CVE-2019-20575

The CVE-2019-20575 entry concerns Samsung mobile devices running P(9.0). The vulnerability lies in the WPA3 handshake, allowing a downgrade or dictionary attack. Affected component: WPA3 handshake implementation on Samsung devices (SVE-2019-14204 reference). The available connected records corrob...

CVE-2019-20610

The CVE-2019-20610 entry describes a double-fetch vulnerability in Trustlet on Samsung mobile devices running N(7.X) and O(8.X) with Exynos 7570/7870/7880/7885/8890/8895/9810 chipsets, enabling arbitrary TEE code execution. Affected component: Trustlet in the TEE. Root cause: double-fetch window ...

CVE-2019-2084

The CVE-2019-2084 issue affects the libxaac library in Android 10. It is caused by a missing bounds check that allows an out‑of‑bounds write, enabling remote code execution. Exploitation requires user interaction. The vulnerability impacts Android 10 devices with libxaac, and multiple connected s...

CVE-2019-2121

CVE-2019-2121 : A race condition in ActivityManagerService.attachApplication on Android 9 (Pie) can lead to local escalation of privilege without extra privileges; no user interaction required. Affected component is the framework entry point for app attachment. The core issue is a race in attachi...

CVE-2019-2200

CVE-2019-2200 affects Android 10 where updatePermissions in PermissionManagerService.java could allow a malicious app to bypass a custom-permission check, enabling local privilege escalation with full confidentiality/ integrity/ availability impact as described. Root cause: permission bypass with...

CVE-2019-2208

CVE-2019-2208 affects Android components (Android 8.1 and 9) with a flaw in V8 JIT code during PromiseBuiltinsAssembler::NewPromiseCapability, causing an out-of-bounds read. This can lead to remote information disclosure without user interaction or privileges. The connected records confirm the is...

CVE-2020-0015

CVE-2020-0015 affects the Android framework via CertInstaller.java (onCreate), where an attacker could overlay the Certificate Installation dialog to escalate privileges locally without extra execution privileges. Impact is described as local EoP with partial confidentiality/integrity/availabilit...

CVE-2020-0088

CVE-2020-0088 affects Android 10 and is caused by an issue in parseTrackFragmentRun within MPEG4Extractor.cpp that can lead to resource exhaustion and a remote Denial of Service. Exploitation requires user interaction. The description does not specify the exact vulnerable versions beyond Android-...

CVE-2020-0104

CVE-2020-0104 affects Android 9 and 10, due to a logic error in KeyguardStateMonitor.java (onShowingStateChanged) that can disclose keyguard-protected data locally without extra privileges or user interaction. The issue is documented with a local-privilege/exposure impact (CVSS 3.1/5.5; CVSS2 bas...

CVE-2020-0190

CVE-2020-0190 affects Android 10 with a vulnerability in ideint_weave_blk of ideint_utils.c caused by a heap buffer overflow leading to an out-of-bounds write. This could enable remote code execution. Exploitation requires user interaction per the description. The Pixel security bulletin lists CV...

CVE-2020-0296

The CVE-2020-0296 issue affects Android 11’s ADB server and USB server, where an unsafe PendingIntent causes a permission bypass that can lead to local information disclosure. Exploitation is local (no user interaction required per the description) and relies on an attacker with access to the dev...

CVE-2020-0365

CVE-2020-0365 affects Android 11 netd; root cause is a missing bounds check causing an out-of-bounds read that can lead to a remote DoS without user interaction. Exploitation is Local with low complexity; impact is DoS with partial availability impact. Remediation: addressed in Android 11 release...

CVE-2020-26599

CVE-2020-26599 affects Samsung mobile devices running Q(10.0) software. The DynamicLockscreen Terms and Conditions can be accepted without authentication, enabling potential credentialless interaction with the lockscreen flow. The Samsung ID SVE-2020-17079 (October 2020) is cited. Connected advis...

CVE-2021-0383

CVE-2021-0383 affects CaptivePortalLoginActivity.java on Android 11. Root cause: a confused deputy could lead to local escalation of privilege in carrier settings without additional execution privileges; no user interaction required. Impact: partial confidentiality/integrity/availability (HIGH fo...

CVE-2021-0403

CVE-2021-0403 affects MediaTek netdiag on Android-11 . The root cause is a missing permission check in netdiag that can cause local information disclosure with System execution privileges needed. Exploitation requires no user interaction (local attack). Publicly documented patch: ALPS05475124 . E...

CVE-2021-0460

CVE-2021-0460 affects Google's FingerTipS touchscreen driver in the Android kernel. The root cause is an integer overflow causing an out-of-bounds read in fts_driver_test_write, enabling a local attacker to disclose kernel data. Exploitation requires ability to execute low-privileged code; user i...

CVE-2021-0897

In CVE-2021-0897, the vulnerability affects the apusys component, where a missing bounds check allows an out-of-bounds write. This can lead to local privilege escalation with System execution privileges required and does not require user interaction. A patch is identified as ALPS05672107 (Issue A...

CVE-2021-25426

CVE-2021-25426 concerns Samsung Message’s SmsViewerActivity, where improper component protection permits untrusted apps to access Message files. Affected: Samsung Message versions before SMR July-2021 Release 1. Root cause is lack of proper access controls on SmsViewerActivity. Impact, as stated,...

CVE-2021-25476

CVE-2021-25476 describes an information-disclosure vulnerability in Widevine TA log prior to Samsung SMR Oct-2021 Release 1 that enables bypass of ASLR in the Trusted Execution Environment (TEE). Affected component: Widevine TA log. Root cause: information leakage in the log prior to the SMR patc...

CVE-2021-25485

CVE-2021-25485 corresponds to a path-traversal vulnerability in FactoryAirCommnadManger, exploitable via a Bluetooth remote socket to write files as the system UID. Affected firmware/product versioning is described as prior to Samsung SMR Oct-2021 Release 1. The connected sources consistently ide...

CVE-2021-25500

CVE-2021-25500 describes a missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 that allows attackers to overwrite TZASC , potentially causing a TEE compromise on Samsung mobile devices. The vulnerability affects versions prior to that release. The underlying issue is a lack of i...

CVE-2021-25501

CVE-2021-25501 involves an improper access control flaw in SCloudBnRReceiver within the SecTelephonyProvider. The root cause allows an untrusted application to call some protected providers, with impact described as limited integrity impact and no confidentiality/availability impact per CVSS metr...

CVE-2022-20213

CVE-2022-20213 affects Android 10–12, specifically the ApplicationsDetailsActivity in AndroidManifest.xml. The issue permits a local DoS via tapjacking/overlay with user interaction required and no additional execution privileges. CVSS v3.1 base score 5.5 (Medium). Exploitation status is not prov...

CVE-2022-20266

In CVE-2022-20266, the Android 13 Companion component is affected by improper input validation that can allow a service to run with elevated importance without showing a foreground service notification. This enables local elevation of privilege and requires user interaction to exploit; no extra e...

CVE-2022-20295

CVE-2022-20295 affects Android 13 via a missing permission check in ContentService, enabling information disclosure by checking whether an account exists on the device. Impact is local, with no user interaction required beyond local access; exploits are described as requiring user privileges but ...

CVE-2022-20301

CVE-2022-20301 affects Android 13, with a missing permission check in Content that could allow an attacker to determine whether an account exists on the device, enabling local information disclosure. Impact is described as information disclosure with user execution privileges required and no user...

CVE-2022-20313

The CVE-2022-20313 entry affects Android 13 and concerns the Bluetooth subsystem. It describes an out-of-bounds write due to a missing bounds check, which could enable local escalation of privilege to System level without user interaction. The vulnerability impacts the Bluetooth path selectively ...

CVE-2022-26453

The CVE-2022-26453 issue affects the MediaTek teei module. A memory corruption caused by use-after-free is the root cause. Consequences stated are local escalation of privilege with System execution privileges required, and exploitation does not require user interaction. A patch is referenced: AL...

CVE-2022-30724

CVE-2022-30724 (Samsung Mobile Bluetooth Information Disclosure) : The vulnerability arises from broadcasting the BluetoothDevice object in the sendIntentSessionCompleted function without properly restricting receivers, which leaks the MAC address of the connected Bluetooth device. This affects S...

CVE-2022-32614

CVE-2022-32614 concerns a memory corruption flaw in Audio processing within MediaTek chipsets. The root cause is a logic error in the audio path that can allow local privilege escalation to SYSTEM level with no user interaction required. Exploitation details are not provided in the available docu...

CVE-2022-33694

CVE-2022-33694 is an exposure of sensitive information in the Samsung CSC application on Samsung Mobile devices. The root issue is disclosure of wifi information through unprotected intent broadcasting within the CSC app prior to the SMR July 2022 release 1. The vulnerability permits a local atta...

CVE-2022-36848

In the connected PT-2022-23652 document, the issue is an Improper Authorization in the SoftwareX component tied to the setDualDARPolicyCmd function. Affects SoftwareX versions prior to SMR Sep-2022 Release 1; local attackers can cause a local permanent denial of service. Mitigation: update to SMR...

CVE-2022-39088

CVE-2022-39088 : A missing permission check in a network service affecting UNISOC chipsets can lead to local privilege escalation to SYSTEM execution privileges. The entry lacks explicit affected product versions or a published fix in the provided documents. Exploitation status is not disclosed. ...

CVE-2022-39099

CVE-2022-39099: A missing permission check in the power management service enables setup of the service with no additional execution privileges required. CVSSv3.1 base metrics (LOCAL access, LOW privileges) indicate high impact on confidentiality, integrity, and availability. Connected sources co...

CVE-2022-39100

CVE-2022-39100: A missing permission check in the power management service is described across multiple sources (notably UNISOC chipset context). Affected component is the power management service; root cause is improper authorization, allowing setup with no additional execution privileges. Impac...

CVE-2022-39111

CVE-2022-39111 describes a missing permission check in the Music service that can lead to elevation of privilege with no additional execution privileges required. The vulnerability is characterized as local, with low privileges required, and high impact to confidentiality, integrity, and availabi...

CVE-2022-39883

CVE-2022-39883 affects Samsung StorageManagerService prior to SMR Nov-2022 Release 1. The issue is an improper authorization that lets a local attacker call a privileged API. The NVD CVSSv3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW complexity, and Privileges Required: LOW. Red Hat/...

CVE-2022-42757

CVE-2022-42757 affects the wlan driver (notably in UNISOC chipsets). The root cause is a missing bounds check in the wlan driver, which could lead to local denial of service in wlan services. Documented impacts across multiple sources indicate a local attack vector with low overall risk (CVSS 3.1...

CVE-2022-48246

The CVE-2022-48246 entry concerns UNISOC/UNISOC-labeled audio service with a missing permission check in its local component. The underlying issue is a privilege check omission that could allow local escalation of privilege without requiring additional execution privileges. Publicly documented im...

CVE-2023-20628

CVE-2023-20628 concerns the thermal module in MediaTek chips. A memory corruption flaw is caused by an uncaught exception and can lead to local escalation of privilege with System execution privileges required; no user interaction is needed. Patch ID ALPS07494460 is referenced as a fix. Exploit d...

CVE-2023-20633

CVE-2023-20633 describes a potential out-of-bounds write in the usb module due to a missing bounds check, enabling local escalation of privileges with SYSTEM level execution and no user interaction required. The vulnerability is described consistently across multiple sources and references patch ...

CVE-2023-20718

CVE-2023-20718 affects the vcu module in MediaTek chip families. The root cause is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with System execution privileges required and no user interaction needed. The entry lists patch ALPS07645181/ALPS07645...

CVE-2023-20782

MediaTek’s keyinstall component in the MediaTek microprogram software is affected by CVE-2023-20782, caused by a missing bounds check that can lead to local information disclosure with System privileges (no user interaction). A patch is noted as ALPS07550104 (Issue ALPS07550103). Connected adviso...

CVE-2023-21333

CVE-2023-21333 describes an information-disclosure flaw in Android’s Text Services where an attacker can determine if an app is installed via side-channel information disclosure. This can lead to local information leakage with no additional privileges and without user interaction. Connected docum...

CVE-2023-21347

CVE-2023-21347 is a Bluetooth information-disclosure vulnerability caused by a missing bounds check that enables a remote read of memory without user interaction. The initial and related records consistently describe an out-of-bounds read leading to potential information disclosure with no extra ...

CVE-2023-21359

CVE-2023-21359 concerns Bluetooth: an out-of-bounds read due to a missing bounds check could disclose local information via the Bluetooth server. Exploitation requires SYSTEM privileges; no user interaction. Documented in NVD/Red Hat/CNVD entries and Android 14 notes corroborate a Bluetooth infor...

CVE-2023-32823

The CVE-2023-32823 entry describes a memory corruption issue in the rpmb module (MediaTek). The root cause is a missing bounds check that can lead to local privilege escalation with System-level execution privileges required; no user interaction is needed. Affected component: rpmb (MediaTek devic...

CVE-2023-33887

CVE-2023-33887 affects the telephony service due to a missing permission check, enabling local information disclosure without additional execution privileges. The core issue is a privilege-check gap in the telephony component, with the impact described as local data leakage and no user interactio...

CVE-2023-35689

Summary: CVE-2023-35689 is an Elevation of Privilege in Wear OS related to an insecure default value in checkDebuggingDisallowed within DeviceVersionFragment.java, allowing local escalation of privilege with no extra execution privileges and no user interaction. The issue is listed with High seve...

CVE-2023-40636

CVE-2023-40636 relates to a vulnerability in the telecom service where a missing permission check could allow writing permission usage records for an app, enabling local information disclosure. The underlying issue requires System-level execution privileges for exploitation, with a CVSSv3.1 base ...