CVE-2023-21044

CVE-2023-21044 relates to the Android kernel and the initialization of VendorGraphicBufferMeta. The issue is an out-of-bounds read caused by a missing bounds check in init, enabling potential local information disclosure with System execution privileges required. Exploitation is described as loca...

CVE-2024-29756

CVE-2024-29756 describes an out-of-bounds write in the afe_callback function of q6afe.c due to a buffer overflow, enabling local escalation of privilege with no user interaction required. The connected sources consistently reiterate this condition; however, no concrete remediation version is spec...

CVE-2024-32908

CVE-2024-32908 concerns the Android media.c component: in the sec_media_protect function there is a race condition that can bypass permissions and enable local escalation of privileges. Exploitation is described as needing local access with no user interaction, but no exploit details are provided...

CVE-2024-47032

The vulnerability CVE-2024-47032 affects the lwis_ioctl.c component, specifically the function construct_transaction_from_cmd. The issue is a heap-based out-of-bounds write that can lead to local elevation of privilege without user interaction. Exploitation details (vectors, affected products/ver...

CVE-2018-9402

CVE-2018-9402: A buffer overwrite in multiple functions of gl_proc.c due to a missing bounds check could lead to kernel privilege escalation. The issue is documented across several sources (NVD/Red Hat CNVD/CNNVD/CIRCL and related Android Pixel bulletin context) with no exploitation details provi...

CVE-2022-20169

CVE-2022-20169 is associated with Android kernel/modem in Google Pixel devices as per the connected documents. The PRION source explicitly labels the issue as a "Code injection" vulnerability, while other documents broadly reference the Android kernel/modem context for this CVE. The exact root ca...

CVE-2022-20179

Technical details about CVE-2022-20179 are not provided in the supplied documents; no affected component/version or impact is disclosed. Monitor for updates from official advisories.

CVE-2022-42532

CVE-2022-42532 affects Google/Pixel firmware and the Android kernel: an out-of-bounds read due to a missing bounds check could allow local information disclosure with system execution privileges, requiring no user interaction. The issue is documented across multiple sources (Pixel firmware discus...

CVE-2023-21070

The CVE-2023-21070 issue affects the Android kernel, specifically the bcm4389 driver path in the wl_roam.c file’s add_roam_cache_list function. It describes a potential out-of-bounds write caused by a missing bounds check, which could enable local escalation of privilege with System-level executi...

CVE-2023-21150

CVE-2023-21150 affects the Android kernel, specifically the function handle_set_parameters_ctrl in hal_socket.c. The vulnerability is an out-of-bounds read caused by an incorrect bounds check, leading to potential local information disclosure with System privileges required. No exploitation detai...

CVE-2023-48410

CVE-2023-48410 involves an out-of-bounds read in cd_ParseMsg of cd_codec.c due to a missing bounds check, enabling remote information disclosure without extra privileges or user interaction. The description is consistent across NVD, PRION, CVELIST, and CNNVD entries. Pixel/Android Bulletin refere...

CVE-2023-48415

CVE-2023-48415 concerns an out-of-bounds read in Init of protocolembmsadapter.cpp caused by a missing bounds check. Per multiple connected documents, this can lead to local information disclosure without requiring user interaction. The issue is associated with Android/Google Pixel components (inc...

CVE-2024-29781

CVE-2024-29781: A possible out-of-bounds read in ss_AnalyzeOssReturnResUssdArgIe of ss_OssAsnManagement.c could enable remote information disclosure without authentication or user interaction. Documented impact is information disclosure (no integrity/availability impact stated). In Pixel/Android ...

CVE-2024-32893

The CVE-2024-32893 issue affects the Exynos DVFS code path (exynos_dvfs.c) specifically in _s5e9865_mif_set_rate. The flaw is an out-of-bounds read caused by improper casting, leading to local information disclosure without requiring user interaction. Multiple connected sources (including RH/Red ...

CVE-2024-47014

CVE-2024-47014 affects Google Pixel devices running Android with a privilege-escalation vulnerability in the ABL component (A-330537292). Affected product: Pixel devices; vulnerability type: Elevation of Privilege (EoP). Root cause: not explicitly detailed beyond ABL involvement. Impact: privileg...

CVE-2021-39639

CVE-2021-39639 affects the Android kernel component (fvp.c) with a missing permission check in TBD, enabling local escalation of privilege when an attacker has physical access to device internals. The vulnerability could be exploited without user interaction; attack vector is physical and impact ...

CVE-2021-39681

CVE-2021-39681 affects the Android kernel, specifically the delete_protocol path in main.c. The flaw is a use-after-free that allows arbitrary code execution, resulting in local escalation of privilege. Exploitation is local, does not require user interaction, and does not require additional priv...

CVE-2021-39682

CVE-2021-39682 affects the Android kernel component memory_group_manager.c (function mgm_alloc_page). A bounds check is incorrect, enabling a potential out-of-bounds write that could lead to local privilege escalation without extra execution privileges or user interaction. Exploitation details ar...

CVE-2022-20560

CVE-2022-20560 is tied to the Android kernel as described in connected sources (e.g., PRION listing). The vulnerability is characterized as code injection in the Android kernel, affecting Android kernel components on Pixel devices (Android ID A-212623833). CVSSv3.1 from NVD indicates network atta...

CVE-2022-20564

CVE-2022-20564 affects the Android kernel’s ufdt code path. The issue is an out-of-bounds write in _ufdt_output_strtab_to_fdt (ufdt_convert.c) caused by an incorrect bounds check, enabling possible local escalation of privilege with SYSTEM privileges required. User interaction is not needed for e...

CVE-2022-20584

CVE-2022-20584 affects the Android kernel component in the shared_mem.c file, specifically the page_number handling. The issue is described as improper input validation that can enable code execution in the secure world, leading to local escalation of privilege without extra privileges or user in...

CVE-2022-20600

CVE-2022-20600 affects the Android kernel LWIS component. The issue is described as a memory corruption out-of-bounds write that could enable local privilege escalation to SYSTEM with no user interaction required. The available documents consistently note this as a local attack surface on Android...

CVE-2022-42503

CVE-2022-42503 affects Android kernel via ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria. The issue is an out-of-bounds write caused by a missing bounds check in this function, enabling local escalation of privilege with System execution privileges required. Exploitation requires no user int...

CVE-2023-21040

CVE-2023-21040 concerns the Android kernel Bluetooth code, specifically in the function buildCommand within bluetooth_ccc.cc. The issue is a logic error that can cause an out-of-bounds write, enabling local elevation of privilege with no additional execution privileges required and with no user i...

CVE-2023-21051

CVE-2023-21051 affects the Android kernel via the path dwc3_exynos_clk_get in dwc3-exynos.c, where an incorrect bounds check can cause an out-of-bounds write. This can lead to local privilege escalation with System execution privileges required; exploitation is described as local and does not req...

CVE-2023-21053

CVE-2023-21053 concerns the Android kernel component related to cellular SMS handling. In the function sms_ExtractCbLanguage within sms_CellBroadcast.c, there is an out-of-bounds read caused by a missing bounds check. This leads to a potential information disclosure without requiring execution pr...

CVE-2023-21055

In CVE-2023-21055, a use-after-free due to a race condition exists in the dit_hal_ioctl function of dit.c in the Android kernel. This vulnerability can enable local escalation of privilege with SYSTEM privileges needed, and does not require user interaction. Affected component is the Android kern...

CVE-2023-21219

CVE-2023-21219 affects the Android kernel (Pixel/Android devices) where an insecure default enables unencrypted transport over cellular networks, potentially allowing remote information disclosure without extra privileges. Exploitation is described as network-based with no user interaction, and t...

CVE-2023-35685

CVE-2023-35685 describes a logic error in DevmemIntMapPages within the file devicemem_server.c that can cause a physical page use-after-free. This USE-After-FREE condition could enable local privilege escalation in the kernel without requiring additional execution privileges or user interaction. ...

CVE-2024-27232

CVE-2024-27232 describes an out-of-bounds read in asn1_ec_pkey_parse of asn1_common.c due to a missing null check, enabling local information disclosure without extra privileges and no user interaction. The connected Red Hat/OSV/NVD entries confirm the root cause and impact but do not specify aff...

CVE-2024-29738

CVE-2024-29738 affects the gov_init component and is described across Red Hat, NVD, CVE listings, and OSV as a possible out-of-bounds read caused by a missing bounds check. The exploitation vector is local (attack vector: LOCAL) with no user interaction required, and the impact is local informati...

CVE-2024-29747

CVE-2024-29747 affects the dvfs_get_lv function in dvfs.c, where a missing null check enables an out-of-bounds read. This can lead to local information disclosure with no additional privileges and no user interaction required. The connected records consistently describe the same issue, but none p...

CVE-2024-44098

Summary: CVE-2024-44098 affects the LWIS component in lwis_event.c (Google Pixel). The issue is a double-free leading to a possible local privilege escalation with no required user interaction. The risk assessment is supported by multiple sources indicating Elevation of Privilege (EoP) concerns, ...

CVE-2020-0063

CVE-2020-0063 affects Android SurfaceFlinger, where the UI confirmation screen protected by the TEE can be overridden, enabling local elevation of privilege. Root cause: manipulation of the UI flow in SurfaceFlinger allows bypassing user interaction. Impact: local privilege escalation with high s...

CVE-2022-20379

The CVE-2022-20379 entry relates to the Android kernel (Pixel devices) where a use-after-free in lwis_buffer_alloc (lwis_buffer.c) enables arbitrary code execution, resulting in local escalation of privilege with System execution privileges required. Exploitation is described as local with no use...

CVE-2022-20574

CVE-2022-20574 involves the Android kernel’s DRM firmware path, specifically the function sec_sysmmu_info in drm_fw.c. The issue is an out-of-bounds read caused by improper input validation, enabling local information disclosure without additional privileges and without user interaction. Document...

CVE-2022-20593

CVE-2022-20593 affects the Android kernel, involving an out-of-bounds read in the function pop_descriptor_string of BufferDescriptor.h due to a missing bounds check. This condition could allow local information disclosure and requires only local privileges (no user interaction needed). The vulner...

CVE-2022-20604

CVE-2022-20604 affects the Android kernel function SAECOMM_SetDcnIdForPlmn in SAECOMM_DbManagement.c. A missing bounds check causes an out-of-bounds read, enabling possible information disclosure on a single device. The CVSSv3.1 vector indicates a local, low-privilege impact with no user interact...

CVE-2022-42500

CVE-2022-42500 concerns the Android kernel component where OEM_OnRequest in sced.cpp allows shell command execution due to improper input validation. This can enable local escalation of privilege to System level without user interaction. Affected software is Android kernel components related to t...

CVE-2023-21403

CVE-2023-21403 affects Google Android via the PowerVR-GPU driver entry (rgxta3d.c: RGXDestroyZSBufferKM). The root cause is an uncaught exception in RGXDestroyZSBufferKM that can lead to arbitrary code execution, resulting in local kernel elevation of privilege without requiring user interaction....

CVE-2024-29754

CVE-2024-29754 affects Google Pixel/Android components via TMU_IPC_GET_TABLE. The issue is an out-of-bounds read caused by a missing bounds check, leading to local information disclosure without requiring user interaction. Exploitation details are not provided in the sources; no explicit impacted...

CVE-2024-29755

CVE-2024-29755 affects the tmu_get_pi function in tmu.c, causing an out-of-bounds read due to improper input validation. This can lead to local information disclosure without extra privileges or user interaction. The issue is addressed by Pixel updates; patch level 2024-04-05 or later is indicate...

CVE-2024-29784

CVE-2024-29784 affects lwis_periodic_io.c (LWIS). The vulnerability is an out-of-bounds write caused by an integer overflow in prepare_response, enabling local escalation of privilege without additional privileges or user interaction. Multiple connected sources (RH CVE, NVD/NVD entries, Android P...

CVE-2024-32899

CVE-2024-32899 relates to a race condition in the Pixel GPU power management path (gpu_pm_power_off_top_nolock in pixel_gpu_power.c) that could allow local escalation of privilege to the TEE by compromising protected memory. Exploitation is predicted to require with local access and no user inter...

CVE-2024-32911

CVE-2024-32911 affects Google Pixel devices, specifically the Modem component. The issue stems from improper use of crypto, enabling remote elevation of privilege with no user interaction. The Pixel Update Bulletin lists this CVE under the Pixel firmware/Modem category and indicates that patch le...

CVE-2024-32924

Technical details (affected products, versions, root cause specifics, or exploitation details) are not publicly provided in the supplied documents. Monitor for updates from Red Hat/NVD/Android Bulletins for concrete fixes or mitigations.

CVE-2024-32926

Technical details (affected products/versions/root cause/fix) are not publicly provided in the supplied documents; monitor for updates.

CVE-2024-47041

CVE-2024-47041 concerns a bounds-check error in the valid_address function of syscall.c that can cause an out-of-bounds read, enabling local privilege escalation without user interaction. The vulnerability is documented across multiple sources tied to Google Pixel/Android components, with Pixel/A...

CVE-2024-53839

CVE-2024-53839 arises from an out-of-bounds read in the Android kernel/user-space component, specifically in the GetCellInfoList() implementation of protocolnetadapter.cpp . The missing bounds check can enable a local attacker to cause information disclosure, with exploitation claimed to require ...

CVE-2024-53841

CVE-2024-53841 describes a potential permission bypass due to a confused deputy in Android’s startListeningForDeviceStateChanges, enabling local elevation of privilege with no user interaction required. The issue is categorized in the Pixel bulletin as an Elevation of Privilege (EoP) affecting th...