CVE-2019-1993

CVE-2019-1993 affects Android 8.0–9, with a memory corruption/integer overflow in the btif_hd.cc register_app function. The issue can enable local escalation of privilege with no additional execution privileges and does not require user interaction. Root cause: integer overflow leading to memory ...

CVE-2017-10709

CVE-2017-10709 affects Elephone P9000 devices running Android 6.0. The lockscreen can be bypassed to defeat the wrong-PIN lockout by pressing backspace after each PIN guess, using physical proximity as the attack vector. Documented impact indicates confidentiality, integrity, and availability may...

CVE-2017-11014

CVE-2017-11014 describes a buffer overflow in the Android/CAF/Linux kernel stack when parsing a Measurement Request IE in a Roam Neighbor Action Report. Affected products include Android for MSM, Firefox OS for MSM, and QRD Android with CAF Linux kernel releases. The CVSS data indicates high impa...

CVE-2017-11022

CVE-2017-11022 affects Android-based MSM platforms (Android for MSM, Firefox OS for MSM, QRD Android) with CAF Linux kernel. The issue is that probe requests from a user’s device may reveal information elements that specify supported Wi‑Fi features, creating a potential privacy exposure if sniffe...

CVE-2017-11028

CVE-2017-11028 affects the Android MSM ISP Camera driver; the vulnerability allows leakage of contents from an arbitrary kernel address to userspace via msm_isp_get_stream_common_data(). Connected sources confirm this is an information-disclosure issue in the Camera subsystem within Android/Linux...

CVE-2017-11041

CVE-2017-11041 affects Qualcomm LibOmxVenc in Android CAF/Linux-kernel builds. The issue is listed as a remote-code-execution vulnerability (RCE) with Critical severity, arising from a buffer-management flaw that could allow exploitation via a specially crafted file. Android security bulletins fl...

CVE-2017-13171

The CVE-2017-13171 entry describes an elevation of privilege in the MediaTek performance service used by Android. Affected component: MediaTek performance service within the Android kernel stack. Root cause: local privilege escalation. Impact: attacker with local access could gain higher privileg...

CVE-2017-13308

The CVE-2017-13308 entry describes a buffer overflow in an sscanf call within the Mediatek MTK TS Abts code path (tscpu_write_GPIO_out and mtkts_Abts_write in mtk_ts_Abts.c) caused by improper input validation. This could enable local privilege escalation with System execution privileges; exploit...

CVE-2017-18067

CVE-2017-18067 affects the Qualcomm Wireless network driver in Android Qualcomm components (CAF/Linux-based Android releases). The root cause is improper input validation when processing an encrypted authentication management frame (lim_send_auth_mgmt_frame()), leading to a buffer overflow. The d...

CVE-2017-18649

The CVE-2017-18649 issue affects Samsung mobile devices running N(7.x) software. The bootloader for the Qualcomm MSM8998 chipset lacks an integrity check of the system image, enabling an attacker to boot with root privileges (SamFAIL). The Samsung ID is SVE-2017-10465. No additional technical det...

CVE-2017-18682

The CVE-2017-18682 entry concerns Samsung mobile devices across KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) where AudioService can crash the system due to incorrect exception handling and an unprotected intent. Affected Samsung identifiers are SVE-2017-8114, SVE-2017-8116, and SVE-2017-8117. Connecte...

CVE-2017-6296

NVIDIA CVE-2017-6296 affects the TrustZone DRM application in NVIDIA SHIELD TV. The issue is a TOCTOU vulnerability that may lead to denial of service or privilege escalation. Public details identify SHIELD TV SE 6.2 and earlier as affected; NVIDIA’s bulletin indicates updating to SE 6.3 to mitig...

CVE-2017-8251

CVE-2017-8251 affects Qualcomm camera driver components in Android CAF builds on Linux kernels. The bug arises when msm_isp_check_stream_cfg_cmd and msm_isp_stats_update_cgc_override fail to validate stream_cfg_cmd->num_streams, allowing an overflow of stream_cfg_cmd->stream_handle. The CVE...

CVE-2017-8262

CVE-2017-8262 is documented in multiple sources as a use-after-free race condition in Qualcomm components (GPU driver) within CAF Android Linux-kernel builds. Affected software is Qualcomm’s GPU driver stack integrated in CAF Android releases; root cause described as a race in memory allocation/f...

CVE-2018-11843

CVE-2018-11843 affects Qualcomm WLAN host components; the issue is use-after-free caused by missing return-value checks in the WMA vdev start/response path. Documented as High severity with local attack vector in Qualcomm/Android bulletins; patches are available in the 2020-01 Android security bu...

CVE-2018-12010

CVE-2018-12010: Concrete details in connected docs show a stack overflow with memory corruption in the trustzone region affecting Android releases using CAF’s Linux kernel. The root cause is an absence of length sanity checks in the kernel path, leading to potential local impact on trustzone. Rep...

CVE-2018-21055

CVE-2018-21055 affects Samsung mobile devices running N (Android 7.0) on Qualcomm MSM8996. The issue allows rooting via a custom image to run arbitrary scripts in the INIT context. Samsung assigns ID SVE-2018-11940 (Sept 2018). CVSS metrics indicate a critical impact (C/H, I/H, A/H) with network ...

CVE-2018-21078

The CVE-2018-21078 entry relates to Samsung mobile devices running M(6.0), N(7.x), and O(8.0) where the Contacts app improperly secures Supplementary Service (SS) and USSD codes, enabling attackers to originate video calls. Public details in the provided documents note the Samsung ID SVE-2018-114...

CVE-2018-9360

CVE-2018-9360 affects Android 6.0–8.1. The issue occurs in Bluetooth’s L2CAP handling: process_l2cap_cmd in l2c_main.cc can read out of bounds due to a missing bounds check. This enables remote information disclosure over the network without user interaction. Exploitation details are not provided...

CVE-2018-9508

CVE-2018-9508 describes an out-of-bounds read in Bluetooth handling (smp_process_keypress_notification in smp_act.cc) that could lead to remote information disclosure without user interaction. Affected platforms include Android 7.0–8.1. The NVD notes a CVSSv3 base score of 6.5 (Attack vector: Adj...

CVE-2019-2036

CVE-2019-2036 affects Google Android where in HidHostService.java the function okToConnect contains an incorrect state check, enabling a possible permission bypass. This could allow remote escalation of privilege with no additional execution privileges or user interaction required. The vulnerabil...

CVE-2019-20589

CVE-2019-20589 concerns Samsung mobile devices with O(8.x) and P(9.0) on TEEGRIS. A type confusion in the SKPM Trustlet can lead to arbitrary code execution. Affected platform details are cited in multiple sources; the vulnerability is tied to the Trustlet’s handling of internal objects, enabling...

CVE-2019-20590

CVE-2019-20590 affects Samsung mobile devices running O(8.x) software on Qualcomm chipsets, with an integer underflow in the Secure Storage Trustlet (Samsung ID SVE-2019-13952). Connected sources (Red Hat, NVD, CVE listing) confirm the vulnerable component and root cause as an underflow in Secure...

CVE-2019-20612

The CVE-2019-20612 entry applies to Samsung mobile devices running N(7.x) and O(8.x) firmware that use Broadcom Wi‑Fi and SEC Wi‑Fi chipsets. The issue is a denial-of-service condition triggered by TCP SYN packets directed at the Wi‑Fi subsystem, with the vulnerability described as a problem in t...

CVE-2019-2212

CVE-2019-2212 concerns an out-of-bounds read in the Poisson_distribution of random, enabling local information disclosure without extra privileges or user interaction. Affected products/versions (from provided docs): Android 8.0–10. The root cause is a read that can leak information from memory i...

CVE-2019-9383

CVE-2019-9383 affects Android 10: NFC server component suffers an out-of-bounds read due to a missing bounds check, enabling local information disclosure. The issue requires user interaction to exploit. Documented impact is information disclosure with no additional privileges granted; no explicit...

CVE-2019-9429

CVE-2019-9429 affects the profman component in Android 10. The issue is a memory corruption–related out-of-bounds write that could enable local privilege escalation with no user interaction. Exploitation is described as local; no remote/vector details are provided. Mitigation: apply Android 10 se...

CVE-2020-0024

CVE-2020-0024 affects Android 8.0–10 in SettingsBaseActivity.java via a permissions bypass in onCreate, enabling local escalation of privilege. Exploitation requires user interaction and does not require initial execution privileges, per the NVD entry. Affected products are Android 8.0/8.1/9/10; ...

CVE-2020-0101

CVE-2020-0101 affects Android devices (Android 8.0–10) and is linked to the BnCrypto::onTransact path in ICrypto.cpp. The vulnerability is an information disclosure due to uninitialized data, enabling local information exposure with system privileges, and requires no user interaction. Public docu...

CVE-2020-0121

CVE-2020-0121: In Android 10, a logic error in AppOpsService.updateUidProcState allows a local information disclosure of location data with user privileges and no user interaction. Affected software is Android 10; root cause is a logic flaw enabling a permission bypass in updateUidProcState. Impa...

CVE-2020-0267

CVE-2020-0267 affects Android 11 WindowManager. The issue allows a local attacker to trigger the launch of a malicious app due to a confused deputy, causing elevation of privilege without extra execution privileges, with user interaction required for exploitation. Affected component is WindowMana...

CVE-2020-0309

CVE-2020-0309 affects Android 11 Bluetooth server and is described across multiple sources as an out-of-bounds write caused by an integer overflow, enabling local elevation of privilege to System with no user interaction required. The vulnerability concerns the Android-11 Bluetooth stack and is l...

CVE-2020-26597

The CVE-2020-26597 entry concerns LG mobile devices running Android 9.0–10, where the Wi‑Fi subsystem has an incorrect input validation that leads to a crash. The issue is tied to LG’s internal ID LVE-SMP-200022 (October 2020). Affected component: Wi‑Fi stack on affected LG devices; root cause st...

CVE-2020-26607

Summary: CVE-2020-26607 describes a privilege-escalation issue in Samsung’s TimaService where a PendingIntent with an empty intent can be exploited by modifying the intent to perform a privileged action on affected devices (Samsung Android O(8.x), P(9.0), Q(10.0)). The Samsung vulnerability ID is...

CVE-2020-28344

CVE-2020-28344 affects LG mobile devices running Android 8.0–10. The root cause is a missing NULL parameter check leading to a NULL pointer dereference, which may cause system services to crash. The available documents (NVD, Red Hat, CVE listing) reiterate this description; no specific CVE patch ...

CVE-2021-0365

CVE-2021-0365 affects Android (Android-10 and Android-11) with a memory corruption issue in the display driver caused by a use-after-free. The vulnerability allows local escalation to System privileges without user interaction, as reported in multiple sources (NVD/Red Hat entry for CVE-2021-0365;...

CVE-2021-0374

CVE-2021-0374 affects Android 11 with a vulnerability in BnAudioPolicyService::onTransact (IAudioPolicyService.cpp) where a missing bounds check allows an out-of-bounds read, enabling local information disclosure with System privileges and no user interaction. Documented impact: confidentiality i...

CVE-2021-0627

CVE-2021-0627 affects OMA DRM. The vulnerability is described as memory corruption due to an integer overflow, enabling local escalation of privilege with System execution privileges required and no user interaction. Patch ID: ALPS05722434 (Issue ALPS05722434) is referenced. Connected sources rei...

CVE-2021-1035

The CVE-2021-1035 entries describe a vulnerability in the Android BluetoothDevicePickerPreferenceController.java: setLaunchIntent allows invoking an arbitrary broadcast receiver due to a confused deputy, enabling local elevation of privilege with no extra privileges and no user interaction requir...

CVE-2021-25359

The CVE-2021-25359 entry describes an improper SELinux policy in Samsung’s SMR APR-2021 Release 1 prior builds that permits local attackers to access AP information via untrusted apps. Public records from multiple sources (e.g., Red Hat advisory, CNVD) align on a local-attack scenario stemming fr...

CVE-2021-25397

CVE-2021-25397 concerns an improper access control in Samsung TelephonyUI prior to SMR MAY-2021 Release 1. The issue allows a local attacker, via untrusted applications, to write arbitrary files within the telephony process. Documented impact across sources indicates local privilege escalation po...

CVE-2021-25460

CVE-2021-25460 affects BlockchainTZService, where an improper access control in the sspExit() function could allow an attacker to terminate the service. The issue is limited to BlockchainTZService prior to SMR Sep-2021 Release 1. Impact is service termination (availability). Remediation: upgrade ...

CVE-2021-25500

CVE-2021-25500 describes a missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 that allows attackers to overwrite TZASC , potentially causing a TEE compromise on Samsung mobile devices. The vulnerability affects versions prior to that release. The underlying issue is a lack of i...

CVE-2022-20014

The CVE-2022-20014 entry concerns the vow driver, where improper input validation can cause memory corruption leading to local escalation of privilege with System execution privileges required. Exploitation does not require user interaction according to the description. The vulnerability is assoc...

CVE-2022-20266

In CVE-2022-20266, the Android 13 Companion component is affected by improper input validation that can allow a service to run with elevated importance without showing a foreground service notification. This enables local elevation of privilege and requires user interaction to exploit; no extra e...

CVE-2022-20279

CVE-2022-20279 affects Android 13, specifically through DevicePolicyManager where a side-channel can reveal whether an app is installed without query permissions, enabling local information disclosure with no extra privileges. The issue is categorized as a Framework component vulnerability (Polic...

CVE-2022-20293

CVE-2022-20293 affects Android 13 LauncherApps: a side-channel disclosure lets a local attacker determine whether an app is installed without query permissions, enabling local information disclosure with no execution privileges and no user interaction. Affected component: LauncherApps; root cause...

CVE-2022-20301

CVE-2022-20301 affects Android 13, with a missing permission check in Content that could allow an attacker to determine whether an account exists on the device, enabling local information disclosure. Impact is described as information disclosure with user execution privileges required and no user...

CVE-2022-20303

CVE-2022-20303 (Android 13) in ContentService: a missing permission check allows an account-detection information disclosure without GET_ACCOUNTS permission. Local attacker with low privileges and no user interaction can reveal whether an account exists on the device. Mitigation is included in An...

CVE-2022-20308

CVE-2022-20308 affects hostapd in Android 13, where an insecure default value in hostapd leads to remote denial of service of the Wi‑Fi hotspot without extra privileges or user interaction. The issue is described as an insecure configuration default that can be exploited remotely to cause DoS. Pu...