CVE-2024-47033

CVE-2024-47033 describes a potential memory corruption in the lwis allocator by a use-after-free in lwis_allocator_free (lwis_allocator.c). The weakness can lead to local escalation of privilege with no additional execution privileges required and without user interaction. Publicly available deta...

CVE-2024-53834

CVE-2024-53834 affects Google Android’s sms_Utilities.c, specifically the function sms_DisplayHexDumpOfPrivacyBuffer. The vulnerability is an out-of-bounds read caused by an incorrect bounds check, leading to remote information disclosure without extra privileges or user interaction. Public refer...

CVE-2024-56187

CVE-2024-56187 involves a logic error in Google Pixel’s ppcfw_deny_sec_dram_access (ppcfw.c) that allows an arbitrary read of TEE memory, enabling local information disclosure with System privileges and no user interaction required. Affected: Pixel devices; root cause: logic flaw in memory access...

CVE-2018-6268

CVE-2018-6268 affects NVIDIA Tegra libnvmmlite_video.so, where a use-after-free can cause DoS or privilege escalation. Connected NVIDIA bulletins tie this to Jetson TX1/TX2 Linux for Tegra (L4T) and list R28.3 as the updated release to address multiple related flaws, including 2018-6268. Affected...

CVE-2018-9386

CVE-2018-9386 concerns the HTC reboot_block driver. The reboot_block_command may trigger a stack buffer overflow due to a missing bounds check, enabling local privilege escalation to SYSTEM with no user interaction required. Connected sources (NVD, Red Hat, CVE lists) confirm the issue descriptio...

CVE-2021-1042

CVE-2021-1042 affects the Android kernel component dsi_panel.c (function dsi_panel_debugfs_read_cmdset). It describes a use-after-free that can disclose freed kernel heap memory, enabling local information disclosure with system privileges (no user interaction required). Connected sources (NVD, R...

CVE-2021-39643

CVE-2021-39643 affects the Android kernel component in ic_startRetrieveEntryValue inside acropora/app/identity/ic.c, where a missing validation of a return value can bypass defense-in-depth and enable local privilege escalation to SYSTEM. Exploitation requires local access; no user interaction is...

CVE-2021-39649

CVE-2021-39649 affects the Android kernel’s regmap.c, specifically regmap_exit, where improper locking can cause a use-after-free. This enables local escalation of privilege with system execution privileges required and no user interaction. Exploitation status is not provided in the sources; reme...

CVE-2022-42515

CVE-2022-42515: In MiscService::DoOemSetRtpPktlossThreshold (miscservice.cpp), a missing bounds check enables an out-of-bounds read. Impact: local information disclosure with system privileges; exploitation requires local access and no user interaction. Affected: Android kernel components (rild_e...

CVE-2024-27231

The provided connected documents confirm a concrete vulnerability: in function tmu_get_tr_stats() of tmu.c there is a missing bounds check causing an out-of-bounds read, enabling local information disclosure with no additional privileges or user interaction required. Affected software/versions ar...

CVE-2024-44099

The CVE-2024-44099 entry describes a local information-disclosure vulnerability caused by an insecure default value that enables a local bypass of user interaction with no privileges. It is associated with Google Pixel devices (notably listed under the Pixel update bulletin) and is categorized as...

CVE-2024-44101

CVE-2024-44101 is a DoS vulnerability affecting Google Pixel devices’ Modem, caused by a Null Pointer Dereference from improper input validation. Exploitation requires no user interaction and is modeled as network-accessible with high impact (remote DoS). Public details across sources confirm the...

CVE-2024-47013

CVE-2024-47013 is described across multiple sources as a flaw in the PMU firmware path (pmucal_rae_handle_seq_int in flexpmu_cal_rae.c) where uninitialized data allows an arbitrary write, enabling local privilege escalation with no user interaction. Documents consistently note the issue affects P...

CVE-2018-9515

CVE-2018-9515 is a kernel vulnerability affecting the Android kernel sdcardfs code (inode.c) where memory corruption can occur due to improper locking, enabling local privilege escalation without user interaction. The issue is categorized as a high-severity Elevation of Privilege (EoP) in the 201...

CVE-2021-0939

CVE-2021-0939 affects the Android kernel, description states: in set_default_passthru_cfg of passthru.c there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with system privileges required; user interaction not needed. The provided ...

CVE-2021-39645

CVE-2021-39645 is listed in the Google Pixel security bulletin as an Elevation of Privilege (EoP) vulnerability affecting the Bootloader. The CVE is categorized under Pixel issues with High severity. The Pixel bulletin notes patches are included in updates at the 2021-12-05 security patch level f...

CVE-2021-39651

Technical details are not publicly available in the provided documents for CVE-2021-39651; the connected sources describe a placeholder TBD vulnerability without concrete affected products or fixes. Monitor for updates as information remains unavailable.

CVE-2022-20561

CVE-2022-20561 affects the Android kernel in aud_hal_tunnel.c, where a use-after-free can cause memory corruption. The impact is local elevation of privilege with no extra execution privileges required and no user interaction needed. Affected component: Android kernel (aud_hal_tunnel.c). Root cau...

CVE-2023-21073

CVE-2023-21073 affects the Android kernel component where the function rtt_unpack_xtlv_cbfn in dhd_rtt.c is vulnerable. The issue is a possible out-of-bounds write caused by a buffer overflow, which could enable local escalation of privilege with System execution privileges required. User interac...

CVE-2023-21147

CVE-2023-21147 (Android kernel) involves a use-after-free in lwis_i2c_device_disable within lwis_device_i2c.c. The underlying logic error can lead to local elevation of privilege with no extra execution privileges required, and exploitation is described as local with no user interaction. Multiple...

CVE-2024-47019

CVE-2024-47019 affects Google Pixel devices via a buffer/read bounds issue in ProtocolEmbmsSaiListAdapter::Init() inside protocolembmsadapter.cpp. The vulnerability is an out-of-bounds read caused by a missing bounds check, potentially leading to local information disclosure and baseband firmware...

CVE-2017-13292

CVE-2017-13292 is a remote code execution vulnerability in the Broadcom bcmdhd Wi‑Fi driver affecting Android; root cause is an out-of-bounds write in wl_get_assoc_ies within wl_cfg80211.c due to an incorrect bounds check. This could allow an attacker to execute arbitrary code in the context of a...

CVE-2019-2214

CVE-2019-2214 affects the Linux/Android kernel binder subsystem. In binder_transaction of binder.c, there is an out-of-bounds write due to a missing bounds check, allowing local escalation of privilege without additional execution privileges or user interaction. Affected software appears in Andro...

CVE-2021-1044

CVE-2021-1044 affects the Android kernel component in the function eicOpsDecryptAes128Gcm of acropora/app/identity/identity_support.c , where a missing bounds check enables an out-of-bounds write. This can lead to local elevation of privilege with no extra execution privileges or user interaction...

CVE-2023-20925

CVE-2023-20925 affects the Android kernel, specifically the use-after-free in the PowerSessionManager.cpp function setUclampMinLocked. This memory corruption can lead to local escalation of privilege without extra execution privileges and requires local access, with no user interaction needed. Th...

CVE-2023-21043

CVE-2023-21043 affects Android kernel components with memory corruption via a use-after-free, enabling local escalation to System privileges. Exploitation details, affected versions, and patch status are not provided in the connected documents; the description remains TBD. If pursuing remediation...

CVE-2023-21079

CVE-2023-21079 affects the Android kernel component related to the dhd_rtt.c function, specifically in the routine named rtt_unpack_xtlv_cbfn . The issue is a heap buffer overflow that can cause an out-of-bounds write. The published descriptions consistently warn of local escalation of privilege ...

CVE-2023-35694

CVE-2023-35694 corresponds to an out-of-bounds read in DMPixelLogger_ProcessDmCommand within DMPixelLogger.cpp. The issue allows remote information disclosure without extra execution privileges and does not require user interaction. Documents consistently describe a bounds-check omission as the r...

CVE-2024-47012

CVE-2024-47012 affects Google Pixel devices via the mm_GetMobileIdIndexForNsUpdate path in mm_GmmPduCodec.c, where an incorrect bounds check can cause an out-of-bounds write. This is described as enabling local escalation of privilege with no extra execution privileges or user interaction require...

CVE-2024-56184

CVE-2024-56184 describes a vulnerability in static long dev_send of tipc_dev_ql where an incorrect bounds check leads to an out-of-bounds read. This can cause local information disclosure without requiring privileges or user interaction. The vulnerability is documented across multiple sources (in...

CVE-2024-32923

CVE-2024-32923 concerns Google Pixel devices. The issue is a logic error in the Modem component that can cause a denial of service. It can be triggered remotely with no user interaction and requires no additional privileges (attack vector: LOCAL; impact: Availability. Severity: High per Pixel bul...

CVE-2024-47021

CVE-2024-47021 affects Google Pixel devices and stems from a missing bounds check in sms_ExtractCbLanguage within sms_CellBroadcast.c. The vulnerability enables a potential out-of-bounds read, leading to remote information disclosure without requiring user interaction or additional privileges. Th...

CVE-2017-8259

CVE-2017-8259 is a buffer overflow in Qualcomm CAF Android/Linux kernel service locator. Root cause: a buffer size variable is not used to indicate the actual buffer size. Documented impact is high severity with local code execution possibilities, requiring user interaction (CVSS3: HIGH, LOCAL, U...

CVE-2018-6267

CVE-2018-6267 affects NVIDIA’s Tegra OpenMax driver (libnvomx): a missing/incorrect validation of input can affect control or data flow, potentially enabling DoS or elevation of privilege. Public NVIDIA bulletins confirm this CVE is addressed as part of Jetson TX1/TX2 L4T updates; remediation inv...

CVE-2018-9395

The CVE-2018-9395 issue affects the Mediatek WLAN driver (mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config) in drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_vendor.c. It describes a possible out-of-bounds write due to a missing bounds check, enabling local...

CVE-2021-1045

CVE-2021-1045 is acknowledged in multiple feeds as affecting the Android kernel component Titan‑M used in Google Pixel devices. The Pixel Update Bulletin groups CVE-2021-1045 under Pixel → Titan‑M with severity High, indicating a kernel‑level issue likely resolved in the 2021‑11‑05 patch level. T...

CVE-2023-21153

CVE-2023-21153 affects Android kernel via Do_AIMS_SET_CALL_WAITING in imsservice.cpp, causing an out-of-bounds read due to a missing bounds check. This can allow local escalation of privilege to System level without user interaction. The issue impacts Android kernel components and is associated w...

CVE-2023-21222

CVE-2023-21222 : In the Android kernel, the vulnerability is in the function that parses device tree data (storage.c: load_dt_data). A missing bounds check can trigger an out-of-bounds write, enabling local escalation of privilege with System execution privileges required. User interaction is not...

CVE-2018-9407

CVE-2018-9407 : In emmc_rpmb_ioctl of emmc_rpmb.c there is a Missing Bounds Check, leading to potential information disclosure of kernel data. Connected sources confirm this issue on Google Pixel devices and reference the Android Pixel/Nexus security bulletin, which states that patch levels of 20...

CVE-2021-39638

CVE-2021-39638 relates to the Android kernel: in the function periodic_io_work_func of lwis_periodic_io.c there is an out-of-bounds write caused by a use-after-free. This leads to local elevation of privilege with System execution privileges required and no user interaction needed. The descriptio...

CVE-2021-39640

CVE-2021-39640 involves an out-of-bounds write in the Android kernel's dwc3 gadget ep0 queue function (__dwc3_gadget_ep0_queue) caused by improper locking. This vulnerability enables local privilege escalation with no user interaction, as documented across multiple sources (NVD, Red Hat, CNVD, OS...

CVE-2021-39646

CVE-2021-39646 is an information-disclosure issue affecting the Android kernel Bootloader, listed under the Pixel vulnerability bulletin with type ID and moderate severity for that component. Public details in the connected records indicate an information-disclosure impact (confidentiality) with ...

CVE-2021-39647

CVE-2021-39647 concerns the Samsung Exynos 9845-based GS101/boot path where in mon_smc_load_sp of gs101-sc/plat/samsung/exynos/soc/exynos9845/smc_booting.S there is a likely reinitialization of the Trusted Execution Environment due to improper locking. This can enable local information disclosure...

CVE-2023-20923

In CVE-2023-20923, the issue affects ShannonRcs content providers in Android kernel space. The root cause is a permissions bypass in exported content providers that can grant access to protected content providers without additional execution privileges. The practical impact is local information d...

CVE-2023-21152

Summary (CVE-2023-21152) : The vulnerability is an out-of-bounds read in FaceStatsAnalyzer::InterpolateWeightList within face_stats_analyzer.cc on Android kernel. The root cause is a missing bounds check in the weight interpolation logic, enabling a local information disclosure with user-privileg...

CVE-2021-39650

CVE-2021-39650: In the Android kernel, an out-of-bounds write due to a missing bounds check enables local escalation to System privileges without user interaction. This is tied to Android kernel code and is documented with a MEDIUM base CVSS and LOCAL access. The provided connected documents conf...

CVE-2023-21151

CVE-2023-21151 affects the Google BMS kernel module in the Android kernel (Pixel devices). The issue is a heap buffer overflow that can cause an out-of-bounds write, enabling local escalation of privileges to System level. Exploitation requires local access; user interaction is not needed. Public...

CVE-2023-21161

CVE-2023-21161 affects the Android kernel, caused by an out-of-bounds write in the Parse function of simdata.cpp due to a missing bounds check. This can lead to local escalation of privilege with System execution privileges required, and exploitation does not require user interaction. Several con...

CVE-2026-0164

CVE-2026-0164 affects Modem with an out-of-bounds write due to a missing bounds check, enabling remote code execution without extra privileges or user interaction. The vulnerability is classified as RCE with high impact on confidentiality, integrity, and availability. Public sources (NVD/ENISA/NV...

CVE-2017-6284

CVE-2017-6284 describes a vulnerability in NVIDIA Security Engine’s DRBG where initialization/storage of sensitive data is flawed and encryption is weakened, potentially leading to information disclosure. NVIDIA’s NVIDIA Jetson TX1/TX2 Linux for Tegra updates (R28.3) address multiple issues inclu...