-of-service vulnerability in the Qualcomm hardware video codec used by Android on Nexus 5 devices prior to 2016-05-01. A crafted media/file could trigger memory corruption in the mediaserver path and cause the device to reboot, allowing remote attackers t...

CVE-2016-2468

CVE-2016-2468 affects the Qualcomm GPU driver in Android prior to 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7. A local attacker could gain privileges by exploiting a vulnerability in the GPU driver via a crafted application (internal bug 27475454). The issue is categorized as Elevation of Privilege w...

CVE-2016-6492

CVE-2016-6492: In MediaTek's Linux driver, MT6573FDVT_SetRegHW (camera_fdvt.c) allows local privilege escalation via MT6573FDVTIOC_T_SET_FDCONF_CMD ioctl. The issue stems from input handling: code copies user data into a local buffer with copy_from_user, testing pREGIO->u4Count length without ...

CVE-2016-6712

The CVE-2016-6712 entry describes a remote denial-of-service flaw in libvpx used by Mediaserver on Android. A specially crafted file can cause a device to hang or reboot. Affected Android platforms include 4.x (pre-4.4.4), 5.0.x (pre-5.0.2), 5.1.x (pre-5.1.1), and 6.x (pre-2016-11-01). The availa...

CVE-2016-8480

CVE-2016-8480 is an elevation-of-privilege issue in the Qualcomm Secure Execution Environment Communicator driver on Android. It could allow a local malicious application to execute arbitrary code in the kernel context after compromising a privileged process. Affected components/conditions: Andro...

CVE-2016-8487

CVE-2016-8487 describes an elevation of privilege vulnerability in Qualcomm closed source components used by the Android kernel. Affected software: Android kernel on devices with Qualcomm components. Root cause: privilege escalation within Qualcomm’s closed-source code. Impact: as per CVSS, allow...

CVE-2016-8488

CVE-2016-8488 is an elevation-of-privilege vulnerability in Qualcomm closed-source components within Android, affecting the Android kernel. The issue is described as an elevation of privilege in Qualcomm components used by Android devices; the CVSSv3 metrics indicate a CRITICAL impact with networ...

CVE-2017-0326

CVE-2017-0326 affects the NVIDIA Tegra kernel driver (Tegra Display Controller). The vulnerability stems from copying an input buffer to an output buffer without checking input size, potentially enabling a denial of service. Affected component: NVIDIA Tegra kernel/Video driver; root cause: missin...

CVE-2017-0340

CVE-2017-0340 is an elevation of privilege in the NVIDIA Libnvparser component for Android, caused by a memcpy into a fixed-size buffer with user-controlled size that can lead to memory corruption and possible remote code execution. The entry is rated HIGH (CVSSv3 7.8, CVSSv2 9.3) and has no expl...

CVE-2017-0382

CVE-2017-0382 corresponds to a remote code execution vulnerability in the Framesequence library used by Android. A specially crafted file could allow an attacker to execute arbitrary code in the context of an unprivileged process. Technical details in connected documents show affected product sco...

CVE-2017-0426

Summary: CVE-2017-0426 is a local information-disclosure vulnerability in the Android Filesystem affecting Android 7.0 and 7.1.1. The issue could allow a local malicious app to access data outside its permission levels. Root cause is described as an information-disclosure weakness in the Filesyst...

CVE-2017-0447

CVE-2017-0447 describes an elevation-of-privilege flaw in the HTC touchscreen driver that could allow a local malicious application to execute arbitrary code in the kernel context on Android devices. The vulnerability is tied to the Android kernel (Kernel-3.18) and affects Android devices leverag...

CVE-2017-0473

CVE-2017-0473 detail (Android/Mediaserver) : A remote code execution vulnerability exists in Mediaserver where a attacker can exploit a memory corruption during media file and data processing by sending a specially crafted file. Affected products/versions: Android 6.0, 6.0.1, 7.0, 7.1.1. CVSSv3 b...

CVE-2017-0482

CVE-2017-0482 is a denial-of-service vulnerability in Android’s Mediaserver. A specially crafted file could cause a device to hang or reboot. Affected products/versions per the provided sources include Android 6.0, 6.0.1, 7.0, and 7.1.1 (Android ID A-33090864). The DoS arises from issues within M...

CVE-2017-0504

CVE-2017-0504 is an elevation-of-privilege vulnerability in MediaTek components used by Android, including the M4U, sound, touchscreen, GPU, and Command Queue drivers. The flaw could let a local malicious app execute arbitrary code within the kernel, potentially leading to a permanent device comp...

CVE-2017-0542

CVE-2017-0542 is a remote code execution vulnerability in libavc within Android’s Mediaserver. According to connected documents, it affects Android 6.0, 6.0.1, 7.0, and 7.1.1, with the root cause described as memory corruption during media file and data processing when handling specially crafted ...

CVE-2017-0551

CVE-2017-0551 is a remote denial-of-service vulnerability in Android’s Mediaserver Libavc implementation. It affects Android 6.0, 6.0.1, 7.0, and 7.1.1, where processing a specially crafted file could cause a device hang or reboot. Public details in the provided documents describe the issue and a...

CVE-2017-0558

CVE-2017-0558 is an information-disclosure vulnerability in the Android Mediaserver. A local malicious application could access data outside its permission levels on affected Android versions (4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1). The CVSS scores in the initial description indicate a conf...

CVE-2017-0667

CVE-2017-0667 is an Android framework elevation of privilege vulnerability affecting Android 5.0.2, 5.1.1, 6.0/6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID A-37478824). The issue is categorized as Framework EoP; details in connected sources confirm affected component and version range but do not prov...

CVE-2017-0685

CVE-2017-0685 is a DoS in the Android media framework affecting Android 6.0/6.0.1/7.0/7.1.1/7.1.2. The connected CNVD entry notes a DoS via the media framework with an infinite loop attack vector; no root-cause or patch details are provided in the supplied documents.

CVE-2017-0688

CVE-2017-0688 is a denial-of-service vulnerability in the Android media framework. Affected product: Android. Affected versions (per initial doc): 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. The connected documents corroborate a DoS risk in the media framework, with no explicit exploit details provided. The A...

CVE-2017-0692

CVE-2017-0692 is a DoS vulnerability in the Android media framework affecting Android 4.4.4–7.1.2. The CNVD entry describes a remote attacker who can trigger a denial of service via a crafted input, specifically noting a denial via a null pointer backreference. The NVD entry for CVE-2017-0692 cor...

CVE-2017-0694

CVE-2017-0694 is a denial-of-service vulnerability in the Android media framework. Affected products: Android devices running versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. The vulnerability is classified as DoS (no details on exploit vectors provided in the initial documents). The ...

CVE-2017-0698

CVE-2017-0698 is an information disclosure vulnerability in the Android media framework affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID A-35467458). The connected documents provide the same basic description but do not specify the root cause, exploit details, or a concrete remedia...

CVE-2017-0699

CVE-2017-0699 is a information-disclosure vulnerability in the Android media framework affecting Android 6.0–7.2 (6.0, 6.0.1, 7.0, 7.1.1, 7.1.2). Technical sources describe an out-of-bounds read in the media framework that could allow an attacker to obtain sensitive information. The issue is mapp...