CVE-2023-21226

CVE-2023-21226 affects the Android kernel, specifically SAEMM_RetrieveTaiList in SAEMM_ContextManagement.c. The issue is an out-of-bounds read caused by an incorrect bounds check, which could enable remote information disclosure with no additional execution privileges and without user interaction...

CVE-2024-53841

CVE-2024-53841 describes a potential permission bypass due to a confused deputy in Android’s startListeningForDeviceStateChanges, enabling local elevation of privilege with no user interaction required. The issue is categorized in the Pixel bulletin as an Elevation of Privilege (EoP) affecting th...

CVE-2025-22413

The vulnerability CVE-2025-22413 affects the Android kernel (hyp-main.c) where a logic error can allow local privilege escalation and information disclosure without extra privileges or user interaction. The issue is described consistently across multiple sources (Linux kernel context in Android, ...

CVE-2017-8244

CVE-2017-8244 affects Android CAF builds leveraging the Linux kernel. The vulnerability arises in core_info_read and inst_info_read where the buffer structures dbg_buf, dbg_buf->curr, and dbg_buf->filled_size can be concurrently modified by multiple threads without mutexes/locks. This race ...

CVE-2021-39680

CVE-2021-39680 affects the Android kernel, with the flaw located in sec_SHA256_Transform within sha256_core.c. The issue allows reading heap data due to uninitialized data, enabling local information disclosure with system privileges. Exploitation does not require user interaction. The vulnerabil...

CVE-2022-20397

CVE-2022-20397 affects the Android kernel component SitRilSe.cpp (SitRilClient_OnResponse). The issue is an out-of-bounds write caused by a missing bounds check, enabling local elevation of privilege without user interaction. The CVSSv3.1 metrics indicate LOCAL exploitability, LOW privileges requ...

CVE-2022-20587

CVE-2022-20587 affects Android devices via an issue in the Android kernel, in drm_fw.c within the ppmp_validate_wsm function. The vulnerability arises from improper input validation, enabling local privilege escalation with no additional privileges and no user interaction required. The CVSS vecto...

CVE-2022-20591

CVE-2022-20591 affects the Android kernel component ppmpu_set in ppmpu.c. The vulnerability is a logic error that can cause information disclosure locally without requiring additional execution privileges, and it does not require user interaction. Several connected sources consistently describe a...

CVE-2022-20592

CVE-2022-20592 describes a vulnerability in the Android kernel’s DRM firmware, specifically in the function ppmp_validate_secbuf of drm_fw.c. The flaw stems from improper input validation, allowing local information disclosure without requiring additional execution privileges or user interaction....

CVE-2022-20597

CVE-2022-20597 describes a local Elevation of Privilege in the Android kernel: in ppmpu_set of ppmpu.c, an integer overflow can lead to a local escalation of privilege with no extra execution privileges and no user interaction required. Public sources in NVD/Red Hat entries corroborate the Androi...

CVE-2022-20605

CVE-2022-20605 affects the Android kernel component SAECOMM_Utility.c, specifically the SAECOMM_CopyBufferBytes function. The underlying issue is an incorrect bounds check that enables an out-of-bounds read, leading to potential remote information disclosure without requiring additional privilege...

CVE-2022-42511

CVE-2022-42511 affects EmbmsSessionData::encode in embmsdata.cpp. The issue is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privileges with System execution privileges required. User interaction is not needed. The available documents consistently describe ...

CVE-2022-42524

The CVE-2022-42524 entry describes an out-of-bounds read in Android’s sms_GetTpUdlIe within sms_PduCodec.c due to a missing bounds check. This can lead to remote information disclosure without extra privileges or user interaction. Connected OSV data confirms the same file-level bug, but no exploi...

CVE-2022-42533

CVE-2022-42533 affects Android kernel via an out-of-bounds write in SharedMetadata.cpp during shared_metadata_init, caused by an integer overflow. Impact is local privilege escalation with no user interaction required. Documented across multiple feeds (NVD, Red Hat, OSV) and listed in Pixel bulle...

CVE-2023-21071

The CVE-2023-21071 entry affects the Android kernel, specifically the dhd_prot_ioctcmplt_process function in dhd_msgbuf.c. The issue is an out-of-bounds write caused by improper input validation, enabling local escalation of privilege with System execution privileges required. User interaction is...

CVE-2023-35649

The CVE-2023-35649 issue concerns Exynos modem firmware: multiple functions in Exynos modem files allow an out-of-bounds write due to a missing bounds check. This could enable remote code execution with system-level privileges and does not require user interaction. The description and connected r...

CVE-2023-48422

CVE-2023-48422 affects Google Pixel/Android components via a missing bounds check in Init of protocolnetadapter.cpp, causing an out-of-bounds read and potential local information disclosure without user interaction. The exploit requires local access and there is no public exploitation detail in t...

CVE-2024-29751

CVE-2024-29751 describes a possible out-of-bounds read in the function asn1_ec_pkey_parse_p384 (asn1_common.c) caused by a missing null check, enabling local information disclosure with no extra privileges or user interaction. Multiple sources tie this to OpenSSL (PT-2024-22991) and list it under...

CVE-2024-32918

CVE-2024-32918 describes a permission bypass that allows attackers to disable HDCP 2.2 encryption by not completing the HDCP Key Exchange initialization steps. The vulnerability is referenced in multiple feeds as affecting Google Pixel/Android devices, with references to a Trusty/TEE subcomponent...

CVE-2024-47025

The CVE-2024-47025 issue is a local information-disclosure in the function ppmp_protect_buf of drm_fw.c. The underlying logic error could allow disclosure of sensitive data without extra privileges, with no user interaction required. Pixel/Android bulletins indicate affected devices can be patche...

CVE-2024-47026

CVE-2024-47026 affects Google Pixel devices and is due to an incorrect bounds check in gsc_gsa_rescue within gsc_gsa.c, causing an out-of-bounds read and local information disclosure without requiring user interaction. Exploitation details are not provided in the documents. Affected component: gs...

CVE-2024-47027

CVE-2024-47027 affects Google Pixel/Android components, with the vulnerability in sm_mem_compat_get_vmm_obj in lib/sm/shared_mem.c. The issue allows arbitrary physical memory access due to improper input validation, enabling local privilege escalation without additional privileges or user interac...

CVE-2020-27066

CVE-2020-27066 involves a use-after-free in the Linux kernel’s xfrm6_tunnel_free_spi (net/ipv6/xfrm6_tunnel.c) caused by improper locking, enabling local privilege escalation with system execution privileges required and no user interaction. Affected context from connected docs includes Android k...

CVE-2021-0462

CVE-2021-0462 concerns the NXP NFC firmware used in Google Pixel devices. A logic error could allow an insecure firmware update, enabling local elevation of privilege with system-level execution privileges, and exploitation does not require user interaction. The issue is tied to the NFC firmware ...

CVE-2021-39679

CVE-2021-39679 affects Android kernel graphics handling (vendor_graphicbuffer_meta.cpp). The issue is a race condition leading to a possible use-after-free, enabling local escalation of privilege without extra execution privileges, and not requiring user interaction. Documentation consistently de...

CVE-2021-39684

CVE-2021-39684 relates to the Android kernel component gs101/abl/target/slider/target.c, where a logic error can cause allocation of RWX memory. This may enable local privilege escalation with no extra execution privileges or user interaction required. Connected OSV data confirms the issue but do...

CVE-2023-21050

CVE-2023-21050 describes a vulnerability in the Android kernel: in load_png_image of ExynosHWCHelper.cpp there is a possible out-of-bounds write due to improper input validation. This can lead to local escalation of privilege with System execution privileges required; no user interaction is neede...

CVE-2023-21077

CVE-2023-21077 affects the Android kernel in the rtt_unpack_xtlv_cbfn function within dhd_rtt.c, where a buffer overflow can cause an out-of-bounds write. This vulnerability could enable local escalation of privileges with SYSTEM-level execution privileges, and exploitation is possible without us...

CVE-2023-35652

CVE-2023-35652 describes an out-of-bounds read in ProtocolEmergencyCallListIndAdapter::Init (protocolcalladapter.cpp) caused by a missing bounds check. The issue could enable remote information disclosure and may require exploitation at the baseband firmware level, with no user interaction needed...

CVE-2023-40142

CVE-2023-40142 is documented in multiple sources as a local elevation-of-privilege affecting Google Pixel components, stemming from a logic error in the code that bypasses carrier restrictions on the device. The Android Pixel bulletins and Red Hat/NVD records describe the issue as enabling local ...

CVE-2023-48397

CVE-2023-48397: Out-of-bounds read in Init of protocolcalladapter.cpp allows information disclosure with potential for System-level impact. The issue requires no user interaction. Documented in multiple sources (NVD entry and Android Pixel bulletin) with Pixel subcomponent exynos-ril and a CVSS v...

CVE-2023-48404

CVE-2023-48404 affects Google Pixel Exynos RIL components, caused by a missing bounds check in ProtocolMiscCarrierConfigSimInfoIndAdapter (protocolmiscadapter.cpp). This leads to an out-of-bounds read and potential information disclosure without extra privileges or user interaction. Public refere...

CVE-2024-29742

The CVE-2024-29742 issue is a local information-disclosure vulnerability in the Linux kernel component dvfs.c, specifically in apply_minlock_constraint, caused by a missing bounds check that enables an out-of-bounds read. Exploitation requires local access with no user interaction and could allow...

CVE-2024-32921

The CVE affects the lwis_fence.c component, specifically the function lwis_initialize_transaction_fences, where a missing bounds check can cause an out-of-bounds write. This leads to a possible local escalation of privilege with no additional execution privileges required and without user interac...

CVE-2024-47028

CVE-2024-47028 affects Google Pixel devices, tied to the ffu.c implementation: the function ffu_flash_pack may overflow an integer, causing an out-of-bounds read. This could enable local information disclosure with system privileges required; exploitation is reported to require no user interactio...

CVE-2024-47029

The vulnerability CVE-2024-47029 affects the TrustySharedMemoryManager::GetSharedMemory implementation in ondevice/trusty/trusty_shared_memory_manager.cc. The issue is an incorrect bounds check that can trigger an out-of-bounds read, causing local information disclosure without requiring extra pr...

CVE-2024-53833

CVE-2024-53833 is reported in the Android LWIS stack, specifically in the function prepare_response_locked within lwis_transaction.c . The vulnerability stems from improper input validation, enabling a possible out-of-bounds write. Impact described as local escalation of privilege with no additio...

CVE-2024-56185

CVE-2024-56185 involves a missing bounds check in ProtocolUnsolOnSSAdapter::GetServiceClass() within protocolcalladapter.cpp, causing an out-of-bounds read that can lead to local information disclosure. The impact is described as requiring baseband firmware compromise with no user interaction. Pu...

CVE-2018-9518

CVE-2018-9518 affects the Android/Linux kernel description in the connected Nessus/NASL entries. The flaw is in nfc_llcp_build_sdreq_tlv of llcp_commands.c, where a missing bounds check allows an out-of-bounds write. This could enable local escalation of privilege with SYSTEM execution privileges...

CVE-2021-0940

CVE-2021-0940 concerns the Android kernel with a vulnerability described as an out-of-bounds write due to improper locking. The issue could enable local escalation of privilege to System execution privileges without user interaction, affecting Android kernel components. Concrete exploit details, ...

CVE-2022-42543

CVE-2022-42543 affects Android kernel components (fdt_path_offset_namelen in fdt_ro.c). The weakness is an out-of-bounds read caused by an incorrect bounds check, enabling locally accessible information disclosure with potential system-level impact. Exploitation details are not provided in the su...

CVE-2023-21072

CVE-2023-21072 : The vulnerability affects the Android kernel in the function dhd_rtt.c::rtt_unpack_xtlv_cbfn, where a buffer overflow can cause an out-of-bounds write. This could enable local escalation of privilege to System level. Documents consistently describe the issue as a local exploit pa...

CVE-2023-21076

CVE-2023-21076 involves a possible out-of-bounds write due to a heap buffer overflow in the function createTransmitFollowupRequest within nan.cpp. The underlying issue is a heap buffer overflow that could enable a local escalation of privilege with System execution privileges required. Exploitati...

CVE-2023-21158

CVE-2023-21158 is an Android kernel issue in the encode function of miscdata.cpp where a heap buffer overflow can cause an out-of-bounds read. The described impact is local information disclosure with system privileges required (no user interaction needed). Public exploitation details are not pro...

CVE-2023-21220

Technical details about CVE-2023-21220 are not publicly provided in the supplied documents. Information about affected components, root cause, and fixes is not disclosed here. Monitor for updates.

CVE-2023-21224

CVE-2023-21224 affects the Android kernel, specifically the ss_ProcessReturnResultComponent function in ss_MmConManagement.c. The vulnerability is a heap-buffer-overflow–induced out-of-bounds read that could lead to remote information disclosure without extra privileges or user interaction. Publi...

CVE-2023-21399

CVE-2023-21399 affects Google Pixel devices (Pixel bulletin: GSC component) and is described as a logic-error–driven bypass of cryptographic guarantees that enables local privilege escalation with no user interaction. Impact: Elevation of Privilege, Local; exploitability is listed as high with lo...

CVE-2023-35645

CVE-2023-35645 is listed in Google's Pixel update bulletin under the Edgetpu component with a memory-corruption trigger caused by a race condition, yielding local privilege escalation (System level) without user interaction. The Pixel bulletin indicates this issue is addressed by updating to the ...

CVE-2023-35653

CVE-2023-35653 affects Google Pixel devices in the ImsService component. The issue is an information-disclosure via a permissions bypass that could allow access to location information; exploitation is feasible with local access and requires System-level privileges with no user interaction. The P...

CVE-2024-32919

CVE-2024-32919 affects the LWIS subsystem (lwis_fence.c: lwis_add_completion_fence) with a type confusion that enables local elevation of privilege. Exploitation requires no user interaction and would grant high confidentiality/integrity/availability impact as per the CVSS. Public sources in the ...