CVE-2023-48414

CVE-2023-48414 affects the Pixel Camera Driver. It describes a use-after-free due to a logic error, enabling local escalation of privilege with System privileges required and no user interaction. The vulnerability is categorized as EoP with a moderate impact in Pixel security bulletins, and no pu...

CVE-2025-27701

CVE-2025-27701 describes a null-pointer dereference in the function process_crypto_cmd , where values in ptrs[i] can be NULL after slice_map_array() and are later dereferenced without a NULL check, enabling a local temporary DoS or out-of-bounds read and information disclosure. The CVE is listed ...

CVE-2017-7759

Firefox for Android prior to version 54 is affected by CVE-2017-7759, where Android intent URLs can cause navigation from HTTP/HTTPS to local file: URLs, potentially exposing local data due to a same-origin policy violation. The issue is fixed in Firefox 54 (as noted in mfsa2017-15). Affected pro...

CVE-2020-0371

CVE-2020-0371 is an Android vulnerability described as an out-of-bounds read due to a missing bounds check, affecting Android components on the Android SoC with Android ID A-163008256. The public records list this CVE across multiple sources (NVD, Red Hat, PRION, CVE List, OSV) with consistent wo...

CVE-2022-20165

CVE-2022-20165 affects the Android kernel component asn1_parse in asn1.c, where an incorrect bounds check can cause an out-of-bounds read. The consequence is local information disclosure with system execution privileges potentially required. The CVE is described as requiring no user interaction a...

CVE-2022-20408

CVE-2022-20408 is listed in Google Pixel security bulletin under the Modem component with Type ID and Moderate severity. The bulletin indicates patch level 2022-08-05 or later addresses all issues in that bulletin. Public details on the exact vulnerable subsystem within the modem/kernel are not f...

CVE-2022-20575

The CVE-2022-20575 entry concerns Android kernel code: an out-of-bounds read in read_ppmpu_info() within drm_fw.c due to an incorrect bounds check, enabling local information disclosure without extra privileges or user interaction. Affected component: Android kernel (drm_fw.c read_ppmpu_info). Im...

CVE-2022-20578

CVE-2022-20578 : Vulnerability in RadioImpl::setGsmBroadcastConfig of ril_service_legacy.cpp can cause a stack clash and memory corruption, enabling local privilege escalation with System privileges required. The issue is exploitable locally (no user interaction) and affects Android kernels using...

CVE-2022-20602

CVE-2022-20602 is mapped to the Android kernel with impact described as Information Disclosure (ID) and a high overall severity (CVSS base 7.5). The vulnerability is associated with the Android kernel in Pixel devices, and is listed under Pixel components in the Android Pixel security bulletin fo...

CVE-2022-20610

CVE-2022-20610 : In Android Pixel devices, a vulnerability in the cellular modem firmware (Pixel cellular modem) enables a possible out-of-bounds read due to a missing bounds check, which could allow remote code execution. Exploitation is network-based with no user interaction required; LTE authe...

CVE-2022-42514

CVE-2022-42514 affects Android kernel code: ProtocolImsBuilder::BuildSetConfig in protocolimsbuilder.cpp is vulnerable to an out-of-bounds read due to a missing bounds check. This could allow local information disclosure with System-level privileges required. The vulnerability is documented acros...

CVE-2023-21148

CVE-2023-21148 describes a vulnerability in the BuildSetConfig function of protocolimsbuilder.cpp where a missing null check can cause an out-of-bounds read. This could allow local information disclosure with System-level execution privileges required, and exploitation does not require user inter...

CVE-2023-21157

CVE-2023-21157 involves a heap buffer overflow in the Android kernel component wlandata.cpp, causing an out-of-bounds write that can lead to local privilege escalation with system-level privileges. The issue is triggered without user interaction. Affected software is Android kernel (wlandata.cpp)...

CVE-2024-29750

CVE-2024-29750 : The issue is a possible out-of-bounds read in the km_exp_did_inner function of kmv.c due to a missing bounds check. This can lead to local information disclosure without extra execution privileges and without user interaction. Public details on affected versions or a fix are not ...

CVE-2024-47038

CVE-2024-47038 describes an out-of-bounds write in the function dhd_prot_flowrings_pool_release within dhd_msgbuf.c, caused by a missing bounds check. This can lead to local privilege escalation with no user interaction required. Documents collectively indicate a Linux/Android kernel context (Pix...

CVE-2024-53836

CVE-2024-53836 is an out-of-bounds write vulnerability in the Android wb_regon_coordinator.c file, specifically in the function wbrc_bt_dev_write. The issue arises from a lack of bounds checking, allowing a potential buffer overflow that could enable local escalation of privilege with System exec...

CVE-2018-9439

The issue CVE-2018-9439 affects the Linux kernel’s af_packet.c, specifically in __unregister_prot_hook and packet_release. The root cause is an improper locking leading to a use-after-free scenario in the network stack. Impact described across sources is local privilege escalation with kernel-lev...

CVE-2020-0062

CVE-2020-0062 affects Android Euicc. An information disclosure exists due to an included test certificate, enabling remote data exposure without extra privileges. Exploitation is network-based with no user interaction required. CVSSv2/3.1 base scores are 5.0 (MEDIUM) and 7.5 (HIGH) respectively. ...

CVE-2021-0936

CVE-2021-0936 affects the Android kernel (acc_read in f_accessory.c) where a use-after-free can cause memory corruption leading to local privilege escalation without user interaction. The issue is described across multiple sources (NVD/NASL/CNVD etc.) as a memory corruption vulnerability in the A...

CVE-2022-20178

CVE-2022-20178 affects Android kernel components where ioctl_dpm_qos_update and ioctl_event_control_set can trigger an out-of-bounds write caused by an integer overflow. This can lead to local privilege escalation with system execution privileges required, and exploitation does not require user i...

CVE-2022-20184

CVE-2022-20184 is listed in the Pixel security bulletin under the Modem category with type ID (Information Disclosure) and moderate severity. Documents indicate it affects Google Pixel devices, specifically the Modem component, but do not provide the root cause or exact exploit details. A remedia...

CVE-2022-20380

According to the Pixel security bulletin, CVE-2022-20380 is listed under the Pixel component Modem with type ID (information disclosure) and High severity. The entry is tied to Android devices via a modem-related information-disclosure issue, not clearly specifying kernel-level impact in this bul...

CVE-2022-20382

CVE-2022-20382 affects the Android kernel (kernel components). The description cites a possible out-of-bounds write due to a kernel stack overflow, enabling local escalation of privilege with System privileges required and no user interaction needed. Several connected sources (NVD, Red Hat, SUSE,...

CVE-2022-20590

The CVE-2022-20590 entry concerns the Android kernel, specifically the valid_va_sec_mfc_check function in drm_access_control.c. The vulnerability is an information disclosure caused by improper input validation, allowing local information disclosure without requiring additional execution privileg...

CVE-2022-20596

CVE-2022-20596 : The vulnerability is in the Android kernel’s WirelessCharger.cpp, in the sendChunk function, where a missing bounds check leads to an out-of-bounds write. This can cause local privilege escalation with System execution privileges required. Exploitation does not require user inter...

CVE-2022-20599

CVE-2022-20599 affects Google Pixel firmware/kernel components. The vulnerability is described as an exposure of sensitive memory due to a missing bounds check in Pixel firmware, which can lead to local elevation of privilege with System execution privileges required. The impact is indicated as h...

CVE-2022-20606

The CVE-2022-20606 entry concerns SAEMM_MiningCodecTableWithMsgIE in SAEMM_RadioMessageCodec.c, where a missing bounds check can cause an out-of-bounds read. This could enable remote information disclosure with system privileges required. User interaction is not required. Connected sources confir...

CVE-2022-20609

CVE-2022-20609 involves a local information-disclosure vulnerability in Pixel cellular firmware due to a missing bounds check that allows an out-of-bounds read. Exploitation requires local access; no user interaction is needed. The issue is described for the Pixel/Android kernel domain, but the p...

CVE-2022-42509

CVE-2022-42509 affects the Android kernel component in the function CallDialReqData::encode (callreqdata.cpp). The issue is described as an out-of-bounds write caused by a missing bounds check, which could enable a local escalation of privilege with System execution privileges required. Exploitat...

CVE-2023-21063

CVE-2023-21063 affects Android kernel components (ParseWithAuthType in simdata.cpp) and is described as an out-of-bounds read that can enable local privilege escalation with SYSTEM-level privileges required. Multiple connected sources confirm the issue and its Android/Pixel context, including Pix...

CVE-2023-21064

CVE-2023-21064 affects Android kernel components (DoSetPinControl in miscservice.cpp) with a possible out-of-bounds read caused by a missing bounds check. The vulnerability could enable a local elevation of privilege to System-level execution without user interaction. Affected context includes An...

CVE-2023-21068

The CVE-2023-21068 entry concerns Android kernel with a local privilege escalation via booting with a hidden debug policy due to a missing user warning. Affected component is the Android kernel; description states that after preparing the device and hiding the warning, a user can hand the device ...

CVE-2023-35647

CVE-2023-35647 concerns Google Pixel baseband software: a missing bounds check in ProtocolEmbmsGlobalCellIdAdapter::Init() (protocolembmsadapter.cpp) allows an out-of-bounds read, leading to remote information disclosure and potential baseband firmware compromise. Exploitation requires no user in...

CVE-2023-48412

CVE-2023-48412 affects the Mali driver’s private_handle_t in mali_gralloc_buffer.h. A logic error can cause an information leak, enabling local information disclosure without additional execution privileges and without user interaction. The impact is restricted to local disclosure; exploitation d...

CVE-2024-11624

CVE-2024-11624 affects Google Android (notably Pixel) and is categorized as an Elevation of Privilege (VPN) vulnerability. The issue arises from an undeclared permission that allows adding apps to bypass VPN, enabling local privilege elevation with no extra execution privileges and no user intera...

CVE-2024-29785

CVE-2024-29785 describes an information disclosure in the Aurora driver code path: the function name and file are aur_get_state in aurora.c. The root cause is uninitialized data leading to local information disclosure without extra privileges or user interaction. Affected entity is evidenced by m...

CVE-2024-32900

The CVE-2024-32900 issue affects the LWIS (lwis_fence_signal) path in lwis_debug.c. It describes a Use-After-Free caused by improper locking, enabling local escalation of privilege from the hal_camera_default SELinux label without additional execution privileges. The vulnerability is documented a...

CVE-2020-0030

CVE-2020-0030 describes a race condition in binder_thread_release within binder.c, leading to a use-after-free that can enable local privilege escalation without additional privileges or user interaction. Affected component is the Android/Linux kernel (binder subsystem). The provided connected do...

CVE-2021-0869

CVE-2021-0869 affects Android kernel components, specifically DumpstateDevice.cpp GetTimeStampAndPkt. The issue is an out-of-bounds write caused by an incorrect bounds check, which the Pixel 2021-09-01 bulletin categorizes as a Remote Code Execution (RCE) vulnerability with High risk. Exploitatio...

CVE-2022-20407

CVE-2022-20407 affects the Android kernel as cited in the Pixel security bulletin, with the vulnerability categorized under the Modem component and rated DoS (Moderate) in that context. The CVSSv3.1 base score is 7.5 (Network attack vector, Low attack complexity, No privileges required, No user i...

CVE-2022-20571

The CVE-2022-20571 entry documents a use-after-free in extract_metadata of dm-android-verity.c in the Android kernel, which can corrupt kernel memory. It implies local escalation of privilege to System with no user interaction required. Affected component is the kernel’s dm-verity subsystem; root...

CVE-2022-20585

CVE-2022-20585 affects the Android kernel component drm_access_control.c, specifically the function valid_out_of_special_sec_dram_addr. The issue is an elevation of privilege due to improper input validation, enabling local privilege escalation with no extra user interaction. Exploitation details...

CVE-2022-20598

CVE-2022-20598 describes an integer overflow in the Android kernel’s sec_media_protect function (media.c). The issue can cause a local Elevation of Privilege in the secure mode MFC Core, with no additional privileges or user interaction required. The available documents specify the vulnerability ...

CVE-2022-42501

CVE-2022-42501 involves an out-of-bounds write in HexString2Value within util.cpp. The vulnerability affects Android kernel components and can enable local escalation of privilege with System execution privileges, without user interaction. Exploitation details, affected versions, and remediation ...

CVE-2023-21044

CVE-2023-21044 relates to the Android kernel and the initialization of VendorGraphicBufferMeta. The issue is an out-of-bounds read caused by a missing bounds check in init, enabling potential local information disclosure with System execution privileges required. Exploitation is described as loca...

CVE-2023-35660

Summary: CVE-2023-35660 describes a use-after-free in lwis_transaction_client_cleanup (lwis_transaction.c) that can corrupt memory and enable local privilege escalation with SYSTEM privileges; exploitation does not require user interaction. The vulnerability is reported across multiple feeds (NVD...

CVE-2024-32908

CVE-2024-32908 concerns the Android media.c component: in the sec_media_protect function there is a race condition that can bypass permissions and enable local escalation of privileges. Exploitation is described as needing local access with no user interaction, but no exploit details are provided...

CVE-2018-9402

CVE-2018-9402: A buffer overwrite in multiple functions of gl_proc.c due to a missing bounds check could lead to kernel privilege escalation. The issue is documented across several sources (NVD/Red Hat CNVD/CNNVD/CIRCL and related Android Pixel bulletin context) with no exploitation details provi...

CVE-2021-0654

Summary: CVE-2021-0654 affects Android Pixel launcher (CVE entry tied to Android kernel/TaskThumbnailView.java) with information disclosure from locked profiles due to a missing permission check in isRealSnapshot. Exploitation requires user interaction; local information disclosure is possible wi...

CVE-2022-20169

CVE-2022-20169 is associated with Android kernel/modem in Google Pixel devices as per the connected documents. The PRION source explicitly labels the issue as a "Code injection" vulnerability, while other documents broadly reference the Android kernel/modem context for this CVE. The exact root ca...