CVE-2024-29739

CVE-2024-29739 affects Google Android’s kernel component involved in tmu_get_temp_lut in tmu.c, where a missing bounds check enables an out-of-bounds read. This can cause local information disclosure without extra privileges or user interaction. Public exploit details are not provided in the supp...

CVE-2024-29752

In CVE-2024-29752, the flaw resides in the function tmu_set_tr_num_thresholds inside tmu.c. It enables an out-of-bounds write due to a missing bounds check in this routine, which could allow a local escalation of privilege. The impact is described as local privilege escalation with no additional ...

CVE-2024-29778

CVE-2024-29778 : Vulnerability in ProtocolPsDedicatedBearInfoAdapter::processQosSession (protocolpsadapter.cpp) with a missing bounds check causing an out-of-bounds read. This could enable local information disclosure and require baseband firmware compromise; exploitation does not require user in...

CVE-2024-29780

CVE-2024-29780 affects hwbcc_ns_deprivilege in trusty/user/base/lib/hwbcc/client/hwbcc.c, describing an uninitialized data condition that can disclose uninitialized stack data. The impact is local information disclosure with no extra privileges required and no user interaction needed. Exploitatio...

CVE-2024-29786

CVE-2024-29786 describes a potential remote code execution in Google Pixel devices due to an out-of-bounds write in the function pktproc_fill_data_addr_without_bm within link_rx_pktproc.c caused by a missing bounds check. The issue affects Pixel firmware/CPIF as listed in the Pixel bulletin; the ...

CVE-2024-32898

CVE-2024-32898 affects the ProtocolCellIdentityParserV4::Parse() function in protocolnetadapter.cpp. A missing bounds check causes an out-of-bounds read, enabling potential information disclosure. The impact is described as a local disclosure risk that could enable baseband firmware compromise; e...

CVE-2024-32930

CVE-2024-32930 involves a flaw in the plugin_ipc_handler of the slc_plugin.c module, where uninitialized data can cause a local information disclosure of 4 bytes from the stack. Exploitation is described as local with no user interaction and no additional execution privileges required. The provid...

CVE-2024-56188

CVE-2024-56188 affects Google Pixel devices with a modem component vulnerability caused by a missing null check, enabling Denial of Service. Reports consistently describe DoS without user interaction and without extra privileges. Pixel Update Bulletin (March 2025) lists CVE-2024-56188 under the M...

CVE-2020-0371

CVE-2020-0371 is an Android vulnerability described as an out-of-bounds read due to a missing bounds check, affecting Android components on the Android SoC with Android ID A-163008256. The public records list this CVE across multiple sources (NVD, Red Hat, PRION, CVE List, OSV) with consistent wo...

CVE-2020-0445

CVE-2020-0445 is an Android vulnerability described as an out-of-bounds write caused by a missing bounds check. Connected sources indicate this affects the Android video encoder (MediaTek components) and is rated high to critical, with a network attack vector and no user interaction required per ...

CVE-2021-0874

CVE-2021-0874 concerns the PowerVR GPU driver component PVRSRVBridgeDevicememHistorySparseChange, where a missing size check can trigger an integer overflow that allows out-of-bounds heap access. The impact stated across sources is local escalation of privileges with no additional execution privi...

CVE-2022-20159

CVE-2022-20159 affects the Android kernel via the asn1_ec_pkey_parse function in acropora/crypto/asn1_common.c. The issue is an out-of-bounds read caused by an incorrect bounds check, which can lead to local information disclosure with system privileges (no user interaction required). Exploitatio...

CVE-2022-20160

CVE-2022-20160 is documented as a critical remote code execution (RCE) vulnerability in Google Pixel devices, specifically affecting the Modem component. Public records classify it as a Modem-related issue (RCE, Critical) in the Pixel bulletin, with the Android patch level 2022-06-05 or later add...

CVE-2022-20185

CVE-2022-20185 affects the Android kernel with a use-after-free flaw described as enabling local privilege escalation to SYSTEM (LOCAL exploit, LOW attack complexity, no user interaction). The exact affected Android versions, patch level, and remediation are not provided in the supplied documents...

CVE-2022-20373

CVE-2022-20373 affects the Android kernel, specifically the st21nfc_loc_set_polaritymode function in fc/st21nfc.c. The issue is a use-after-free caused by a race condition, enabling local elevation of privilege with SYSTEM privileges required and no user interaction needed. Connected sources (Red...

CVE-2022-20401

CVE-2022-20401: In SAEMM_RetrievEPLMNList of SAEMM_ContextManagement.c there is an out-of-bounds read due to a missing bounds check, causing potential remote information disclosure after authentication with no additional privileges required. Affected: Android kernel components; Exploit status not...

CVE-2022-20406

CVE-2022-20406 is present in Pixel/Android kernel entries with Type ID (Information disclosure) affecting the Modem component. The connected Pixel bulletin confirms the CVE exists but provides no public exploit details or remediation in the provided documents. No additional technical specifics (v...

CVE-2022-20602

CVE-2022-20602 is mapped to the Android kernel with impact described as Information Disclosure (ID) and a high overall severity (CVSS base 7.5). The vulnerability is associated with the Android kernel in Pixel devices, and is listed under Pixel components in the Android Pixel security bulletin fo...

CVE-2022-20609

CVE-2022-20609 involves a local information-disclosure vulnerability in Pixel cellular firmware due to a missing bounds check that allows an out-of-bounds read. Exploitation requires local access; no user interaction is needed. The issue is described for the Pixel/Android kernel domain, but the p...

CVE-2022-42518

CVE-2022-42518 affects the Android kernel (rild_exynos) via an out-of-bounds write in BroadcastSmsConfigsRequestData::encode (smsdata.cpp) caused by a missing bounds check. This can enable local escalation of privilege with System execution privileges; no user interaction is required. Public deta...

CVE-2023-21059

CVE-2023-21059 affects the Android kernel: in EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a missing bounds check causing an out-of-bounds read. This can enable remote information disclosure without privileges and without user interaction. Affected component: Andro...

CVE-2023-21069

Summary: CVE-2023-21069 affects the Android kernel (bcm4389 driver) in the wl_update_hidden_ap_ie function of wl_cfgscan.c, causing an out-of-bounds write due to a missing bounds check. This enables local escalation of privilege (System level) without user interaction. Technical details confirmed...

CVE-2023-21149

CVE-2023-21149 affects the ShannonRcsService.java in Android kernel, where registerGsmaServiceIntentReceiver lacks a required permission check. This enables possible activation/deactivation of the RCS service via local escalation of privilege, without additional execution privileges or user inter...

CVE-2023-21225

CVE-2023-21225 affects the Android kernel (Pixel context) and describes a vulnerability where failure to lock display power allows bypassing the protected confirmation screen, enabling local privilege escalation with no additional execution privileges required. Exploitation requires user interact...

CVE-2023-35661

CVE-2023-35661 is described as an out-of-bounds read in the function ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp caused by a missing bounds check. This can lead to remote information disclosure without additional privileges or user interaction. The CVE description does not specify affected ...

CVE-2023-48407

CVE-2023-48407 affects Google Pixel bootloader: a logic error may prevent the DCK from being deleted after factory reset, enabling local elevation of privilege with no user interaction. Exploitation details are not provided in the documents; the Pixel update bulletin lists CVE-2023-48407 as a boo...

CVE-2024-31337

CVE-2024-31337 affects PVRSRVRGXKickTA3DKM in rgxta3d.c. The vulnerability arises from improper input validation, enabling arbitrary code execution and local kernel privilege escalation with no extra privileges or user interaction required. The issue is discussed across multiple catalogs (NVD/And...

CVE-2024-32901

CVE-2024-32901 affects the v4l2_smfc_qbuf function in smfc-v4l2-ioctls.c, where a missing bounds check can cause an out-of-bounds write. This enables local privilege escalation with no extra privileges or user interaction required. Pixel/Android bulletins indicate patches in the June 2024 update;...

CVE-2024-32904

CVE-2024-32904 concerns the ProtocolVsimOperationAdapter() function in protocolvsimadapter.cpp, where a missing bounds check can cause an out-of-bounds read. This may lead to local information disclosure with the requirement of baseband firmware compromise for exploitation, and no user interactio...

CVE-2024-32905

CVE-2024-32905 affects Google Pixel devices via the circ_read path in link_device_memory_legacy.c, where an incorrect bounds check can cause an out-of-bounds write. This can enable remote code execution without user interaction. The Pixel security bulletin groups this under the cpif subcomponent ...

CVE-2024-32912

Summary: CVE-2024-32912 describes a persistent Denial of Service caused by test/debugging code left in a production build, enabling local DoS without extra privileges or user interaction. Affected context (from connected docs): Multiple sources reference a local-DoS issue on Google Pixel/Android ...

CVE-2024-32925

CVE-2024-32925 affects the dhd_prot_txstatus_process function in dhd_msgbuf.c. The issue is described as a possible out-of-bounds write caused by a missing bounds check, which could enable remote code execution. The description states no additional execution privileges are required, and exploitat...

CVE-2024-47035

The CVE affects virtio’s vring_init in external/headers/include/virtio/virtio_ring.h, where a logic error can cause an out-of-bounds write. This may enable local privilege escalation with no extra privileges or user interaction; exploitation details are not provided in the supplied documents. Rem...

CVE-2024-53835

Google Pixel Android devices are affected by CVE-2024-53835, a local elevation of privilege vulnerability described as a biometric bypass with an unusual root cause. The issue targets the FPS (likely a biometric subsystem) and is exploitable with LOCAL access,LOW user interaction, and no required...

CVE-2022-20182

CVE-2022-20182 concerns the Android kernel component handle_ramdump inside pixel_loader.c. The vulnerability arises from a missing permission check, enabling creation of a ramdump of non-secure memory and potentially leading to local information disclosure with SYSTEM privileges required. Exploit...

CVE-2022-20595

In CVE-2022-20595, the issue is in the Android kernel’s WirelessCharger.cpp getWpcAuthChallengeResponse function. It describes an out-of-bounds read caused by a missing bounds check, enabling local information disclosure with System privileges required. Public references confirm the affected comp...

CVE-2022-42521

CVE-2022-42521 affects the Android kernel component wlandata.cpp where the encode path can trigger an out-of-bounds write due to improper input validation. The exploitation requires local access (LOCAL) with high privileges (PR:H) and no user interaction. Impact is defined as full compromise of c...

CVE-2023-21060

CVE-2023-21060 affects the Android kernel, specifically in sms_GetTpPiIe within sms_PduCodec.c. The issue is an out-of-bounds read caused by a missing bounds check, enabling potential remote information disclosure with no extra execution privileges and no user interaction. Documented impact is in...

CVE-2023-21067

CVE-2023-21067 is described as affecting the Android kernel in Pixel devices. The Pixel security bulletin lists CVE-2023-21067 under the Pixel section and ties fixes to the 2023-03-01 patch level, indicating a remediation exists there. The available documents do not provide explicit root cause de...

CVE-2023-21148

CVE-2023-21148 describes a vulnerability in the BuildSetConfig function of protocolimsbuilder.cpp where a missing null check can cause an out-of-bounds read. This could allow local information disclosure with System-level execution privileges required, and exploitation does not require user inter...

CVE-2023-21156

CVE-2023-21156 describes an out-of-bounds read in Android’s modem stack, specifically in BuildGetRadioNode within protocolmiscbulider.cpp, caused by improper input validation. The issue could allow local information disclosure from the modem and requires System execution privileges; exploitation ...

CVE-2023-48420

The CVE-2023-48420 entry describes a race-condition–driven use-after-free in the Camera component on Pixel devices, enabling local escalation of privilege with System-level privileges and no user interaction. The vulnerability is categorized as EoP (Camera) in the Pixel security bulletin, with a ...

CVE-2017-7759

Firefox for Android prior to version 54 is affected by CVE-2017-7759, where Android intent URLs can cause navigation from HTTP/HTTPS to local file: URLs, potentially exposing local data due to a same-origin policy violation. The issue is fixed in Firefox 54 (as noted in mfsa2017-15). Affected pro...

CVE-2018-9463

The vulnerability CVE-2018-9463 affects the touchscreen path in the Android kernel: In sw49408_irq_runtime_engine_debug (touch_sw49408.c), there is an out-of-bounds write caused by an incorrect bounds check. This can enable local privilege escalation with System execution privileges required and ...

CVE-2018-9465

Summary : CVE-2018-9465 affects the Android kernel, specifically the binder.c task_get_unused_fd_flags path, where a use-after-free can cause memory corruption. This could enable local privilege escalation with no extra privileges required and without user interaction. Multiple connected advisori...

CVE-2022-20165

CVE-2022-20165 affects the Android kernel component asn1_parse in asn1.c, where an incorrect bounds check can cause an out-of-bounds read. The consequence is local information disclosure with system execution privileges potentially required. The CVE is described as requiring no user interaction a...

CVE-2022-20376

CVE-2022-20376 affects the Android kernel’s trusty-log.c: Trusty_log_seq_start has use-after-free due to improper locking, enabling local elevation of privileges to SYSTEM. Exploitation details are not provided in the connected documents; no patch/version/fix is specified here. Monitoring Pixel s...

CVE-2022-20380

According to the Pixel security bulletin, CVE-2022-20380 is listed under the Pixel component Modem with type ID (information disclosure) and High severity. The entry is tied to Android devices via a modem-related information-disclosure issue, not clearly specifying kernel-level impact in this bul...

CVE-2022-20382

CVE-2022-20382 affects the Android kernel (kernel components). The description cites a possible out-of-bounds write due to a kernel stack overflow, enabling local escalation of privilege with System privileges required and no user interaction needed. Several connected sources (NVD, Red Hat, SUSE,...

CVE-2022-20428

The CVE-2022-20428 entry concerns Google Android kernel components with a possible out-of-bounds write caused by a missing bounds check. Affected: Android kernel (Android devices, Titan M as per Pixel bulletin). Impact: local escalation of privilege to System level; exploitation requires local ac...