CVE-2022-39091

CVE-2022-39091 involves a missing permission check in the power management service. The root cause is insufficient authorization in the power management component, enabling setup of the service with no additional execution privileges required. Documented impact is a local attack surface with high...

CVE-2022-39095

CVE-2022-39095 corresponds to a vulnerability in the power management service where a missing permission check allows setting up the service with no additional execution privileges. Reported as local access with low privileges required and no user interaction, and with impact on confidentiality, ...

CVE-2022-39097

CVE-2022-39097 concerns a missing permission check in the power management service. Root cause described as allowing setup with no additional execution privileges. CVSS v3.1 score 7.8 (HIGH) with LOCAL, LOW complexity, LOW privileges required; impacts on confidentiality, integrity, and availabili...

CVE-2022-39118

CVE-2022-39118 affects the sprd_sysdump driver, where a missing bounds check can lead to an out-of-bounds write and potentially local denial of service in the kernel. The primary sources consistently describe this issue as a local vulnerability with a MEDIUM severity (CVSS 3.1: AV:L/AC:L/PR:L/UI:...

CVE-2022-39853

CVE-2022-39853 describes a use-after-free vulnerability in the Samsung perf-mgr driver, affecting versions prior to the SMR Oct-2022 Release 1. The underlying issue allows an attacker to cause a memory access fault (memory corruption) and is classified with a high impact in NVD, with local attack...

CVE-2022-39904

CVE-2022-39904 affects Samsung Settings on Samsung mobile devices prior to SMR Dec-2022 Release 1. The issue is an information disclosure where the Network Access Identifier is exposed in logs, allowing local attackers to access it. Affected component: Samsung Settings; root cause: log exposure o...

CVE-2022-44445

CVE-2022-44445 affects the WLAN driver, where a missing bounds check in the driver could allow local denial of service in WLAN services. The CVSS vector indicates local access, low attack complexity, and required privileges with a high availability impact, resulting in a base score of 5.5 (Medium...

CVE-2022-47456

CVE-2022-47456 concerns the UNISOC wlan driver: a missing parameter check in the WLAN module can cause a local denial of service. The NVD entry lists a CVSS v3.1 base score of 5.5 (Medium) with local attack vector and low privileges required, while exploitation details are not provided in the rec...

CVE-2022-48244

CVE-2022-48244 affects UNISOC chipsets’ audio service, with a missing permission check as the root cause. This could enable local escalation of privilege with no additional execution privileges, aligning with the CVSS 3.1 base metrics (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 7.8). Exploit...

CVE-2022-48453

CVE-2022-48453 affects a camera driver (Unisoc-based devices) with a missing bounds check that can trigger an out-of-bounds write. Impact is local denial of service with system privileges required; CVSSv3.1 vector indicates local access, high privileges, and availability impact, with a medium bas...

CVE-2023-20628

CVE-2023-20628 concerns the thermal module in MediaTek chips. A memory corruption flaw is caused by an uncaught exception and can lead to local escalation of privilege with System execution privileges required; no user interaction is needed. Patch ID ALPS07494460 is referenced as a fix. Exploit d...

CVE-2023-20639

CVE-2023-20639 affects the ril module in MediaTek chips, where a missing bounds check enables an out-of-bounds write that can lead to local escalation of privilege with System execution privileges required. The vulnerability is exploitable locally with no user interaction, and a patch (ALPS076285...

CVE-2023-20709

CVE-2023-20709 affects the keyinstall module in MediaTek systems. The issue is an out-of-bounds read caused by a missing bounds check, leading to potential local information disclosure and requiring System execution privileges for exploitation. User interaction is not needed. References to patche...

CVE-2023-20756

CVE-2023-20756 concerns a vulnerability in keyinstall (reported across multiple feeds) that enables an out-of-bounds write caused by an integer overflow. This can lead to local escalation of privilege with SYSTEM privileges, requiring no user interaction. A patch is available (Patch ID ALPS075100...

CVE-2023-20789

CVE-2023-20789 is linked to a missing bounds check in the jpeg component, causing local information disclosure with the ability to execute with system privileges. Exploitation details are not provided in the documents. The patch referenced is ALPS07693193 (Issue ALPS07693193). The vulnerability a...

CVE-2023-20816

CVE-2023-20816 concerns MediaTek WLAN software, where an out-of-bounds write caused by improper input validation can enable local escalation of privilege with SYSTEM privileges required. The issue affects the WLAN service and does not require user interaction to exploit. Documentation notes a pat...

CVE-2023-20834

The CVE-2023-20834 issue affects the pda component, where a race condition leads to a use-after-free vulnerability. This can allow local escalation of privilege to SYSTEM level with high confidentiality/integrity/availability impact, and requires no user interaction to exploit. The documented att...

CVE-2023-21295

CVE-2023-21295 affects Google Android’s SliceManagerService. The root cause is a missing null check in the content provider check, enabling local information disclosure without additional privileges and with no user interaction required. Connected sources (e.g., Red Hat, CNVD, NVD, CNNVD, and And...

CVE-2023-21325

Technical details about CVE-2023-21325 are not publicly available in the provided connected documents. No concrete information on affected products, versions, or fixes is present. Monitor for updates.

CVE-2023-21361

CVE-2023-21361 affects the Android Bluetooth stack, where a use-after-free in the Bluetooth component can allow code execution in the privileged Bluetooth process. The vulnerability enables an attacker with adjacent access to trigger execution with no additional privileges or user interaction, le...

CVE-2023-21379

CVE-2023-21379 (Android Bluetooth information disclosure) is described as a Bluetooth vulnerability with an out-of-bounds read caused by a missing bounds check, enabling local information disclosure. The issue affects Bluetooth handling on Android, requiring System privileges for exploitation, wi...

CVE-2023-32811

CVE-2023-32811 affects the connectivity system driver. The root cause is an out-of-bounds write due to improper input validation, enabling local escalation to SYSTEM with no user interaction. Exploitation status is not fully detailed in the provided documents, but a patch (Patch ID: ALPS07929848;...

CVE-2023-32824

The CVE-2023-32824 entry affects the rpmb module and describes a double-free issue caused by improper locking, enabling local escalation of privilege with System execution privileges required and no user interaction. Patch: ALPS07912966; Issue: ALPS07912961. Connected records consistently identif...

CVE-2023-32839

The CVE-2023-32839 entry describes a local out-of-bounds write in the dpe module caused by missing range checking, enabling local privilege escalation with SYSTEM rights and no user interaction. Affected: dpe (MediaTek-related context from multiple sources); impact is high for confidentiality, in...

CVE-2023-32876

CVE-2023-32876 involves the keyInstall function where a missing bounds check can cause information disclosure, requiring local privileges (PR:H) with no user interaction. Affected context appears to be media/SoC environments (MediaTek-related references appear across multiple connected sources), ...

CVE-2023-32881

CVE-2023-32881 affects MediaTek battery module. A possible information disclosure stems from an integer overflow, enabling local information disclosure with system-level privileges; no user interaction is required. Patch ALPS08308070 / ALPS08308080 is referenced. No exploit details or in-the-wild...

CVE-2023-33887

CVE-2023-33887 affects the telephony service due to a missing permission check, enabling local information disclosure without additional execution privileges. The core issue is a privilege-check gap in the telephony component, with the impact described as local data leakage and no user interactio...

CVE-2023-33908

CVE-2023-33908 concerns a missing permission check in the ims service, associated with UNISOC chipsets. The vulnerability enables local information disclosure without requiring additional execution privileges. Reported by multiple sources (NVD/Red Hat/CVE entries) consistently describe the impact...

CVE-2023-33912

CVE-2023-33912 concerns the Contacts service in UNISOC-induced chipsets where a missing permission check could allow local information disclosure with no additional execution privileges. The available connected documents consistently state that the vulnerability enables local access to informatio...

CVE-2023-42635

Technical details about CVE-2023-42635 are not publicly provided in the supplied documents; monitor for updates.

CVE-2023-42648

CVE-2023-42648 affects UNISOC chipsets in engineermode, where a missing permission check can lead to local information disclosure without requiring elevated privileges. The available connected documents confirm the root cause (in engineermode) and the potential impact (local information disclosur...

CVE-2023-44128

CVE-2023-44128 affects LGInstallService (com.lge.lginstallservies) on LG devices, where the exported AIDL-based InstallService exposes installPackage* methods that call installPackageVerify() for signature validation after a delete-file operation. An attacker can manipulate conditions so the secu...

CVE-2024-20088

CVE-2024-20088 affects MediaTek keyinstall: an out-of-bounds read due to a missing bounds check, enabling local information disclosure with system privileges. Public exploitation details are not provided in the available documents. The vulnerability is associated with patch ID ALPS08932099 and Is...

CVE-2024-20124

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1568.

CVE-2026-0162

A type confusion vulnerability exists in the ParsePayloads function of AudioSdpParser.cpp, leading to potential memory corruption . This flaw could enable remote code execution without requiring additional privileges or user interaction. The issue specifically affects the IP Multimedia Subsystem ...

CVE-2013-6792

Google Android prior to 4.4 contains an APK Signature Security Bypass vulnerability. The issue is cited across multiple sources (NVD entry CVE-2013-6792, Red Hat advisory, CVE listings) and is associated with a signature bypass in APK handling. The CIRCL feed notes an exploit entry, indicating ex...

CVE-2014-7920

CVE-2014-7920 affects the Android mediaserver component. The entry describes a privilege-escalation flaw in mediaserver present on Android 2.2–5.x up to before 5.1, enabling attackers to gain privileges. The documents do not specify the exact root cause or exploit details, and no remediation/patc...

CVE-2014-9873

CVE-2014-9873 describes an integer underflow in Qualcomm components, specifically in drivers/char/diag/diag_dci.c, affecting Android on Nexus 5 and Nexus 7 (2013) devices prior to 2016-08-05. The flaw allows a crafted application to gain privileges or access sensitive information via the affected...

CVE-2014-9879

The CVE-2014-9879 issue affects the mdss mdp3 driver in the Qualcomm components on Nexus 5 devices running Android prior to 2016-08-05. The vulnerability arises because user-space data is not validated, enabling a locally staged attacker to gain privileges via a crafted application (Android inter...

CVE-2014-9944

CVE-2014-9944 affects the Secure File System in all Android CAF builds using the Linux kernel. The issue is described as an Integer Overflow that could lead to a Buffer Overflow. Available sources note the vulnerability at a high impact level (CVSSv3 base score 7.8; CVSSv2 9.3) with local attack ...

CVE-2015-0575

CVE-2015-0575 describes an insecure-cipher-suite issue in Qualcomm components used in Android builds (CAF Linux kernel). The connected CNVD-2017-26831 entry explicitly attributes the vulnerability to the Qualcomm closed‑source component in Android, arising from insecure default cipher configurati...

CVE-2015-1474

CVE-2015-1474 affects Android up to version 5.0, specifically the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp. The vulnerability arises from multiple integer overflows that can be triggered by inputs with a large number of file descriptors or large in...

CVE-2015-1529

The CVE-2015-1529 entry corresponds to an integer overflow in Android’s soundtrigger subsystem, specifically in soundtrigger/ISoundTriggerHwService.cpp. This vulnerability allows a denial of service through unspecified vectors by triggering an overflow in processing within the SoundTrigger hardwa...

CVE-2015-1537

Technical details about CVE-2015-1537 are not provided in the connected documents. The available descriptions mention an integer overflow in Android’s IHDCP.cpp but no further public technical specifics or fixes are included here. Monitor for updates.

CVE-2015-3870

CVE-2015-3870 affects Android’s libstagefright prior to 5.1.1 LMY48T. In these builds, processing a specially crafted media file could allow a remote attacker to execute arbitrary code or cause a denial of service via memory corruption in the mediaserver. The vulnerability stems from libstagefrig...

CVE-2015-6599

CVE-2015-6599 affects libstagefright in Android prior to 5.1.1 LMY48T. A crafted media file can cause memory corruption in mediaserver, enabling remote code execution or a denial of service. The Android Nexus bulletin notes patches for builds after LMY48T (5.1.1+) and advises updating to at least...

CVE-2015-6614

CVE-2015-6614 affects Android 5.x before 5.1.1 LMY48X in Telephony. The vulnerability is an elevation-of-privilege flaw that can allow a local malicious app to bypass intended network-interface restrictions, gain privileges, and enable actions such as bypassing restrictions, expensive data transf...

CVE-2015-6638

CVE-2015-6638 is an Elevation of Privilege vulnerability in the Imagination Technologies driver used by Android. A locally installed crafted application could gain kernel privileges on affected devices. AffectedPlatform: Android 5.x before 5.1.1 LMY49F and Android 6.0 before 2016-01-01. Root caus...

CVE-2015-8505

Summary (concrete details from provided sources): Android mediaserver in versions prior to 5.1.1 LMY48Z is vulnerable to a memory corruption issue that can be triggered by a crafted media file, enabling remote code execution or a denial of service. The entry is part of CVE-2015-8505 and is linked...

CVE-2015-8893

CVE-2015-8893 concerns the Qualcomm bootloader (aboot.c) in Android on Nexus 5 and Nexus 7 (2013) devices. A crafted application can cause a denial of service (OS outage or buffer over-read). The issue affects Android platforms pre-dating the 2016-07-05 patch level; the available connected docume...