CVE-2017-15843

CVE-2017-15843 describes a race condition in the Qualcomm bus driver, specifically msm_bus_floor_vote_context(), which can lead to a double-free in CAF Android-for-MSM builds on Linux kernels. The vulnerability affects Android releases that use the affected bus driver; CVSS data indicates Local a...

CVE-2017-3750

On Lenovo VIBE phones, the Lenovo Security Android app allows private data to be backed up and restored via Android Debug Bridge, enabling tampering that leads to privilege escalation when exploited with CVE-2017-3748 and CVE-2017-3749. The root cause is described as improper access controls on t...

CVE-2017-7364

CVE-2017-7364 affects Qualcomm devices using CAF Android with the Linux kernel. The issue resides in __mdss_fb_copy_destscaler_data(), where ds_data[i].scale may point to a user-provided address, which can be freed on an error, causing a use-after-free condition. CVSS3 vector indicates a network-...

CVE-2017-7372

CVE-2017-7372 affects Android devices using CAF Linux kernel video drivers. The issue is a race condition in a video driver that could lead to a buffer overflow or write to an arbitrary pointer location, as described in the NVD entry. No specific affected devices, versions, exploit details, or re...

CVE-2017-8247

CVE-2017-8247 affects Qualcomm camera driver components in Android CAF builds using the Linux kernel. Description: when more than one thread opens the device, the device may be opened multiple times, causing get_pid to be called more than once while put_pid is called only once in msm_close. Impac...

CVE-2017-9684

CVE-2017-9684 concerns a race condition in the Qualcomm USB driver used by Android CAF Linux kernels, leading to a Use-After-Free condition. The vulnerability is localized and requires user interaction to exploit, with potential high impact on confidentiality, integrity, and availability if succe...

CVE-2018-21077

CVE-2018-21077 affects Samsung mobile devices running Android M(6.0), N(7.x), and O(8.x). The issue is a clipboard content disclosure in the locked state when the keyboard may be used during an emergency call. Samsung internal ID: SVE-2017-11107 (April 2018). Public details: CVSSv3.1 base score 2...

CVE-2018-5872

CVE-2018-5872 affects Qualcomm WLAN (qca-wifi-host-cmn) in Android CAF releases. The issue arises from missing length checks on Beacon Information Elements, enabling a nearby attacker to cause a buffer overread and potentially execute arbitrary code in a privileged process. Android’s 2018-07-05 p...

CVE-2018-6243

CVE-2018-6243 affects the NVIDIA Tegra TLK Widevine Trust Application in Google Pixel C devices (Pixel C TrustZone) with the Widevine TLK component. Root cause: missing input parameter checking for video metadata count, enabling potential arbitrary code execution, denial of service, or privilege ...

CVE-2018-9417

The CVE-2018-9417 entry affects the Linux kernel USB HID gadget driver (f_hid.c). In functions f_hidg_read and hidg_disable, there is a use-after-free caused by improper locking, enabling local escalation of privilege with no user interaction required. The description states the impact as local p...

CVE-2018-9424

CVE-2018-9424 concerns an out-of-bounds write in CryptoPlugin::decrypt (CryptoPlugin.cpp) that could allow local escalation of privilege with no user interaction. Exploitation details are not provided in the documents; the Android Security Bulletin catalogs this CVE under Media framework issues w...

CVE-2018-9427

CVE-2018-9427 affects Android 8.0 and 8.1, tied to the Media framework. The issue is an out-of-bounds write in CopyToOMX of OMXNodeInstance.cpp caused by an incorrect bounds check, leading to remote code execution. Exploitation details in the provided sources indicate the impact is high (RCE) wit...

CVE-2018-9507

CVE-2018-9507 affects Android devices and relates to the Bluetooth stack. A vulnerability in bta_av_proc_meta_cmd (bta_av_act.cc) allows an out-of-bounds read due to an incorrect bounds check, enabling remote information disclosure over Bluetooth without extra privileges and without user interact...

CVE-2018-9510

CVE-2018-9510 describes a Bluetooth information-disclosure risk in Android. The root cause is a missing bounds check in smp_proc_enc_info (smp_act.cc), leading to an out-of-bounds read. Impact is remote information disclosure over Bluetooth without special privileges or user interaction, affected...

CVE-2018-9524

CVE-2018-9524 affects Android System UI where protections around overlay windows are insufficient, enabling local elevation of privilege. Affects Android 7.0–8.1; exploitation requires user interaction. The issue is documented in public CVE records (NVD/NVD 2018-9524) and is addressed in the Andr...

CVE-2019-2028

CVE-2019-2028 affects Android via libmpeg2 where NEON registers aren’t preserved in multiple hand-crafted functions, enabling potential remote code execution with no privileges and requiring user interaction. Affected Android versions include 7.0–7.1.2, 8.0–8.1, and 9 (Android ID A-120644655). Pu...

CVE-2019-2049

CVE-2019-2049 involves a memory corruption via a use-after-free in avrcp_service.cc (SendMediaUpdate/SendFolderUpdate), leading to local privilege escalation in the Android Bluetooth service on Android 9. The Android bulletin attributes this as an EoP (High) vulnerability in the System component;...

CVE-2019-20530

CVE-2019-20530 affects Samsung mobile devices running N(7.1), O(8.x), P(9.0) and Q(10.0). The vulnerability enables arbitrary code execution on the lock screen, linked to Samsung identifier SVE-2019-15266. Public sources in the provided set reiterate the description but do not disclose root cause...

CVE-2019-20538

CVE-2019-20538 concerns a heap overflow in the knox_kap driver on Samsung mobile devices running P(9.0) software (Samsung ID SVE-2019-14857). The vulnerability affects the kernel driver stack used by Samsung devices and is documented as a local issue within the knox_kap component. The provided so...

CVE-2019-20576

The CVE-2019-20576 issue affects Samsung mobile devices running P(9.0) software. Affected component: MemorySaver Content Provider, which permits SQL injection. The root cause is an injection vulnerability in the Content Provider’s handling of queries, enabling a remote attacker to manipulate the ...

CVE-2019-20593

CVE-2019-20593 concerns Samsung mobile devices running N(7.x) or O(8.x) software where the Gallery app leaks Private Mode thumbnails. Public descriptions across multiple sources (NVD entry, Red Hat advisory, CNVD, CVE pages) consistently state the vulnerability involves information disclosure via...

CVE-2019-20774

CVE-2019-20774 affects LG mobile devices running Android 7.x–9.0. A system service allows local retrieval of the user’s password, creating a local-confidentiality risk. The vulnerability has been documented under LG ID LVE-SMP-190009 (August 2019). Connected sources corroborate the issue without ...

CVE-2019-20780

CVE-2019-20780 relates to LG mobile devices running Android 7.x–8.1, where security settings governing package verification and acceptance from known sources are mishandled. The root cause is the mishandling of these security settings, as described across multiple sources (LG ID LVE-SMP-190002). ...

CVE-2019-2135

CVE-2019-2135 affects Android systems and is due to a missing bounds check in Mfc_Transceive of phNxpExtns_MifareStd.cpp, causing an out-of-bounds read. This could lead to local information disclosure with no extra execution privileges required; exploitation requires user interaction. Affected An...

CVE-2019-2196

CVE-2019-2196 describes a SQL injection in Android's Download Provider, exploitable locally to disclose information without extra privileges. Affected: Android 8.0–10; vulnerability occurs in the query sort parameter, enabling information disclosure. Root cause: improper handling of sort paramete...

CVE-2019-9291

CVE-2019-9291 affects Android 10 Bluetooth with a remote code execution due to improper memory allocation in the Bluetooth stack. The vulnerability enables network-based exploitation requiring user interaction; CVSS indicates high impact (C/H/I/A) with network access and low attack complexity, an...

CVE-2019-9336

CVE-2019-9336 affects the Android 10 Media framework component libavc. The vulnerability is an information-disclosure flaw caused by uninitialized data, enabling remote information disclosure with no execution privileges needed. Exploitation requires user interaction. The issue is documented in t...

CVE-2019-9402

CVE-2019-9402 affects Android 10 Bluetooth: a missing bounds check in the Bluetooth stack can cause remote denial of service with no privileges and no user interaction. The vulnerability is triggered via network access, resulting in a DoS affecting availability (high in CVSS3). Exploitation detai...

CVE-2019-9424

CVE-2019-9424 affects Android 10: a vulnerability in the Screen Lock where the setting to hide the unlock pattern can be ignored under certain conditions, causing information disclosure. The vulnerability is listed in Android 10 security release notes and has NVD scores of 4.3 (CVSS2) and 7.5 (CV...

CVE-2019-9474

CVE-2019-9474 : Affects Android 10 devices’ Bluetooth stack. The issue is an out-of-bounds read caused by a missing bounds check in Bluetooth, enabling remote information disclosure without user interaction. Exploitation details are not provided in the connected documents beyond the high-level de...

CVE-2020-0027

CVE-2020-0027 affects Android System component HidRawSensor (HidRawSensor.cpp), where HidRawSensor::batch can trigger an out-of-bounds write due to an unexpected switch fallthrough. This leads to local elevation of privilege with no extra user interaction. Impact is described as local, with compl...

CVE-2020-0098

CVE-2020-0098 affects Android framework (ActivityStack.java) and enables a local elevation of privilege due to a confused deputy in navigateUpToLocked. The issue allows a local attacker to bypass permissions without extra execution privileges, with no user interaction required. Affected Android v...

CVE-2020-0106

CVE-2020-0106 affects Android 10. The issue is in PhoneInterfaceManager.getCellLocation, where a missing SDK version check allows a local attacker to bypass a permission check and disclose information without extra privileges. Impacted: local information disclosure; no user interaction required. ...

CVE-2020-0184

CVE-2020-0184 affects Android 10 Media Framework; the vulnerability is an infinite loop in ihevcd_ref_list() inside ihevcd_ref_list.c caused by a missing bounds check, enabling remote DoS. Impact and exploitability: DoS with network attack surface per CVSS2, but CVSS3 notes user interaction is re...

CVE-2020-12754

CVE-2020-12754 affects LG mobile devices running Android 7.2, 8.0, 8.1, 9, and 10. A crafted app can obtain control of device input through the window system service, enabling partial to high impact on confidentiality, integrity, and availability as per CVSS metrics. Root cause centered on window...

CVE-2021-0354

CVE-2021-0354: A local privilege-escalation flaw in ged on Android (Android 8.1–11) arises from an out-of-bounds write caused by an integer overflow. The issue allows an attacker with local access to potentially execute with System privileges without user interaction. Affected components are tied...

CVE-2021-0356

CVE-2021-0356 affects Android 10 and Android 11 in the netdiag component, where improper input validation enables a local command-injection that can grant SYSTEM-level privileges without user interaction. The issue’s impact is described as local escalation with high confidentiality, integrity, an...

CVE-2021-0406

CVE-2021-0406 is associated with MediaTek’s cameraisp on Android 10 and 11, where a missing bounds check can cause an out-of-bounds write. The flaw enables local escalation of privileges to System level with no user interaction required. Affected component: cameraisp image processor; root cause: ...

CVE-2021-0459

CVE-2021-0459 affects Google Android kernel code, specifically fts_driver_test_write in fts_proc.c. It is due to a missing bounds check, causing an out-of-bounds read that can disclose local information. Exploitation requires local access and does not require user interaction, with the potential ...

CVE-2021-0657

CVE-2021-0657 affects apusys and is caused by a stack-based buffer overflow leading to an out-of-bounds write. This can enable local escalation to System privileges without user interaction. The vulnerability context is supported by multiple sources (e.g., Red Hat, NVD) and lists a patch referenc...

CVE-2021-1040

CVE-2021-1040 describes an elevation-of-privilege vulnerability in Android where, in onCreate of BluetoothPairingSelectionFragment.java, a tapjacking/overlay attack could enable local escalation of privilege without requiring extra execution privileges. Affected products/versions include Android ...

CVE-2021-22494

Summary: CVE-2021-22494 affects Samsung Note20 devices running Q (10.0) software. The fingerprint scanner may misbehave when a screen protector is used because the required image compensation is not present during enrollment. This can lead to inversion and a high False Recognition Rate (FRR). The...

CVE-2021-25382

CVE-2021-25382 concerns Samsung Secure Folder prior to SMR Oct-2020 Release 1, where improper authorization of a debugging command allows unauthorized access to Secure Folder contents. The PT-2021-16573 entry confirms affected software versions (Secure Folder prior to SMR Oct-2020 Release 1) and ...

CVE-2021-25410

The CVE-2021-25410 issue concerns Samsung CallBGProvider. Several connected sources confirm an Improper Access Control in CallBGProvider (pre-SMR JUN-2021 Release 1), enabling a local attacker to access arbitrary files with escalated privileges. Affected component: CallBGProvider; vulnerability t...

CVE-2022-20213

CVE-2022-20213 affects Android 10–12, specifically the ApplicationsDetailsActivity in AndroidManifest.xml. The issue permits a local DoS via tapjacking/overlay with user interaction required and no additional execution privileges. CVSS v3.1 base score 5.5 (Medium). Exploitation status is not prov...

CVE-2022-20313

The CVE-2022-20313 entry affects Android 13 and concerns the Bluetooth subsystem. It describes an out-of-bounds write due to a missing bounds check, which could enable local escalation of privilege to System level without user interaction. The vulnerability impacts the Bluetooth path selectively ...

CVE-2022-20333

The CVE-2022-20333 entry concerns Android 13 Bluetooth, where a missing null check can cause a crash leading to remote denial of service without privileges or user interaction. Affected component: Bluetooth on Android 13. Underlying cause: null-pointer-like condition causing a crash; no exploit d...

CVE-2022-36845

CVE-2022-36845 corresponds to a heap-based overflow in the MHW_RECOG_LIB_INFO function of libSDKRecognitionText.spensdk.samsung.so. The vulnerability affects versions prior to Samsung SMR Sep-2022 Release 1. Root cause is a heap overflow in MHW_RECOG_LIB_INFO, which can lead to a memory access fa...

CVE-2022-36855

CVE-2022-36855 is a use-after-free vulnerability in the iva_ctl driver, present in versions prior to Samsung SMR Sep-2022 Release 1. The issue allows a local attacker with low privileges and no user interaction to trigger memory access faults (per CVSS, high impact on confidentiality, integrity, ...

CVE-2022-36858

CVE-2022-36858 is a heap-based overflow in GetCorrectDbLanguageTypeEsPKc() within libSDKRecognitionText.spensdk.samsung.so, affecting Samsung devices prior to SMR Sep-2022 Release 1. The vulnerability can cause a memory access fault due to heap overflow in the affected function. Available documen...