CVE-2019-2200

CVE-2019-2200 affects Android 10 where updatePermissions in PermissionManagerService.java could allow a malicious app to bypass a custom-permission check, enabling local privilege escalation with full confidentiality/ integrity/ availability impact as described. Root cause: permission bypass with...

CVE-2019-2208

CVE-2019-2208 affects Android components (Android 8.1 and 9) with a flaw in V8 JIT code during PromiseBuiltinsAssembler::NewPromiseCapability, causing an out-of-bounds read. This can lead to remote information disclosure without user interaction or privileges. The connected records confirm the is...

CVE-2020-0015

CVE-2020-0015 affects the Android framework via CertInstaller.java (onCreate), where an attacker could overlay the Certificate Installation dialog to escalate privileges locally without extra execution privileges. Impact is described as local EoP with partial confidentiality/integrity/availabilit...

CVE-2020-0189

In Android 10, the vulnerability CVE-2020-0189 affects the Media Framework (hevc/decoder path) via ihevcd_decode() in ihevcd_decode.c, causing resource exhaustion from an infinite loop. This can lead to remote denial of service without extra execution privileges; exploitation requires user intera...

CVE-2020-0190

CVE-2020-0190 affects Android 10 with a vulnerability in ideint_weave_blk of ideint_utils.c caused by a heap buffer overflow leading to an out-of-bounds write. This could enable remote code execution. Exploitation requires user interaction per the description. The Pixel security bulletin lists CV...

CVE-2020-0296

The CVE-2020-0296 issue affects Android 11’s ADB server and USB server, where an unsafe PendingIntent causes a permission bypass that can lead to local information disclosure. Exploitation is local (no user interaction required per the description) and relies on an attacker with access to the dev...

CVE-2017-14896

The CVE affects Android devices using Qualcomm GUD mobicore driver (Android for MSM/CAF builds) where a memory allocation occurs without validating length, causing an undersized buffer and potential kernel memory overwrite. Root cause: missing length-field validation in the mobicore driver. Impac...

CVE-2017-14897

The CVE-2017-14897 entry corresponds to a local privilege-elevation flaw in the RPMB/CAF kernel path used by Android on MSM/CAF builds. The described issue is that, while handling QSEOS_RPMB_CHECK_PROV_STATUS_COMMAND, a userspace buffer is directly accessed from kernel space, enabling local explo...

CVE-2017-15822

CVE-2017-15822 affects Qualcomm-based Android devices (MSM) including Firefox OS for MSM and QRD Android builds within CAF releases prior to the 2018-04-05 security patch level. Description: a buffer overflow may occur while processing an 802.11 management frame in the Linux kernel components use...

CVE-2017-15828

CVE-2017-15828 affects CAF builds of Android (Android for MSM, Firefox OS for MSM, QRD Android) running on the Linux kernel. The vulnerability is an integer overflow during keystore access in LK, which may lead to a buffer overflow. Public references in the provided documents confirm the issue an...

CVE-2017-18069

CVE-2017-18069 affects Android for MSM, Firefox OS for MSM, and QRD Android builds that use CAF Linux kernel, where an improper message length calculation in oem_cmd_handler() while processing a WLAN_NL_MSG_OEM netlink message leads to a buffer overread. Public data lists CVSS base scores around ...

CVE-2017-18158

CVE-2017-18158 is a buffer overflow/array bounds issue in Android builds based on CAF with the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) that could occur while flashing images. Root cause: improper memory handling leading to overflows. Impact per documented data: local impac...

CVE-2017-18653

CVE-2017-18653 affects Samsung mobile devices running KK (4.4), L (5.0/5.1), M (6.0), and N (7.x). The Email application is vulnerable to an attack via a broadcasted intent that allows an attacker to send emails on behalf of any user. The issue is identified by Samsung as SVE-2017-9357 (Sept 2017...

CVE-2017-6295

Affected software/hardware: NVIDIA TrustZone Software (Keymaster) in NVIDIA SHIELD TV SE 6.2 and earlier. Vulnerability: reads data past the end or before the beginning of the intended buffer, potentially leading to denial of service or information disclosure. Impact/Severity: rated high (CVE-201...

CVE-2017-7368

CVE-2017-7368 affects Android releases from CAF that use the Linux kernel. The issue is a race condition in the ioctl handler of a sound driver, identified as the root cause in the description. The access vector is local, with user interaction required, and the impact is described as high for con...

CVE-2017-7372

CVE-2017-7372 affects Android devices using CAF Linux kernel video drivers. The issue is a race condition in a video driver that could lead to a buffer overflow or write to an arbitrary pointer location, as described in the NVD entry. No specific affected devices, versions, exploit details, or re...

CVE-2018-13893

CVE-2018-13893 affects Android platforms built on CAF Linux kernels, with the root cause described as out-of-bounds access when copying masks to userspace due to using an old value of the msg mask table count. The CVSS3 vector (LOCAL, LOW CIA/IIA, HIGH impact) indicates local access is required a...

CVE-2018-21050

CVE-2018-21050 concerns Samsung mobile devices running N(7.x) and O(8.X) on Exynos chipsets, where a Buffer overflow in the esecomm Trustlet can lead to arbitrary code execution. The vulnerability is identified by Samsung as SVE-2018-12852 (October 2018). The connected records confirm the affecte...

CVE-2018-5842

CVE-2018-5842 describes a WLAN privilege/Arbitrary address write in Qualcomm WLAN on Android devices (CAF Android for MSM, Firefox OS for MSM, QRD Android) due to the WLAN firmware sending incorrect data to the WLAN driver. The root cause is a data handling flaw in the interaction between comprom...

CVE-2018-5846

CVE-2018-5846 affects the IPA driver in Android CAF (Android for MSM, Firefox OS for MSM, QRD Android) on Linux kernels. The issue is a Use-After-Free in the IPA driver that can occur when IPA IOCTLs IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_ADD/IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_DEL/IPA_IOC_NOTIFY_WAN_EM...

CVE-2018-9345

CVE-2018-9345 affects Android’s BnAudioPolicyService (AudioPolicyService.cpp). The issue is information disclosure due to uninitialized data, enabling local information disclosure with no extra privileges and no user interaction required. Multiple connected sources confirm the same description. P...

CVE-2018-9367

CVE-2018-9367 describes a potential out-of-bounds write in the MediaTek Cameratool CCAP component (function FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS within Meta_CCAP_Para.cpp). The underlying issue is improper input validation, which could enable local escalation of privilege with no additional exe...

CVE-2018-9368

Concretely affects MediaTek mtksocoaudio (debugfs) in the Android stack. The vulnerability is caused by a missing bounds check combined with weakened SELinux policies in the mtksocoaudio debugfs, enabling an arbitrary kernel memory write. Impact: local privilege escalation to a system/privileged ...

CVE-2018-9427

CVE-2018-9427 affects Android 8.0 and 8.1, tied to the Media framework. The issue is an out-of-bounds write in CopyToOMX of OMXNodeInstance.cpp caused by an incorrect bounds check, leading to remote code execution. Exploitation details in the provided sources indicate the impact is high (RCE) wit...

CVE-2018-9440

CVE-2018-9440 affects Android’s Media Framework (M3UParser.cpp): parsing can trigger resource exhaustion and DoS without elevated privileges, requiring user interaction to exploit. Red Hat and NVD entries corroborate the DoS impact with UI interaction. Android’s security bulletin (Sept 2018) list...

CVE-2018-9545

CVE-2018-9545 affects Android 9, with a local escalation of privilege due to an out-of-bounds write in BTA_HdRegisterApp (bta_hd_api.cc) caused by a missing bounds check. The issue enables a local attacker to potentially escalate privileges without user interaction. The vulnerability is documente...

CVE-2019-20589

CVE-2019-20589 concerns Samsung mobile devices with O(8.x) and P(9.0) on TEEGRIS. A type confusion in the SKPM Trustlet can lead to arbitrary code execution. Affected platform details are cited in multiple sources; the vulnerability is tied to the Trustlet’s handling of internal objects, enabling...

CVE-2019-2084

The CVE-2019-2084 issue affects the libxaac library in Android 10. It is caused by a missing bounds check that allows an out‑of‑bounds write, enabling remote code execution. Exploitation requires user interaction. The vulnerability impacts Android 10 devices with libxaac, and multiple connected s...

CVE-2019-2135

CVE-2019-2135 affects Android systems and is due to a missing bounds check in Mfc_Transceive of phNxpExtns_MifareStd.cpp, causing an out-of-bounds read. This could lead to local information disclosure with no extra execution privileges required; exploitation requires user interaction. Affected An...

CVE-2019-9474

CVE-2019-9474 : Affects Android 10 devices’ Bluetooth stack. The issue is an out-of-bounds read caused by a missing bounds check in Bluetooth, enabling remote information disclosure without user interaction. Exploitation details are not provided in the connected documents beyond the high-level de...

CVE-2020-0105

CVE-2020-0105 affects Android 9 and 10. It stems from a missing permission check in onKeyguardVisibilityChanged within key_store_service.cpp, enabling local privilege escalation to use keyguard-bound keys when the screen is locked, without extra execution privileges. CVSS data (NVD) shows LOCAL a...

CVE-2020-0369

CVE-2020-0369 affects libavb and is an out-of-bounds write caused by an integer overflow that can lead to local privilege escalation without user interaction. Exploitation details are not provided in the connected documents beyond the local-privilege-elevation impact for Android 11. Remediation i...

CVE-2020-0477

CVE-2020-0477 affects Android 11, describing an information disclosure in the Android framework. In ClientModeImpl.java, there is a missing permission check in sendLinkConfigurationChangedBroadcast that can allow local disclosure of the current network configuration without extra privileges or us...

CVE-2020-11873

CVE-2020-11873 affects LG mobile devices running Android OS 7.2, 8.0, 8.1, 9 and 10. The vulnerability is a stack-based overflow in the logging tool, causing privilege escalation. Root cause is a stack overflow in the logging component; impact is elevated privileges for an attacker without user i...

CVE-2020-26599

CVE-2020-26599 affects Samsung mobile devices running Q(10.0) software. The DynamicLockscreen Terms and Conditions can be accepted without authentication, enabling potential credentialless interaction with the lockscreen flow. The Samsung ID SVE-2020-17079 (October 2020) is cited. Connected advis...

CVE-2021-0345

CVE-2021-0345 affects Android: the issue is in the mobile_log_d component, caused by improper input validation. This permits local privilege escalation to System execution level on Android-10 and Android-11, with no user interaction required. Exploitation is described as local and does not indica...

CVE-2021-0346

CVE-2021-0346 affects Android devices via the VPU component. The issue is an out-of-bounds write caused by an incorrect bounds check, enabling local escalation to System privileges without user interaction. Affected: Android 10 and Android 11 (VPU). Impact per sources indicates local privilege el...

CVE-2021-0897

In CVE-2021-0897, the vulnerability affects the apusys component, where a missing bounds check allows an out-of-bounds write. This can lead to local privilege escalation with System execution privileges required and does not require user interaction. A patch is identified as ALPS05672107 (Issue A...

CVE-2021-1035

The CVE-2021-1035 entries describe a vulnerability in the Android BluetoothDevicePickerPreferenceController.java: setLaunchIntent allows invoking an arbitrary broadcast receiver due to a confused deputy, enabling local elevation of privilege with no extra privileges and no user interaction requir...

CVE-2021-25513

CVE-2021-25513 affects the Apps Edge application prior to Samsung SMR Dec-2021 Release 1. The root cause is improper privilege management, enabling unauthorized access to certain lockscreen data. Impact is limited to exposure of device data on the lockscreen; CVSS scores (NVD 2.4/3.1, Low) reflec...

CVE-2022-20015

CVE-2022-20015 affects the kd_camera_hw driver. The issue is information disclosure caused by uninitialized data, enabling local information disclosure with system privileges; exploitation does not require user interaction. A patch/workaround is identified as Patch ID: ALPS05862966 (Issue ID: ALP...

CVE-2022-20274

In Android 13, CVE-2022-20274 affects the Keyguard component where a missing permission check could enable local escalation of privilege and prevent screen timeout. Exploitation requires local access with low privileges and no user interaction, potentially compromising confidentiality, integrity,...

CVE-2022-20307

Summary (CVE-2022-20307) : In Android 13, AlarmManagerService allows a side-channel leakage that can reveal whether an app is installed without query permissions, enabling local information disclosure with no extra execution privileges and no user interaction. Affected : Android 13 (AlarmManagerS...

CVE-2022-20322

CVE-2022-20322 affects Android 13 where the PackageManager may disclose installed package information due to a missing permission check. The issue enables local information disclosure without extra execution privileges and without user interaction. The vulnerability is classified as Local (ATT&CK...

CVE-2022-20362

CVE-2022-20362 : This Android 13 Bluetooth vulnerability is caused by an out-of-bounds write due to an integer overflow, enabling remote code execution with no privileges and no user interaction, exploitable by an adjacent attacker. Remediation is via Android 13 security updates (patch level 2022...

CVE-2022-32608

CVE-2022-32608 describes a race-condition–driven use-after-free in the jpeg component that can allow local escalation of privilege to SYSTEM. Exploitation is possible without user interaction, with local access required. Reported patch/identifier: ALPS07388753 (Issue ID: ALPS07388753). Connected ...

CVE-2022-32625

CVE-2022-32625 describes an out-of-bounds write caused by an incorrect bounds check in the display path, with potential local escalation to SYSTEM privileges and no user interaction required. Multiple connected sources reference MediaTek chips as affected and note the vulnerability’s impact on co...

CVE-2022-32647

CVE-2022-32647 affects the ccu component and is described as an out-of-bounds write caused by improper input validation. The impact is local escalation of privilege with system execution privileges required, and exploitation is possible without user interaction. Remediation: patch identified as A...

CVE-2022-33696

The vulnerability CVE-2022-33696 affects Samsung Telephony service on Samsung mobile devices. It permits a local attacker to access sensitive mobile identifiers (IMSI and ICCID) through logs due to an information-disclosure flaw in the Telephony service, prior to the SMR July 2022 Release 1. Impa...

CVE-2022-36852

Video Editor on Samsung mobile devices is affected by an Improper Authorization vulnerability. The issue allows a local attacker to access internal application data due to improper authorization. Affected versions are prior to SMR Sep-2022 Release 1. Mitigation: update to SMR Sep-2022 Release 1 o...