CVE-2023-48399

CVE-2023-48399 describes an out-of-bounds read in ProtocolMiscATCommandAdapter::Init() (protocolmiscadapter.cpp) due to a missing bounds check. This can lead to local information disclosure and requires baseband firmware compromise for exploitation; no user interaction is needed. Multiple connect...

CVE-2024-32894

The CVE-2024-32894 entry describes a likely out-of-bounds read in bc_get_converted_received_bearer of bc_utilities.c, enabling remote information disclosure with no privileges or user interaction. Multiple connected records (Red Hat, NVD, OSV, CNNVD) reiterate the same root cause and impact, with...

CVE-2024-47023

CVE-2024-47023 is an elevation-of-privilege in the Pixel modem due to a logic error in the code. The vulnerability could allow remote escalation with no user interaction. Pixel bulletin entries show the issue as EoP in the Modem subcomponent and indicate that applying security patch level 2024-10...

CVE-2017-13165

CVE-2017-13165 is an elevation-of-privilege vulnerability in the Android kernel file system, affecting the Android kernel (Android ID A-31269937). It is documented across multiple sources (NVD, OSV/UBUNTU-CVE/CNVD) as an EoP issue. The Pixel/Nexus security bulletin lists CVE-2017-13165 under Kern...

CVE-2018-5873

The CVE-2018-5873 entry refers to a race-condition induced Use-After-Free in the Linux kernel before 4.11, specifically in __ns_get_path within fs/nsfs.c. This affects the mainline Linux kernel and Android builds derived from CAF for Android kernels (Android for MSM, Firefox OS for MSM, QRD Andro...

CVE-2020-0229

CVE-2020-0229 is an out-of-bounds write due to an incorrect bounds check in Android components, specifically affecting MediaTek mdla in the 2020-09-01/05 patch window. The vulnerability is categorized as High/CRITICAL impact with network attack requirements and no user interaction, per the NVD en...

CVE-2021-0681

CVE-2021-0681 is a vulnerability in Android where a missing permission check in system properties could allow local information disclosure without extra execution privileges and without user interaction. Affected components include MediaTek system properties on Android devices. The issue is docum...

CVE-2021-39653

CVE-2021-39653 describes a local elevation of privilege in the Android boot path, enabling boot with a hidden debug policy due to a missing user warning. The vulnerability is associated with the Android kernel/Bootloader surface (as reflected in Pixel bulletin categorization), and iled by the des...

CVE-2022-20404

CVE-2022-20404 is listed in Pixel bulletin data as affecting Android devices via the Modem component (Type: Information disclosure; Severity: Moderate). The vulnerable entry maps to CVE-2022-20404 with Android kernel context in the initial doc, but Pixel security bulletin categorizes it under the...

CVE-2022-20570

Technical details for CVE-2022-20570 are not publicly available in the provided documents. Monitor for updates from the listed sources; no specifics on affected versions, vectors, or fixes are provided here.

CVE-2022-20588

CVE-2022-20588 affects the Android kernel in the sysmmu_map function of sysmmu.c. The issue is a precondition check failure that can enable local elevation of privilege, granting System execution privileges. Exploitation details are not provided in the supplied documents; no user interaction is r...

CVE-2022-42526

The CVE-2022-42526 entry concerns an out-of-bounds write in ConvertUtf8ToUcs2 within radio_hal_utils.cpp, tied to the Android kernel. The root cause is a missing bounds check in that function, which could allow a local escalation of privilege with System privileges required; exploitation is descr...

CVE-2023-21263

CVE-2023-21263 affects Android/Kernel components. The vulnerability is in the function OSMMapPMRGeneric of pmr_os.c , describing a possible out-of-bounds write caused by an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges n...

CVE-2024-29741

The CVE-2024-29741 issue affects Google Pixel’s s2mpu.c driver, specifically the pblS2mpuResume function, where a logic error enables a mitigation bypass. This could allow local elevation of privilege without additional execution privileges or user interaction. Multiple connected sources corrobor...

CVE-2024-29786

CVE-2024-29786 describes a potential remote code execution in Google Pixel devices due to an out-of-bounds write in the function pktproc_fill_data_addr_without_bm within link_rx_pktproc.c caused by a missing bounds check. The issue affects Pixel firmware/CPIF as listed in the Pixel bulletin; the ...

CVE-2024-32891

CVE-2024-32891 affects Google's Pixel/Android media.c, specifically the sec_media_unprotect function. The issue is described as a memory corruption caused by a race condition, which could enable local escalation of privilege without requiring additional privileges or user interaction. The availab...

CVE-2024-32895

CVE-2024-32895 affects the BCMFASTPATH component (dhd_msgbuf.c) with an out-of-bounds write caused by a missing bounds check. The documented impact is local elevation of privilege without additional execution privileges required, and exploitation reportedly requires no user interaction. Connected...

CVE-2024-32910

The CVE-2024-32910 issue affects Trusty/TEE in the Android stack (tipc.c: handle_msg_shm_map_req). It describes a possible stack data disclosure from uninitialized data in the SPI/TIPC path, enabling local information disclosure without extra privileges or user interaction. The Android Pixel bull...

CVE-2024-47035

The CVE affects virtio’s vring_init in external/headers/include/virtio/virtio_ring.h, where a logic error can cause an out-of-bounds write. This may enable local privilege escalation with no extra privileges or user interaction; exploitation details are not provided in the supplied documents. Rem...

CVE-2018-9390

CVE-2018-9390 involves an out-of-bounds read in procfile_write within gl_proc.c caused by an incorrect bounds check, enabling local privilege escalation with SYSTEM rights. Exploitation is not user-initiated. Reports from NVD/Red Hat/CNNVD mirror a consistent description across Android Pixel devi...

CVE-2020-0283

CVE-2020-0283 describes a potential out-of-bounds write caused by a missing bounds check in affected Android components. Public vulnerability entries in NVD/NVD-derived feeds reiterate the issue with the Android platform. An OSV entry (ASB-A-163008257) also notes a possible out-of-bounds write du...

CVE-2021-0606

CVE-2021-0606 concerns the Android kernel DRM driver, specifically the function drm_syncobj_handle_to_fd in drm_syncobj.c. The issue is a use-after-free caused by incorrect refcounting, which can allow local escalation of privilege with system execution privileges required. User interaction is no...

CVE-2022-20162

CVE-2022-20162 is an information-disclosure flaw in the Android kernel’s crypto/asn1.c, specifically in the function asn1_p256_int, where an incorrect bounds check allows an out-of-bounds read. The impact is local information disclosure with system privileges required; exploitation requires no us...

CVE-2022-20164

CVE-2022-20164 is listed in the Pixel security bulletin as an Elevation of Privilege (EoP) affecting the Modem component, tied to the Android kernel. The connected Pixel bulletin entry confirms the issue is categorized as EoP for Modem with no public exploit details provided in the documents. The...

CVE-2022-20176

CVE-2022-20176 affects the Android kernel, specifically the sjtag-driver.c module in the auth_store path. The root cause is a missing bounds check that allows a read of uninitialized memory. This can lead to a local information disclosure and, per the description, may enable system-level executio...

CVE-2022-20177

CVE-2022-20177 affects the Android kernel. The vulnerability is in the Android kernel component of Android OS (no vendor/product details beyond Android kernel provided). NVD CVSS scores indicate CVSS v2 base score 5.0 (MEDIUM) with network attack vector, minimal impact on confidentiality as Parti...

CVE-2022-20188

CVE-2022-20188 concerns the Android kernel in Pixel/Android devices. Public data in NVD shows CVSSv3.1 base score 7.5 (Network attack, no user interaction, confidentiality impact High; integrity/availability None). The Pixel security bulletin (June 2022) lists this CVE among fixes for Pixel devic...

CVE-2022-20371

Summary: CVE-2022-20371 affects the Android kernel, specifically the dm_bow_dtr path in dm-bow.c, due to a race-condition use-after-free. The vulnerability enables local escalation of privilege to System by exploiting a race condition, with no user interaction required. Documents consistently des...

CVE-2022-20580

CVE-2022-20580 is an Android kernel/libufdt issue where an incorrect bounds check in the function ufdt_do_one_fixup within ufdt_overlay.c can cause an out-of-bounds write. This could enable a local escalation of privilege with System privileges required; no user interaction is described for explo...

CVE-2022-20589

CVE-2022-20589 affects the Android kernel, specifically a vulnerability in the function valid_va_secbuf_check within drm_access_control.c. The issue arises from improper input validation, enabling local information disclosure and requiring System execution privileges for exploitation, with no use...

CVE-2022-42502

CVE-2022-42502 : A missing bounds check in FacilityLock::Parse (simdata.cpp) enables a possible out-of-bounds write, leading to local escalation of privilege with System privileges required and no user interaction. Affected: Android kernel component (rild_exynos is referenced in related records)....

CVE-2023-21163

CVE-2023-21163 : A use-after-free in the PowerVR GPU driver PMR_ReadBytes (pmr.c) can enable arbitrary code execution and local kernel privilege escalation without user interaction. Exploitation details are not provided in the documents; no patch/version details are disclosed here. Affected: Powe...

CVE-2024-29778

CVE-2024-29778 : Vulnerability in ProtocolPsDedicatedBearInfoAdapter::processQosSession (protocolpsadapter.cpp) with a missing bounds check causing an out-of-bounds read. This could enable local information disclosure and require baseband firmware compromise; exploitation does not require user in...

CVE-2024-29780

CVE-2024-29780 affects hwbcc_ns_deprivilege in trusty/user/base/lib/hwbcc/client/hwbcc.c, describing an uninitialized data condition that can disclose uninitialized stack data. The impact is local information disclosure with no extra privileges required and no user interaction needed. Exploitatio...

CVE-2024-29783

The CVE-2024-29783 issue is described across multiple sources as a vulnerability in tmu_get_tr_thresholds where a missing bounds check may cause an out-of-bounds read, leading to local information disclosure with no required user interaction. Exploitation details are not provided in the connected...

CVE-2024-32892

CVE-2024-32892 involves a memory corruption vulnerability in the Goodix driver path, specifically in handle_init of goodix/main/main.c, caused by type confusion. The issue can enable local privilege escalation without user interaction. Public details in the connected sources confirm the affected ...

CVE-2024-32907

The CVE-2024-32907 entry describes a buffer overflow in memcall_add within memlog.c caused by improper input validation, enabling local privilege escalation without user interaction. Connected sources (Red Hat, NVD, OSV, and Android bulletin references) consistently report the same description bu...

CVE-2021-0874

CVE-2021-0874 concerns the PowerVR GPU driver component PVRSRVBridgeDevicememHistorySparseChange, where a missing size check can trigger an integer overflow that allows out-of-bounds heap access. The impact stated across sources is local escalation of privileges with no additional execution privi...

CVE-2022-20185

CVE-2022-20185 affects the Android kernel with a use-after-free flaw described as enabling local privilege escalation to SYSTEM (LOCAL exploit, LOW attack complexity, no user interaction). The exact affected Android versions, patch level, and remediation are not provided in the supplied documents...

CVE-2022-20233

CVE-2022-20233 affects the Android kernel Titan-M source. The issue is an out-of-bounds write in param_find_digests_internal and related functions caused by an incorrect bounds check. It enables local escalation of privilege with System execution privileges required; exploitation does not require...

CVE-2022-20383

CVE-2022-20383 affects the Android kernel via AllocateInternalBuffers in g3aa_buffer_allocator.cc, where an integer overflow can cause an out-of-bounds write. This enables local privilege escalation with no extra user interaction required. Documents indicate the issue exists in the Android kernel...

CVE-2022-20608

CVE-2022-20608 – Pixel cellular firmware : A local information-disclosure flaw caused by an out-of-bounds read from an incorrect bounds check in Pixel cellular firmware (Android kernel). Exploitation requires local access; no user interaction is needed. Impact is information disclosure with high ...

CVE-2022-42506

CVE-2022-42506 affects Android kernel components. The issue is in SimUpdatePbEntry::encode (simdata.cpp) where a missing bounds check can cause an out-of-bounds write, enabling local escalation of privilege with System execution privileges needed. Exploitation is described as local and requires n...

CVE-2022-42516

CVE-2022-42516 affects Android kernel in ProtocolSimBuilderLegacy::BuildSimGetGbaAuth. The flaw is an out-of-bounds read caused by a missing bounds check, enabling local information disclosure with System privileges (no user interaction required). Exploitation and impact are described in multiple...

CVE-2022-42518

CVE-2022-42518 affects the Android kernel (rild_exynos) via an out-of-bounds write in BroadcastSmsConfigsRequestData::encode (smsdata.cpp) caused by a missing bounds check. This can enable local escalation of privilege with System execution privileges; no user interaction is required. Public deta...

CVE-2023-21059

CVE-2023-21059 affects the Android kernel: in EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a missing bounds check causing an out-of-bounds read. This can enable remote information disclosure without privileges and without user interaction. Affected component: Andro...

CVE-2023-21225

CVE-2023-21225 affects the Android kernel (Pixel context) and describes a vulnerability where failure to lock display power allows bypassing the protected confirmation screen, enabling local privilege escalation with no additional execution privileges required. Exploitation requires user interact...

CVE-2023-21227

CVE-2023-21227 describes an information disclosure in Android’s HTBLogKM in htbserver.c that can lead to local kernel information disclosure without extra privileges or user interaction. Publicly documented by NVD/Red Hat/CNVD and reflected in the Android Security Bulletin, this issue affects And...

CVE-2023-35661

CVE-2023-35661 is described as an out-of-bounds read in the function ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp caused by a missing bounds check. This can lead to remote information disclosure without additional privileges or user interaction. The CVE description does not specify affected ...

CVE-2023-48406

CVE-2023-48406 affects Google Pixel devices, specifically the Modem OTP component used in Pixel firmware. The public descriptions describe a logic error that can cause a permanent DoS or allow the modem to boot with unverified firmware. This could lead to local escalation of privilege, requiring ...