CVE-2022-42774

CVE-2022-42774 corresponds to a local denial-of-service vulnerability in the wlan driver caused by a missing bounds check in the wlan path. Connected sources confirm the issue affects the wlan driver and can lead to DoS of wlan services via local access. The Red Hat advisory and other feeds reite...

CVE-2022-44423

CVE-2022-44423 involves a missing permission check in the music service that could trigger a local denial-of-service in the contacts service without requiring additional privileges. Connected sources reference UNISOC chipsets and reiterate the issue as a local DoS vector, but do not provide concr...

CVE-2022-44443

CVE-2022-44443 concerns a missing bounds check in the WLAN driver, causing local denial of service in WLAN services. The connected sources consistently describe the vulnerable component as the WLAN driver and attribute the issue to an out-of-bounds condition leading to DoS. The available document...

CVE-2022-47324

The CVE CVE-2022-47324 involves a missing permission check in a WLAN driver that could lead to local information disclosure. The connected documents reiterate this issue across multiple sources but do not provide concrete details on affected products, versions, or a fix. In the absence of explici...

CVE-2022-47330

CVE-2022-47330 is described as a possible missing permission check in the WLAN driver causing local information disclosure. The connected documents reiterate this description but do not provide concrete technical details such as affected products, versions, root cause specifics, exploitation stat...

CVE-2022-47357

CVE-2022-47357 involves a missing permission check in the log service, enabling local denial of service. The CVSS 3.1 base score is 5.5 (LOCAL attacker, LOW attack complexity, LOW privileges required, HIGH impact on availability). The available documents do not specify the affected vendor/product...

CVE-2022-47450

CVE-2022-47450 concerns the WLAN driver where a missing permission check could allow local information disclosure. Multiple sources (NVD entry, RH advisories, PRION, CNNVD, CVE lists) describe the issue as a local-privilege-context exposure with high confidentiality impact and no explicit exploit...

CVE-2022-48242

CVE-2022-48242 concerns the telephony service in UNISOC chipsets where a missing permission check can lead to local information disclosure without requiring additional execution privileges. The linked documents consistently describe a local-privilege-check failure in the telephony service module,...

CVE-2023-20749

The CVE-2023-20749 issue affects the swpm module in MediaTek chips, caused by a missing bounds check that enables an out-of-bounds write. This could lead to local escalation to SYSTEM privileges with no user interaction required. A patch is available (ALPS07780926/ALPS07780926). Exploitation stat...

CVE-2023-20804

In imgsys, there is a reported out-of-bounds write due to a missing bounds check, leading to local escalation of privilege with System execution privileges required and no user interaction. The entry lists Patch ID ALPS07199773 and Issue ID ALPS07326384 as remediation details. Exploitation status...

CVE-2023-20809

CVE-2023-20809 concerns MediaTek’s vdec component, where a missing bounds check enables an out-of-bounds write. This can lead to local privilege escalation with system privileges, and exploitation does not require user interaction. The advisory notes a patch: DTV03751198 (Issue ID: DTV03751198). ...

CVE-2023-20812

CVE-2023-20812 affects the WLAN driver via an out-of-bounds write caused by improper input validation. Impact described as local information disclosure with potential System privileges required; no user interaction needed for exploitation. Patch ALPS07944987 (Issue ID ALPS07944987) referenced in ...

CVE-2023-21384

CVE-2023-21384 : Affected software is the Android Package Manager. The issue is an information-disclosure vulnerability caused by an unsafe PendingIntent, enabling local information disclosure with low-privilege access. Exploitation requires no user interaction but attacker must have local access...

CVE-2023-21396

CVE-2023-21396 affects Android’s Activity Manager (System component) with a logic error that can cause a background activity to launch, enabling local escalation of privilege. Under the Android 14 release notes, this is categorized as EoP (Moderate) in the System group. The description explicitly...

CVE-2023-32814

Summary: CVE-2023-32814 affects the gnss service in MediaTek-based platforms. The root cause is an improper input validation that allows an out-of-bounds read, enabling local information disclosure with system execution privileges and no user interaction required. Impact and context: Local attack...

CVE-2023-32817

CVE-2023-32817 affects the gnss service. The issue is an out-of-bounds read caused by improper input validation, leading to local information disclosure with system execution privileges required. Exploitation does not require user interaction. A patch is available: ALPS08044040 (Issue ALPS0804403...

CVE-2023-32826

CVE-2023-32826 concerns a vulnerability in camera middleware where missing input validation can cause an out-of-bounds write, enabling local escalation of privilege with System execution privileges required. The issue is described consistently across sources (NVD/Red Hat PRION/CNNVD, etc.). No us...

CVE-2023-33907

The CVE-2023-33907 issue is described across multiple sources as a flaw in the Contacts Service where a missing permission check can allow local information disclosure without requiring additional execution privileges. The Red Hat entry explicitly notes a missing permission check as the root caus...

CVE-2023-33909

CVE-2023-33909 describes a missing permission check in the Contacts service module on UNISOC chipsets, enabling potential local information disclosure without extra privileges. According to NVD, the issue has CVSS v3.1: base score 5.5 (Impact: Confidentiality High; Attack Vector: Local; Privilege...

CVE-2023-42649

CVE-2023-42649 concerns UNISOC chipsets’ engineermode where a missing permission check allows local information disclosure without requiring execution privileges. Affected component: engineermode logic; root cause: inadequate permission validation leading to exposure of sensitive data to local at...

CVE-2023-52349

The CVE-2023-52349 issue affects the ril service and is caused by a missing bounds check that enables an out-of-bounds write. This can lead to local denial of service with System execution privileges required, as indicated by the NVD entry (AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) and corroborated by...

CVE-2024-20111

CVE-2024-20111 affects the ccu component (as reported in multiple sources) and is caused by a missing bounds check leading to an out-of-bounds write. This can enable local privilege escalation with system execution privileges, and exploitation does not require user interaction. Public references ...

CVE-2024-39428

CVE-2024-39428 involves an out-of-bounds write due to a missing bounds check in the trusty service. Across multiple sources (NVD entry and Red Hat advisory) the vulnerability can lead to local denial of service with System execution privileges required. The affected component is described as the ...

CVE-2025-20668

CVE-2025-20668 affects OpenSSH scp; a missing bounds check allows an out-of-bounds write that could enable local privilege escalation without user interaction. Several sources (including PT-2025-19332 and NVD) describe the issue and cite Patch ID ALPS09625562 and Issue ID MSV-3027, but provided d...

CVE-2025-31712

CVE-2025-31712 affects the cplog service due to a missing bounds check that enables an out-of-bounds write. This leads to local denial of service with no additional execution privileges required. The public documents do not provide exploitation details, affected versions, or remediation/patch inf...

CVE-2025-48621

CVE-2025-48621 is linked to the Android framework (DefaultTransitionHandler.java), where an insecure default could enable a tapjacking–driven local elevation of privilege. The issue requires user interaction to exploit and affects Android devices prior to patching. Public references note the vuln...

CVE-2026-28573

CVE-2026-28573 affects Android Wear OS via a Framework component vulnerability described as a local denial of service in AndroidManifest.xml due to a missing permission check. The CVE is characterized as high severity with a CVSSv4 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:I:H/CI:H/AI:H; impacts ...

CVE-2026-28590

CVE-2026-28590 is a critical vulnerability in the Android platform, specifically in the core operating system and Media Framework. The root cause is an improper encryption key validation due to a logic error in multiple code locations. Successful exploitation enables local escalation of privilege...

CVE-2014-1939

CVE-2014-1939 affects Android’s BrowserFrame.java (Android before 4.4). The vulnerability arises from using addJavascriptInterface with an instance of SearchBoxImpl, allowing attackers to perform arbitrary Java code execution via the searchBoxJavaBridge_ interface at certain API levels. Exploitat...

CVE-2014-7952

CVE-2014-7952 affects the Android backup/restore flow via ADB. The backup manager does not filter the data stream from apps’ BackupAgent, enabling a malicious BackupAgent (no Android permissions) to inject extra APKs into the backup archive. Upon restoration, the system installs the injected APKs...

CVE-2014-7953

CVE-2014-7953 describes a race condition in Android 4.4.4’s ActivityManagerService.bindBackupAgent that lets a local user with adb shell execute code as system by coordinating an adb install with a crafted logcat script to force bindBackupAgent to use an ApplicationInfo uid of 1000. The flaw stem...

CVE-2014-8610

The CVE describes a vulnerability in Android prior to 5.0.0 where AndroidManifest.xml does not require SEND_SMS for the SmsReceiver, allowing an unprivileged app to cause stored SMS messages to be resent or new draft SMS messages to be sent by broadcasting the com.android.mms.transaction.MESSAGE_...

CVE-2014-9924

Technical details about CVE-2014-9924 are not provided in the supplied connected documents. Public information appears limited to a Signed to Unsigned Conversion Error in CAF Linux kernel. Monitor for updates.

CVE-2014-9927

Technical details about CVE-2014-9927 are not publicly provided in the connected documents. The entries reiterate a buffer copy issue but do not specify affected product versions, root cause specifics, impact, or available fixes. Monitor for updates from vendors.

CVE-2014-9972

CVE-2014-9972 affects Qualcomm products used in Android devices that run CAF Android builds with the Linux kernel. The issue arises when assertions are disabled, which can lead to a NULL pointer dereference during an out-of-memory condition. The description in the provided documents attributes th...

CVE-2015-3871

CVE-2015-3871 affects libstagefright in Android prior to 5.1.1 LMY48T. A crafted media file could trigger memory corruption in mediaserver/libstagefright, enabling remote code execution or a denial of service. The Android Security Bulletin notes that builds LMY48T or later address these issues, a...

CVE-2015-3873

CVE-2015-3873 affects libstagefright in Android versions before 5.1.1 LMY48T. The issue is a memory corruption vulnerability in libstagefright triggered by processing a crafted media file, enabling remote code execution or a denial of service. The description references multiple internal bug IDs ...

CVE-2015-6611

The CVE-2015-6611 entry describes a vulnerability in Android’s mediaserver prior to 5.1.1 LMY48X and 6.0 before 2015-11-01 that allows remote attackers to obtain sensitive information and thereby bypass an unspecified protection mechanism. The issue is categorized as an information-disclosure vul...

CVE-2015-6621

CVE-2015-6621 affects Android SystemUI on 5.x prior to 5.1.1 LMY48Z and 6.0 prior to 2015-12-01. A crafted app can escalate privileges to Signature/SignatureOrSystem due to the SystemUI bug 23909438. The vulnerability is documented across NVD/CVE lists and is addressed by the December 2015 Androi...

CVE-2015-6623

CVE-2015-6623 is an Android Wi‑Fi elevation-of-privilege vulnerability affecting Android 6.0 and earlier builds before 2015-12-01. Exploitation could allow a crafted application to gain Signature or SignatureOrSystem access through the Wi‑Fi stack, as described in the Android bulletin’s entry for...

CVE-2015-7718

CVE-2015-7718 affects Android’s mediaserver in versions 5.x up to 5.1.1 (LMY48T) and 6.0 prior to 2015-10-01. The vulnerability allows a denial of service (process crash) via unspecified vectors and is described as a different issue from CVE-2015-6605. The provided sources do not reveal the exact...

CVE-2015-8074

CVE-2015-8074 affects Android mediaserver prior to 5.1.1 LMY48X. The vulnerability allows remote attackers to obtain sensitive information and bypass an unspecified protection mechanism via unknown vectors, tied to internal bugs 23540907 and 23515142. This entry is distinguished from CVE-2015-661...

CVE-2015-8995

CVE-2015-8995 describes an integer overflow vulnerability in TrustZone that could affect all Android releases from CAF using the Linux kernel. The connected NVD entry attributes this to the TrustZone component, noting potential impacts to confidentiality, integrity, and availability (CVSS base me...

CVE-2015-9000

Technical details about CVE-2015-9000 are not publicly available in the provided Connected documents; the description only states a TrustZone untrusted pointer dereference in a DRM routine across CAF Android kernel releases.

CVE-2016-0815

CVE-2016-0815 affects the mediaserver component of Android, specifically the MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp within libstagefright. The vulnerability exists on Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01, where processing a crafted media...

CVE-2016-0816

The CVE-2016-0816 issue affects mediaserver on Android 6.x (before March 1, 2016). The vulnerability allows remote code execution or memory corruption via a crafted media file, related to decoder/ih264d_parse_islice.c and decoder/ih264d_parse_pslice.c (internal bug 25928803). Affects the Mediaser...

CVE-2016-0829

The CVE-2016-0829 issue affects Android mediaserver and is triggered in the BnGraphicBufferProducer::onTransact path within libs/gui/IGraphicBufferConsumer.cpp. The root cause is failure to initialize a specific output data structure in Mediaserver, allowing an attacker to read leaked data and by...

CVE-2016-0848

CVE-2016-0848 is a race-condition vulnerability in Android’s Download Manager that affects Android 4.x (before 4.4.4), 5.x (before 5.0.2 or 5.1.1), and 6.x (before 2016-04-01). A crafted app can exploit a symlink target change to bypass private-storage file-access restrictions, enabling unauthori...

CVE-2016-11042

CVE-2016-11042 affects Samsung mobile devices running L (5.0/5.1) and M (6.0), describing a SIM lock bypass. The connected documents reiterate only that a SIM lock bypass exists (SVE-2016-5381) but do not provide technical details about the affected component, root cause, exploitability, or concr...

CVE-2016-2417

CVE-2016-2417 affects mediaserver’s mediaserver component (frameworks/av/media/libmedia/IOMX.cpp) on Android 4.x–6.x where a parameter data structure is not initialized, enabling information disclosure from process memory and potentially bypassing a protection mechanism. This is demonstrated via ...