CVE-2022-48235

The CVE-2022-48235 issue concerns the UNISOC MP3 encoder in chipsets, where a missing bounds check can cause an out-of-bounds write. This leads to a local denial of service with System execution privileges required. Affected component: MP3 encoder; root cause: missing bounds check leading to out-...

CVE-2022-48371

CVE-2022-48371 concerns UNISOC dialer service vulnerability due to a missing privilege check. The linked documents confirm the issue affects UNISOC chipsets’ dialer service module and enables local information disclosure without additional execution privileges. The CVSS 3.1 vector (AV:L/AC:L/PR:L...

CVE-2022-48379

CVE-2022-48379 concerns UNISOC chipsets where the dialer service lacks a permission check, enabling local denial of service without elevated execution privileges. The common details across sources indicate the root cause is insufficient permission validation in the dialer component, with an impac...

CVE-2023-20612

CVE-2023-20612 concerns an out-of-bounds write in the ril component due to a missing bounds check, potentially enabling local escalation of privilege with System-level execution requirements. Exploitation prerequisites indicate local access with high privileges and no user interaction required. T...

CVE-2023-20615

CVE-2023-20615 affects MediaTek ril with an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with SYSTEM-level execution rights. Exploitation reportedly does not require user interaction. Public references consistently indicate the issue resides in ril ...

CVE-2023-20628

CVE-2023-20628 concerns the thermal module in MediaTek chips. A memory corruption flaw is caused by an uncaught exception and can lead to local escalation of privilege with System execution privileges required; no user interaction is needed. Patch ID ALPS07494460 is referenced as a fix. Exploit d...

CVE-2023-20675

CVE-2023-20675 concerns MediaTek platforms where the kernel/wlan component is vulnerable to an out-of-bounds read caused by a missing bounds check. The issue can lead to local information disclosure, with potentially full System privileges if exploited, and does not require user interaction. Conn...

CVE-2023-20727

CVE-2023-20727 affects the wlan component in MediaTek chips, with an out-of-bounds read caused by a missing bounds check. According to the records, this may lead to local information disclosure and potentially system-level execution privileges, with no user interaction required. Exploitation deta...

CVE-2023-20737

The CVE-2023-20737 issue concerns the vcu component in MediaTek devices, where an improper locking leads to a use-after-free condition. This vulnerability can enable local escalation of privileges to SYSTEM with no user interaction required. Affected behavior is described as a local exploit path,...

CVE-2023-20789

CVE-2023-20789 is linked to a missing bounds check in the jpeg component, causing local information disclosure with the ability to execute with system privileges. Exploitation details are not provided in the documents. The patch referenced is ALPS07693193 (Issue ALPS07693193). The vulnerability a...

CVE-2023-20816

CVE-2023-20816 concerns MediaTek WLAN software, where an out-of-bounds write caused by improper input validation can enable local escalation of privilege with SYSTEM privileges required. The issue affects the WLAN service and does not require user interaction to exploit. Documentation notes a pat...

CVE-2023-20823

CVE-2023-20823 affects the cmdq component and is caused by an incorrect status check that enables an out-of-bounds read. The vulnerability could allow local denial of service with SYSTEM privileges, and exploitation does not require user interaction. A patch is referenced as ALPS08021592 (Issue I...

CVE-2023-20831

The CVE-2023-20831 issue affects the gps component and is described as an out-of-bounds write caused by a missing bounds check. The underlying effect is local escalation of privilege with SYSTEM execution privileges required, and exploitation does not require user interaction. The available docum...

CVE-2023-21295

CVE-2023-21295 affects Google Android’s SliceManagerService. The root cause is a missing null check in the content provider check, enabling local information disclosure without additional privileges and with no user interaction required. Connected sources (e.g., Red Hat, CNVD, NVD, CNNVD, and And...

CVE-2023-21296

CVE-2023-21296 corresponds to an information-disclosure flaw in Android’s permission side-channel that can reveal whether an app is installed, enabling local escalation of privilege with no extra execution privileges required. Exploitation requires user interaction. Android 14 patch release notes...

CVE-2023-21329

CVE-2023-21329 describes an information disclosure in Android's Activity Manager caused by a missing permission check, enabling local access to whether an app is installed without user interaction. The Android 14 security release notes list this CVE under Framework with a Moderate severity and in...

CVE-2023-21350

CVE-2023-21350 affects Android's Media Projection component. An attacker can infer whether a target app is installed via a side-channel disclosure, without query permissions, enabling local information leakage with no user interaction. Impact is limited to confidentiality (high) per sources; atta...

CVE-2023-21352

CVE-2023-21352 affects NFA and is caused by a missing bounds check leading to an out-of-bounds read. This can result in local information disclosure without additional execution privileges, and exploitation does not require user interaction, per the provided description. Connected sources corrobo...

CVE-2023-21388

CVE-2023-21388 affects Google Android, specifically the Settings component, where a missing permission check can enable a local escalation of privilege without extra execution privileges or user interaction. The vulnerability is categorized as EoP with a high impact on confidentiality, integrity,...

CVE-2023-30928

CVE-2023-30928 affects the telephony service and is due to a missing permission check in the telephony component, enabling local escalation of privilege with no additional execution privileges. Multiple sources (NVD, Red Hat, CNNVD, PRION, CVE lists) corroborate the issue as a local‑privilege‑esc...

CVE-2023-40640

CVE-2023-40640 concerns the SoundRecorder service where a missing permission check could allow local information disclosure without requiring execution privileges. Affected detail across connected sources centers on UNISOC chipsets’ SoundRecorder component; root cause is insufficient access contr...

CVE-2023-40648

The CVE-2023-40648 entry concerns the Messaging component where a missing permission check could allow local information disclosure without requiring additional execution privileges. Reported across multiple sources, the issue affects Information Confidentiality (per CVSS) with local attack vecto...

CVE-2023-40654

CVE-2023-40654 affects FW-PackageManager due to a missing permission check, enabling local privilege escalation with System execution privileges. Public references describe the issue across multiple feeds (NVD, Red Hat, PRION, CVE list, CNNVD, PT-Security) but do not provide a product version or ...

CVE-2023-42631

CVE-2023-42631 affects validationtools due to a missing permission check, enabling local information disclosure with no privileges required. Connected documents corroborate the description but do not specify affected versions, vendor patches, or remediation steps. Exploitation status and in-the-w...

CVE-2023-44126

The CVE-2023-44126 issue concerns the Android Call management component (com.android.server.telecom) patched by LG. The vulnerability arises because LG’s patch sends a large number of LG-owned implicit broadcasts that disclose sensitive telephony data to all third-party apps on the same device. T...

CVE-2023-44128

CVE-2023-44128 affects LGInstallService (com.lge.lginstallservies) on LG devices, where the exported AIDL-based InstallService exposes installPackage* methods that call installPackageVerify() for signature validation after a delete-file operation. An attacker can manipulate conditions so the secu...

CVE-2024-20115

In the ccu component, there is a vulnerability caused by a missing bounds check that can lead to an out-of-bounds write. This allows local escalation of privilege to SYSTEM with no user interaction required. A patch is available (Patch ID: ALPS09036695; Issue ID: MSV-1713). No exploitation detail...

CVE-2025-48647

CVE-2025-48647 affects the Google CPM IPC path: cpm_fwtp_msg_handler in cpm/google/lib/tracepoint/cpm_fwtp_ipc.c. The issue is a memory overwrite caused by improper input validation, enabling local elevation of privilege with no additional privileges or user interaction required. Impact is descri...

CVE-2026-0087

CVE-2026-0087 : The connected sources identify a logic error in Android’s DomainVerificationService.java (approvalLevelForDomainInternal) that could allow hijacking an arbitrary app link, enabling local privilege escalation without user interaction. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:...

CVE-2026-0091

Technical details about CVE-2026-0091 are not publicly available in the provided documents. No affected products, versions, or remediation are specified here. Monitor the sources for updates.

CVE-2026-28577

CVE-2026-28577 corresponds to a tapjacking/overlay flaw in Android’s WindowManagerService.addWindow. The issue could permit local elevation of privilege with no extra execution privileges and without user action. CVSS 3.1 base metrics indicate Local, Low attack complexity and Low privileges requi...

CVE-2013-6271

CVE-2013-6271 affects Android 4.0–4.3; a vulnerability in com.android.settings.ChooseLockGeneric allows an unprivileged app to bypass restrictions and remove the device lock by invoking updateUnlockMethodAndFinish with PASSWORD_QUALITY_UNSPECIFIED. Exploits/PoC exist (CRT-RemoveLocks; Metasploit ...

CVE-2013-6792

Google Android prior to 4.4 contains an APK Signature Security Bypass vulnerability. The issue is cited across multiple sources (NVD entry CVE-2013-6792, Red Hat advisory, CVE listings) and is associated with a signature bypass in APK handling. The CIRCL feed notes an exploit entry, indicating ex...

CVE-2014-9878

CVE-2014-9878 affects Android on Nexus 5 with the Qualcomm MMC component. The vulnerable code is drivers/mmc/card/mmc_block_test.c in Qualcomm components, where kernel-space buffer addresses are not rejected. This allows a local attacker with a crafted application to gain privileges. The issue is...

CVE-2014-9879

The CVE-2014-9879 issue affects the mdss mdp3 driver in the Qualcomm components on Nexus 5 devices running Android prior to 2016-08-05. The vulnerability arises because user-space data is not validated, enabling a locally staged attacker to gain privileges via a crafted application (Android inter...

CVE-2014-9884

CVE-2014-9884 affects Android on Nexus 5 and Nexus 7 (2013) via drivers/misc/qseecom.c in Qualcomm components. The root cause is that qseecom.c does not validate certain pointers, enabling a local attacker with a crafted app to gain privileges. Connected sources corroborate a privilege-escalation...

CVE-2014-9893

CVE-2014-9893 concerns the Qualcomm MSM MDSS driver on Android (Nexus 5) where the mdss_mdp_pp.c path does not correctly determine the size of Gamut LUT data. This leads to information disclosure via a crafted application. The issue affects Android devices prior to the 2016-08-05 patch level and ...

CVE-2014-9942

CVE-2014-9942 affects the boot path in all Android releases from CAF that use the Linux kernel. The root cause is a Use of Uninitialized Variable in the boot code, which could lead to memory corruption or unpredictable behavior. The NVD CVSSv3 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a...

CVE-2014-9976

Summary (MODE C): CVE-2014-9976 describes a buffer overflow in the 1x call processing path of Qualcomm components used in Android CAF builds that rely on the Linux kernel. The vulnerability is documented with a high/critical impact in CVSS metrics (network attack vector, low complexity, no privil...

CVE-2015-0575

CVE-2015-0575 describes an insecure-cipher-suite issue in Qualcomm components used in Android builds (CAF Linux kernel). The connected CNVD-2017-26831 entry explicitly attributes the vulnerability to the Qualcomm closed‑source component in Android, arising from insecure default cipher configurati...

CVE-2015-6614

CVE-2015-6614 affects Android 5.x before 5.1.1 LMY48X in Telephony. The vulnerability is an elevation-of-privilege flaw that can allow a local malicious app to bypass intended network-interface restrictions, gain privileges, and enable actions such as bypassing restrictions, expensive data transf...

CVE-2015-6629

CVE-2015-6629: Android 5.x before 5.1.1 LMY48Z contains a Wi‑Fi information disclosure flaw. The issue allows attackers to obtain sensitive information via unspecified vectors, demonstrated by access to Signature or SignatureOrSystem, per the description. The linked Android security bulletin indi...

CVE-2015-6631

CVE-2015-6631 affects the Android libstagefright component. The vulnerability in libstagefright allows remote attackers on affected Android builds (pre-5.1.1 LMY48Z and pre-6.0) to obtain sensitive information and bypass an unspecified protection mechanism via unknown vectors, e.g., by obtaining ...

CVE-2015-6638

CVE-2015-6638 is an Elevation of Privilege vulnerability in the Imagination Technologies driver used by Android. A locally installed crafted application could gain kernel privileges on affected devices. AffectedPlatform: Android 5.x before 5.1.1 LMY49F and Android 6.0 before 2016-01-01. Root caus...

CVE-2015-9010

CVE-2015-9010 is described as an elevation of privilege vulnerability affecting Qualcomm closed‑source components used by Android, within the Android kernel. The provided documents confirm the issue is associated with Qualcomm components and Android kernel, but do not provide specific technical d...

CVE-2015-9026

CVE-2015-9026 affects WideVine DRM in Android CAF when running the Linux kernel. The connected documents describe an untrusted pointer dereference vulnerability in WideVine DRM (Android/CAF) with high impact potential. The Android Security Bulletin for 2017-06-01/06-05 indicates patches exist in ...

CVE-2015-9073

CVE-2015-9073 : Concrete details available across sources show a vulnerability in Qualcomm components within Android CAF builds using the Linux kernel, where an untrusted pointer could be dereferenced in a TrustZone syscall. The issue affects Qualcomm’s closed-source/TrustZone pathway inside Andr...

CVE-2016-0804

CVE-2016-0804 affects Android mediaserver’s NuPlayer::GenericSource.cpp in Android 5.x up to 5.1.1 and 6.x up to 2016-02-01. The root cause is improper management of the mDrmManagerClient object, enabling a remote attacker to execute arbitrary code or cause memory corruption via a crafted media f...

CVE-2016-0811

CVE-2016-0811 covers an integer overflow in BnCrypto::onTransact within media/libmedia/ICrypto.cpp of libmediaplayerservice on Android 6.x prior to 2016-02-01. The vulnerability can allow attackers to obtain sensitive information and bypass an unspecified protection mechanism through a improper s...

CVE-2016-0837

CVE-2016-0837 affects Android’s mediaserver via libstagefright (MPEG4Extractor.cpp). The issue allows remote code execution or a denial of service through a crafted media file due to an out-of-bounds read and memory corruption. Affected are Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x befo...