CVE-2020-0431

CVE-2020-0431 refers to an out-of-bounds write in the kernel’s keyboard.c function kbd_keycode, caused by a missing bounds check. The vulnerability could enable local privilege escalation without user interaction. Public connected advisories ( MiracleLinux AXSA:2021-2148:12 and Unity Linux UTSA-2...

CVE-2018-5848

CVE-2018-5848 concerns the Linux kernel function wmi_set_ie(), where unsigned integer overflow in length validation can lead to a buffer overflow when processing the ie_len argument. The description across connected Nessus entries ties this to memory corruption and potential system crash, affecti...

CVE-2021-39685

CVE-2021-39685 affects the Linux kernel USB Gadget subsystem, with an out-of-bounds write caused by an incorrect flag check in several gadget setups. The issue allows local privilege escalation (no user interaction required) and can lead to information disclosure or DoS as described in upstream n...

CVE-2025-36911

CVE-2025-36911 (WhisperPair) is a vulnerability in Google Fast Pair where devices may accept Key-Based Pairing requests even when not in pairing mode, enabling unauthorized pairing without user interaction. Connected tooling demonstrates practical exploitation: an attacker can obtain a BR/EDR add...

CVE-2019-9276

CVE-2019-9276 affects the Android kernel’s synaptics_dsx_htc touchscreen driver. It describes a possible out-of-bounds write caused by a use-after-free, enabling local escalation of privilege to SYSTEM without user interaction. Remedies are not detailed in this document, but the Pixel update bull...

CVE-2019-2101

CVE-2019-2101 affects the Android kernel as described in the connected advisories. The vulnerability is caused by an out-of-bounds read in the function uvc_parse_standard_control within uvc_driver.c , resulting from improper input validation. This can lead to local information disclosure without ...

CVE-2021-0342

The CVE-2021-0342 issue affects the Android kernel, where a use-after-free in tun_get_user (tun.c) can cause memory corruption, enabling local privilege escalation with kernel/system privileges; exploitation requires no user interaction. No patch/version details are provided in the connected docu...

CVE-2021-39698

CVE-2021-39698 affects the Android kernel. In aio_poll_complete_work() in aio.c there is a use-after-free that can corrupt memory, potentially enabling local privilege escalation with no extra execution privileges required and no user interaction. The advisory notes the impact as local escalation...

CVE-2019-9245

CVE-2019-9245 details (supported by connected docs): In the Android kernel, the f2fs driver contains a missing bounds check leading to a possible out-of-bounds read. This can cause local information disclosure and requires System privileges for exploitation, with no user interaction needed. The N...

CVE-2022-20210

CVE-2022-20210 describes a bug in the modem parsing NAS messages used by UE and EMM in Android, where a malformed NAS message could cause remote crash leading to DoS or RCE. Connected sources confirm this is a vulnerability in the Android modem stack with critical impact (network attack, no user ...

CVE-2018-9363

CVE-2018-9363 is a Linux-kernel vulnerability in the HIDP Bluetooth driver: hidp_process_report can overflow a buffer due to incorrect length handling, potentially causing memory corruption and DoS, with possible remote code execution. Public documents across Debian/Ubuntu/CentOS‑related advisori...

CVE-2019-9274

CVE-2019-9274 affects the Android kernel MNH driver. The issue is an out-of-bounds write caused by a missing bounds check, enabling local privilege escalation to System with no user interaction required. Confirmed details across multiple sources (NVD entry and vendor advisories) describe the MNH ...

CVE-2017-0861

CVE-2017-0861 is a use-after-free in the Linux kernel’s ALSA subsystem (snd_pcm_info). The fault is in the PCM core and can lead to privilege escalation via local access, as described in multiple advisories (e.g., CentOS/RH patches) and Debian security updates. If exploited, a local attacker may ...

CVE-2017-13305

CVE-2017-13305 : A vulnerability described as an information disclosure in the Upstream Linux kernel encrypted-keys, with affected product scope as Android kernels. The Initial CVE text notes Android kernel as the impacted component and Android ID A-70526974, describing a local information disclo...

CVE-2019-9273

CVE-2019-9273 is a local elevation-of-privilege vulnerability in the Android kernel’s synaptics_dsx_htc touchscreen driver, caused by an improper locking leading to a use-after-free. The issue could allow a privileged attacker to gain System execution rights without user interaction. Public detai...

CVE-2019-2024

CVE-2019-2024 affects the Linux kernel’s em28xx-dvb code (em28xx_unregister_dvb) where a use-after-free can enable local privilege escalation with no user interaction. The connected Nessus entries reference Upstream kernel fixes and Unity/Linux advisories, indicating a patch exists upstream; down...

CVE-2019-9345

CVE-2019-9345 affects the Android kernel (sdcardfs) and describes a local elevation of privilege due to shared mapping of OBB files that can breach profile data separation. The vulnerability is classified as Elevation of Privilege (High) in the Kernel component per Pixel update bulletin, with loc...

CVE-2021-0941

CVE-2021-0941 is a Linux kernel vulnerability reported as an out-of-bounds read in bpf_skb_change_head() within filter.c caused by a use-after-free. It enables local privilege escalation to SYSTEM with no user interaction. Exploitability is LOCAL; impact includes confidentiality, integrity, and a...

CVE-2021-39713

Technical details about CVE-2021-39713 are not provided in the provided documents; only high-level references (Android kernel and upstream kernel) are present. Monitor for updates.

CVE-2019-9441

CVE-2019-9441 describes an elevation-of-privilege vulnerability in the Android kernel MNH driver. The issue is an out-of-bounds write caused by improper input validation, which could allow a local attacker to gain System-level execution privileges without user interaction. Public documentation in...

CVE-2019-9446

CVE-2019-9446 affects the Android kernel FingerTipS touchscreen driver. The issue is an out-of-bounds write caused by improper input validation, enabling a local escalation of privilege with System execution privileges required. Exploitation does not require user interaction. The connected docume...

CVE-2022-20368

CVE-2022-20368 is confirmed in connected advisories as a slab-out-of-bounds access in packet_recvmsg() within the Linux kernel networking stack. The linked documents (e.g., ALSA-2022 kernel advisories for Linux kernels used in Debian/OpenSUSE/OpenSUSE/Linux distributions) explicitly reference thi...

CVE-2019-9436

CVE-2019-9436 affects the LG Bootloader component in Android (per Pixel Update Bulletin). The issue is described as a secure boot bypass enabling local elevation of privilege (EoP) with SYSTEM privileges, with exploitation described as requiring user interaction. The vulnerability is listed as Ty...

CVE-2017-13166

CVE-2017-13166 describes an elevation of privilege in the kernel v4l2 video driver, affecting the Android kernel. The underlying issue enables a local attacker with minimal privileges to escalate to higher privileges by exploiting the v4l2 component, as reflected in vulnerabilities tracked across...

CVE-2017-13215

CVE-2017-13215 describes an elevation-of-privilege in the Upstream Linux kernel skcipher_recvmsg path. The vulnerability, tied to the skcipherRecvMsg function, enables local privilege escalation when exploited via the Android kernel (Android kernel reference). Exploitation status is not detailed ...

CVE-2019-9452

CVE-2019-9452 affects the Android kernel, specifically the SEC_TS touch driver. The issue is an out-of-bounds read caused by a missing bounds check, leading to local information disclosure with System execution privileges required. Exploitation does not require user interaction. The provided conn...

CVE-2019-9248

The CVE-2019-9248 entry concerns the Android kernel FingerTipS touchscreen driver, where a missing bounds check enables a local out-of-bounds write that can escalate privileges to System with no user interaction. Affected component: FingerTipS touchscreen driver in the Android kernel. Root cause:...

CVE-2019-9270

Technical details for CVE-2019-9270 are not publicly provided in the supplied Connected documents. The initial description contains only a high‑level summary. Monitor for updates from vendors/security advisories; no additional exploit, affected products, or remediation details are provided here.

CVE-2022-20433

CVE-2022-20433 is reported with a missing authorization check in a system service, leading to Local Elevation of Privilege on affected Android components. Connected sources link this CVE to UNISOC Telephony (A-242221901) and Android SoC contexts, describing the root cause as a missing permission ...

CVE-2020-0067

In CVE-2020-0067, the Linux kernel’s F2FS implementation (f2fs_xattr_generic_list in xattr.c) is vulnerable to an out-of-bounds read caused by a missing bounds check. This could enable local information disclosure and requires System privileges, with no user interaction needed for exploitation. T...

CVE-2022-20132

CVE-2022-20132 : The Android/Linux kernel contains an out-of-bounds read in the HID path (lg_probe and related hid-lg.c functions) due to improper input validation. This could allow local information disclosure when a malicious USB HID device is plugged in, with no privileges required and no user...

CVE-2022-20421

CVE-2022-20421 : In the Android kernel, the memory corruption arises from a use-after-free in binder_inc_ref_for_node() inside binder.c, enabling a possible local escalation of privilege with no extra execution privileges and without user interaction. The affected software is the Android kernel; ...

CVE-2021-39686

The CVE-2021-39686 entry concerns a race condition in the Android binder driver (binder.c) that can cause incorrect domain checks in SELinux, enabling local privilege escalation without extra privileges. This is tied to the Android kernel; exploitation is stated as local with no user interaction....

CVE-2022-20186

CVE-2022-20186 affects the Mali kernel driver (mali_kbase_mem_linux.c) in Android, where improper input validation in kbase_mem_alias enables arbitrary kernel code execution and local privilege escalation with no user interaction. Public details come from NVD and the Pixel bulletin; exploitation ...

CVE-2019-9444

CVE-2019-9444 affects the Android kernel’s sync debugfs driver, where a kernel pointer leak occurs due to using printf with %p. This leads to potential local information disclosure with system privileges required for exploitation. The vulnerability can be triggered locally, and user interaction i...

CVE-2020-27068

CVE-2020-27068 is an Android kernel issue that also surfaces in upstream Linux kernel code. The Connected documents confirm concrete exposure in Linux-based environments: Unity Linux advisories UTSA-2026-004302/004038/001442 reference this CVE alongside kernel fixes for Unity Linux 20.1060e/20.10...

CVE-2018-9517

CVE-2018-9517 pertains to the Linux kernel vulnerability described as a use-after-free in pppol2tp_connect, leading to memory corruption and local privilege escalation with SYSTEM privileges required on Android kernels. The connected Nessus entries (Unity Linux UTSA advisories and related plugins...

CVE-2018-9516

CVE-2018-9516 affects the Linux kernel HID subsystem: in hid_debug_events_read() of drivers/hid/hid-debug.c there is a possible out-of-bounds write due to missing bounds checks. This can enable local privilege escalation with system-level rights; no user interaction is required. The vulnerability...

CVE-2022-20422

CVE-2022-20422 is a race-condition memory corruption issue in armv8_deprecated.c (emulation_proc_handler) of the Linux kernel used by Android. It allows local privilege escalation without extra privileges or user interaction, via memory corruption. Connected documents corroborate the same descrip...

CVE-2022-20369

CVE-2022-20369 : In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out-of-bounds write due to improper input validation, leading to local escalation of privileges with System execution privileges needed. User interaction is not required. Connected Astra Linux bulletin reiterates this de...

CVE-2019-9443

CVE-2019-9443 affects the Android kernel VL53L0 driver. The issue is an out-of-bounds write caused by a permissions bypass in the set_fs path, enabling local elevation of privilege without user interaction. Public exploitation details are not provided in the available documents. The vulnerability...

CVE-2020-6616

CVE-2020-6616 involves Broadcom BCM4361 Bluetooth RNG: a low-entropy PRNG is used where a Hardware RNG should be, enabling spoofing risks. Publicly documented impact references include Apple’s iOS 13.5/iPadOS 13.5 notes, which list CVE-2020-6616 under Bluetooth with a low-entropy PRNG issue, affe...

CVE-2021-39801

CVE-2021-39801 affects the Android kernel ion subsystem (ion-ioctl.c). The vulnerability is a use-after-free caused by improper locking in ion_ioctl, enabling local escalation of privilege with no additional privileges or user interaction required. Exploitation details are not provided beyond tho...

CVE-2023-21106

CVE-2023-21106 affects the Android kernel (Adreno GPU DRM driver). The issue is in the function adreno_set_param in adreno_gpu.c, where a double free can cause memory corruption, enabling local privilege escalation with no user interaction required.

CVE-2022-20409

CVE-2022-20409 : The vulnerability exists in the Linux kernel’s io_uring.c, specifically in io_identity_cow, where a use-after-free can corrupt memory and enable local privilege escalation. The Android/Linux kernel context is affected (Android kernel and EulerOS advisories reference this CVE). Ex...

CVE-2019-9451

CVE-2019-9451 affects the Android kernel touchscreen driver. The flaw is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with System execution privileges. Exploitation is not dependent on user interaction. The available documents do not specify a pa...

CVE-2019-9461

CVE-2019-9461 affects the Android kernel VPN routing component. The issue enables a potential information disclosure by an adjacent-network attacker, with no additional execution privileges and no user interaction required. The vulnerability is listed under the Pixel/Android 2019-09-01 bulletin w...

CVE-2024-44092

CVE-2024-44092 describes a missing LCS signing enforcement caused by test/debugging code left in a production build, potentially enabling local privilege escalation without user interaction. Public materials in this set confirm impact on Google Pixel/Android components, with references in the Pix...

CVE-2019-9271

The CVE-2019-9271 issue is a race condition in the Android kernel MNH driver caused by insufficient locking, leading to a use-after-free and potential privilege escalation to System level. Affected component: MNH driver in Android kernel. Impact: elevation of privilege with partial/hardening impl...

CVE-2020-0009

CVE-2020-0009 affects the Android kernel ashmem.c (calc_vm_may_flags): an insecure permissions bypass can allow an arbitrary write to shared memory, enabling local privilege escalation by corrupting inter-process memory. Exploitation is possible without user interaction, and no additional executi...