CVE-2022-20334

CVE-2022-20334 affects Android 13 via a Bluetooth null pointer dereference that can cause remote denial of service without user interaction. Affected product/module: Android Bluetooth stack on Android 13. Root cause: dereferencing a null pointer in Bluetooth processing leading to process crash. I...

CVE-2022-26450

CVE-2022-26450 affects MediaTek Apusys. The vulnerability is a use-after-free caused by a race condition in apusys that can lead to local escalation of privileges with System execution privileges required; exploitation does not require user interaction. The issue is documented across multiple sou...

CVE-2022-26451

In ged, a use-after-free due to improper locking is described, enabling local escalation to SYSTEM privileges with no user interaction required. Patch ID ALPS07202966 (Issue ALPS07202966) is noted as the remediation; exploitation status is not detailed in the provided documents.

CVE-2022-30725

CVE-2022-30725 refers to a Bluetooth issue in Samsung devices where a broadcast Intent that includes a BluetoothDevice object is not properly restricted to recipients in the sendIntentSessionError function, prior to the SMR Jun-2022 Release 1. This leads to leakage of the connected device’s MAC a...

CVE-2022-32609

CVE-2022-32609 affects the vcu component (MediaTek) and is caused by a race condition that enables a use-after-free. The issue can lead to local escalation of privilege with SYSTEM privileges required; exploitation does not require user interaction. Patch ALPS07203410/ALPS07203410 is referenced a...

CVE-2022-32613

CVE-2022-32613 affects the vcu component. A race condition can cause memory corruption, enabling local privilege escalation with SYSTEM execution privileges and no user interaction required. The exploitation vector/status is not detailed in the provided documents, but a patch is identified (ALPS0...

CVE-2022-32647

CVE-2022-32647 affects the ccu component and is described as an out-of-bounds write caused by improper input validation. The impact is local escalation of privilege with system execution privileges required, and exploitation is possible without user interaction. Remediation: patch identified as A...

CVE-2022-33701

KnoxCustomManagerService on Samsung devices is affected by an improper access control vulnerability prior to SMR Jul-2022 Release 1, allowing an attacker to invoke PowerManaer.goToSleep by sending a broadcast intent despite the method being protected by system permissions. Root cause: lack of pro...

CVE-2022-36868

The issue in CVE-2022-36868 affects Samsung Mobile devices with the MouseNKeyHidDevice before SMR Oct-2022 Release 1. The root cause is an improper restriction of broadcasting an Intent, which leaks the MAC address of the connected Bluetooth device. Impact is limited to exposure of MAC address; n...

CVE-2022-38679

CVE-2022-38679 affects the music service where a missing permission check could allow a local denial of service without extra privileges. The CVE entries (NVD, PRION, PRiON, CNNVD, CVELIST, VULNRICHMENT) consistently describe a local impact due to insufficient authorization in the music service, ...

CVE-2022-39098

The CVE-2022-39098 entry details a vulnerability in the power management service where a missing permission check could allow an attacker to set up the power management service without requiring additional execution privileges. Judging from the connected records, the issue is assigned a CVSS v3.1...

CVE-2022-39108

CVE-2022-39108 affects the Music service: a missing permission check is the root cause, enabling elevation of privilege with no extra execution privileges required. According to the available data, the exploit is local with low privileges required and no user interaction, and the CVSSv3.1 base sc...

CVE-2022-39883

CVE-2022-39883 affects Samsung StorageManagerService prior to SMR Nov-2022 Release 1. The issue is an improper authorization that lets a local attacker call a privileged API. The NVD CVSSv3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW complexity, and Privileges Required: LOW. Red Hat/...

CVE-2022-39895

The CVE-2022-39895 entry concerns an improper access control vulnerability in ContactListUtils on Samsung Phone software prior to SMR Dec-2022 Release 1. The issue allows access to contact group information via implicit intents, attributed to the ContactListUtils component. Affected product scope...

CVE-2022-42776

CVE-2022-42776 affects the UscAIEngine service, with a missing permission check that could allow setting up the service without requiring additional execution privileges. The issue is described consistently across NVD/Red Hat records and related feeds as a privilege-check bypass within the UscAIE...

CVE-2022-44441

CVE-2022-44441 affects the WLAN driver with a missing bounds check in the driver code, causing local denial of service in WLAN services. The base CVSS v3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) yields a MEDIUM base score of 5.5. Multiple sources corroborate the description, including Red H...

CVE-2022-47341

The CVE-2022-47341 entry describes a vulnerability in engineermode services with a missing permission check that could allow local escalation of privilege to system execution privileges. Affected component: engineermode services. Root cause: inadequate permission validation leading to privilege e...

CVE-2022-47365

CVE-2022-47365 relates to a missing bounds check in the wlan driver that can cause an out-of-bounds write, leading to local denial of service in wlan services. Affected component: wlan driver (specific products/versions not enumerated in the provided documents). Root cause: missing bounds check e...

CVE-2022-47456

CVE-2022-47456 concerns the UNISOC wlan driver: a missing parameter check in the WLAN module can cause a local denial of service. The NVD entry lists a CVSS v3.1 base score of 5.5 (Medium) with local attack vector and low privileges required, while exploitation details are not provided in the rec...

CVE-2022-47466

CVE-2022-47466 is described across connected sources as a missing permission check in the telecom service that could cause local denial of service. Documents cite the root cause and impact (local DoS) but do not provide concrete vendor/product versions or a remediation. Exploitation details are n...

CVE-2022-47468

CVE-2022-47468 is linked in connected documents to a vulnerability in UNISOC chipsets , described as a missing privilege/permission check that can cause a local denial of service . The root cause is stated as a lack of privilege checking leading to DoS; the Red Hat/NVD entries reiterate the same ...

CVE-2022-48246

The CVE-2022-48246 entry concerns UNISOC/UNISOC-labeled audio service with a missing permission check in its local component. The underlying issue is a privilege check omission that could allow local escalation of privilege without requiring additional execution privileges. Publicly documented im...

CVE-2023-20633

CVE-2023-20633 describes a potential out-of-bounds write in the usb module due to a missing bounds check, enabling local escalation of privileges with SYSTEM level execution and no user interaction required. The vulnerability is described consistently across multiple sources and references patch ...

CVE-2023-20636

CVE-2023-20636 affects the MediaTek display drm module. The root cause is a missing bounds check that can cause an out-of-bounds write, enabling local privilege escalation with SYSTEM execution privileges required; no user interaction is needed. A patch is identified as ALPS07292593/ALPS07292593....

CVE-2023-20637

CVE-2023-20637 affects the ril component in MediaTek chips, with an out-of-bounds write caused by a missing bounds check. The issue could enable local escalation of privilege with System execution privileges required and no user interaction needed. Patch ALPS07628588/ALPS07628588 is referenced; n...

CVE-2023-20639

CVE-2023-20639 affects the ril module in MediaTek chips, where a missing bounds check enables an out-of-bounds write that can lead to local escalation of privilege with System execution privileges required. The vulnerability is exploitable locally with no user interaction, and a patch (ALPS076285...

CVE-2023-20663

CVE-2023-20663 describes a potential out-of-bounds write in wlan due to an integer overflow, enabling local privilege escalation with System execution privileges required and no user interaction. The vulnerability is tied to a patch ID ALPS07560741 / Issue ID ALPS07560741. Connected sources menti...

CVE-2023-20674

The CVE-2023-20674 issue affects the WLAN component in MediaTek devices, caused by an out-of-bounds read due to a missing bounds check. This vulnerability could allow local information disclosure and may enable system-level execution privileges, with no user interaction required. Multiple feeds (...

CVE-2023-20676

CVE-2023-20676 is an out-of-bounds read vulnerability in the WLAN component of MediaTek devices (notably affecting Mediatek WLAN stacks such as MT5221 and similar chips). The underlying issue is a missing bounds check, enabling local information disclosure and, per the description, potentially al...

CVE-2023-20782

MediaTek’s keyinstall component in the MediaTek microprogram software is affected by CVE-2023-20782, caused by a missing bounds check that can lead to local information disclosure with System privileges (no user interaction). A patch is noted as ALPS07550104 (Issue ALPS07550103). Connected adviso...

CVE-2023-20797

CVE-2023-20797 describes an out-of-bounds write in MediaTek camera middleware caused by a missing bounds check, leading to local escalation of privileges with System execution privileges required and no user interaction needed. The entry cites a patch/issue identifier ALPS07629582 as the mitigati...

CVE-2023-21293

CVE-2023-21293 affects Android’s PackageManagerNative, enabling a side‑channel check to determine if an app is installed without query permissions. Impact: potential information disclosure leading to local elevation of privilege, with no extra execution privileges and no user interaction required...

CVE-2023-21325

Technical details about CVE-2023-21325 are not publicly available in the provided connected documents. No concrete information on affected products, versions, or fixes is present. Monitor for updates.

CVE-2023-21327

CVE-2023-21327 relates to a side-channel information disclosure in Android’s Permission Manager, enabling an attacker to determine if an app is installed without query permissions. The vulnerability allows local information disclosure with no extra execution privileges and requires no user intera...

CVE-2023-21333

CVE-2023-21333 describes an information-disclosure flaw in Android’s Text Services where an attacker can determine if an app is installed via side-channel information disclosure. This can lead to local information leakage with no additional privileges and without user interaction. Connected docum...

CVE-2023-32808

The CVE-2023-32808 entry concerns a Bluetooth driver issue where improper access control of the register interface allows read/write access to registers, enabling local leakage of sensitive information with system-level privileges required. The description notes no user interaction is needed for ...

CVE-2023-32814

Summary: CVE-2023-32814 affects the gnss service in MediaTek-based platforms. The root cause is an improper input validation that allows an out-of-bounds read, enabling local information disclosure with system execution privileges and no user interaction required. Impact and context: Local attack...

CVE-2023-32821

CVE-2023-32821 relates to MediaTek chips where a vulnerability in the video module allows an out-of-bounds write due to a permissions bypass. This could enable local escalation to SYSTEM privileges without user interaction. A patch is identified as ALPS08013430 (Issue ALPS08013433). Exploitation ...

CVE-2023-32824

The CVE-2023-32824 entry affects the rpmb module and describes a double-free issue caused by improper locking, enabling local escalation of privilege with System execution privileges required and no user interaction. Patch: ALPS07912966; Issue: ALPS07912961. Connected records consistently identif...

CVE-2023-35689

Summary: CVE-2023-35689 is an Elevation of Privilege in Wear OS related to an insecure default value in checkDebuggingDisallowed within DeviceVersionFragment.java, allowing local escalation of privilege with no extra execution privileges and no user interaction. The issue is listed with High seve...

CVE-2023-40636

CVE-2023-40636 relates to a vulnerability in the telecom service where a missing permission check could allow writing permission usage records for an app, enabling local information disclosure. The underlying issue requires System-level execution privileges for exploitation, with a CVSSv3.1 base ...

CVE-2023-42655

CVE-2023-42655 relates to the sim service where there is a missing permission check that allows writing permission usage records, enabling local privilege escalation to System level. The advisory consistently references the sim service as the affected component and describes the root cause as ins...

CVE-2023-52349

The CVE-2023-52349 issue affects the ril service and is caused by a missing bounds check that enables an out-of-bounds write. This can lead to local denial of service with System execution privileges required, as indicated by the NVD entry (AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) and corroborated by...

CVE-2024-20013

CVE-2024-20013: MediaTek media chips — in keyInstall there is an out-of-bounds write due to a missing bounds check, enabling local privilege escalation to System level. Exploitation details are not provided in the documents; exploitation status is not confirmed. Patch ID ALPS08471742; Issue ID AL...

CVE-2024-20084

CVE-2024-20084 affects MediaTek power components. The vulnerability is an out-of-bounds read caused by a missing bounds check, potentially enabling local information disclosure with System execution privileges required; exploitation is not user-initiated. Patch ALPS08944210 is noted (Issue MSV-15...

CVE-2024-20111

CVE-2024-20111 affects the ccu component (as reported in multiple sources) and is caused by a missing bounds check leading to an out-of-bounds write. This can enable local privilege escalation with system execution privileges, and exploitation does not require user interaction. Public references ...

CVE-2024-20124

The vulnerability CVE-2024-20124 affects the vdec component, where an out-of-bounds read due to improper structure design could lead to local information disclosure. Exploitation requirements: SYSTEM privileges are needed, with no user interaction required. Patch ID ALPS09008925 (MSV-1568) is ref...

CVE-2024-20127

CVE-2024-20127 affects the Telephony component in MediaTek chipsets. The issue is an out-of-bounds read caused by a missing bounds check, which could enable remote denial of service without user interaction. Patch ALPS09289881 is referenced as a fix. Exploitation details are not provided in the d...

CVE-2024-20129

CVE-2024-20129 affects Telephony with a missing bounds check leading to an out-of-bounds read and potential remote denial of service. The vulnerability is exploitable over the network without privileges or user interaction, per the provided description. A patch is identified as ALPS09289881 (Issu...

CVE-2024-39428

CVE-2024-39428 involves an out-of-bounds write due to a missing bounds check in the trusty service. Across multiple sources (NVD entry and Red Hat advisory) the vulnerability can lead to local denial of service with System execution privileges required. The affected component is described as the ...