CVE-2019-1999

CVE-2019-1999 is evidenced in connected Nessus advisories for Unity Linux kernel updates (UTSA-2026-003839/004335/000386). The issue is in binder_alloc_free_page in binder_alloc.c, causing a possible double free due to improper locking. This can lead to local escalation of privilege in the kernel...

CVE-2024-44093

CVE-2024-44093 describes a memory corruption vulnerability in the function ppmp_unprotect_buf within drm/code/drm_fw.c. Exploitation could enable local privilege escalation without additional execution privileges or user interaction. The issue is referenced across multiple feeds (NVD, Red Hat, CV...

CVE-2020-0066

The CVE-2020-0066 entry describes a race-condition in the Android kernel netlink driver enabling a local out-of-bounds write, leading to local privilege escalation to SYSTEM. Exploit requires local access; user interaction is not needed. The issue is tied to the netlink path and affects Android k...

CVE-2021-0887

CVE-2021-0887 describes a leak of kernel heap content in PVRSRVBridgeHeapCfgHeapConfigName due to uninitialized data, enabling local information disclosure without extra privileges or user interaction. This affects Android environments utilizing PowerVR-GPU components and is reflected across mult...

CVE-2023-21218

CVE-2023-21218 : The vulnerability is in PMRChangeSparseMemOSMem of physmem_osmem_linux.c, where an incorrect bounds check allows an out-of-bounds write. This could enable local escalation of privilege in the Linux kernel without extra execution privileges or user interaction. Public sources in t...

CVE-2021-0947

CVE-2021-0947 involves a kernel information disclosure in Android's graphics stack. The method PVRSRVBridgeTLDiscoverStreams allocates a heap buffer for streams, fills it via TLServerDiscoverStreamsKM, then copies it to userspace. If TLServerDiscoverStreamsKM fails (e.g., due to invalid sizes), t...

CVE-2021-39723

CVE-2021-39723 affects Google Pixel devices and is listed in the Pixel March 2022 bulletin as a Critical RCE in the Modem component. Patch levels 2022-03-05 address issues in that bulletin. The provided documents do not include public exploit details or specific root-cause/affected kernel version...

CVE-2022-20386

CVE-2022-20386 is listed in Android security bulletin details as affecting Android with Unisoc components (Unisoc U-1903099*). Severity is High. The connected sources do not provide concrete root-cause, exploit details, affected product versions, or a remediation/patch version. The CVE appears wi...

CVE-2021-1050

CVE-2021-1050 affects the PowerVR kernel driver (MMU_UnmapPages). The root cause is a missing bounds check causing an out-of-bounds write, enabling local privilege escalation with no user interaction. Impact is High. The Android bulletin notes patch levels 2022-11-01/2022-11-05 or newer address t...

CVE-2021-39661

CVE-2021-39661 affects the PowerVR kernel driver on Android. In the function PMRLogicalOffsetToPhysicalOffset , a missing bounds check can cause an out-of-bounds write, leading to local escalation of privilege with no additional execution privileges or user interaction required. Exploitation stat...

CVE-2021-39710

CVE-2021-39710 is listed in the Pixel security bulletin as a Telephony-related Elevation of Privilege (EoP) vulnerability in the Android kernel, categorized as High impact. The CVE entry in the bulletin confirms the affected component (Kernel/Telephony) and assigns a High severity for Pixel devic...

CVE-2021-39731

CVE-2021-39731 concerns an out-of-bounds write in Android’s ProtocolStkProactiveCommandAdapter::Init (protocolstkadapter.cpp). The vulnerability arises from an incorrect bounds check in the Android kernel component, enabling a local elevation of privilege with System execution privileges, without...

CVE-2021-39735

CVE-2021-39735 involves the Android kernel component gasket_alloc_coherent_memory in gasket_page_table.c, where a race condition can cause memory corruption. The vulnerability enables local escalation of privilege with System execution privileges needed, and exploitation is not dependent on user ...

CVE-2022-20431

CVE-2022-20431 describes a local elevation of privilege in Android due to a missing authorization check in a system service. The issue affects Android devices (specific component not publicly named in the documents) and is exploited locally with high impact (confidentiality, integrity, and availa...

CVE-2024-23715

CVE-2024-23715: Out-of-bounds write in PMRWritePMPageList within pmr.c triggers local kernel privilege escalation with no user interaction. Multiple sources (NVD, Red Hat, CNVD, CN)** corroborate a kernel-level issue described as a logic error enabling LPE. Affected component is the kernel; remed...

CVE-2021-0467

CVE-2021-0467 affects Chromecast bootROM with an out-of-bounds write caused by an incorrect bounds check. This allows local escalation of privilege in the bootloader with physical USB access and no user interaction. The Android bulletin notes fixes at 2021-05-01/2021-05-05 patch levels; no exploi...

CVE-2021-0576

CVE-2021-0576 is described as an out-of-bounds write in the Android flv extractor caused by a missing bounds check, allowing local elevation of privilege with no user interaction. The issue affects Android’s flv extractor component; exploitation is local and could impact devices where the vulnera...

CVE-2021-0942

CVE-2021-0942 describes an ioctl-based path where an untrusted app can control the ui32PageIndex in sPA.uiAddr = page_to_phys(psOSPageArrayData->pagearray[ui32PageIndex]), leading to an out-of-bounds read (and plausibly an OOB write) in the Android kernel. Multiple sources confirm a high-sever...

CVE-2021-39657

CVE-2021-39657 concerns an out-of-bounds read in the Android kernel’s ufshcd_eh_device_reset_handler (ufshcd.c). The issue enables local information disclosure with System privileges required, and does not require user interaction to exploit. The provided connected documents reiterate the same de...

CVE-2022-20119

CVE-2022-20119 affects the Android display/graphics path (mali_gralloc_buffer.h, private_handle_t) where an uninitialized data path allows local information disclosure. The root cause is uninitialized data in the private_handle_t structure, enabling information leakage without extra execution pri...

CVE-2022-20121

CVE-2022-20121 describes an information-disclosure vulnerability in Android related to the USCCDMPlugin/USCCDMService. The root cause is a missing permission check in getNodeValue of USCCDMPlugin.java, enabling local disclosure of ICCID with no extra execution privileges and without user interact...

CVE-2024-23716

In CVE-2024-23716, a race condition in DevmemIntPFNotify within devicemem_server.c can trigger a use-after-free, enabling local privilege escalation in the kernel with no extra execution privileges or user interaction required. The linked Red Hat and Android bulletin data corroborate a kernel-lev...

CVE-2024-31336

The CVE-2024-31336 entry concerns PVRSRVBridgeRGXKickTA3D2 in server_rgxta3d_bridge.c, affecting the PowerVR-GPU component. The issue is described as an arbitrary code execution caused by improper input validation, enabling local kernel privilege escalation without extra privileges or user intera...

CVE-2021-39712

CVE-2021-39712 is an Elevation of Privilege issue in the Android kernel tied to a race-condition leading to a possible user-after-free. The connected Pixel bulletin and related records confirm this vulnerability affects the Android kernel (upstream kernel) and can enable local privilege escalatio...

CVE-2021-39720

CVE-2021-39720Concern: Affects Google Pixel devices in the Modem component; classified as Remote Code Execution (RCE) with Critical severity in the Pixel security bulletin. Root cause is documented as a modem-related vulnerability within the Android stack; no exploit details are provided in the c...

CVE-2021-39724

CVE-2021-39724 is an Android/kernel issue: in TuningProviderBase::GetTuningTreeSet there is an out-of-bounds read due to a missing bounds check. This can enable local information disclosure with system privileges required. The vulnerability affects the Android kernel via tuning_provider_base.cc a...

CVE-2024-23695

CVE-2024-23695 involves the Android/Linux kernel’s CacheOpPMRExec in cache_km.c, with a reported out-of-bounds write caused by an integer overflow. This can lead to local elevation of privilege with no extra execution privileges or user interaction required. The available connected documents do n...

CVE-2024-29757

Google Pixel devices are affected by a high-severity Elevation of Privilege (EoP) vulnerability (CVE-2024-29757 ) within the Companion subcomponent. The root cause is a permission bypass resulting from Debug certificates being allowlisted, which could allow an attacker to escalate privileges loca...

CVE-2021-0578

CVE-2021-0578 affects the Android WiFi driver (MediaTek components) with an out-of-bounds read caused by a missing bounds check. This could allow remote information disclosure by a nearby attacker without user interaction or additional privileges. Documents do not specify an affected version, exp...

CVE-2021-39737

CVE-2021-39737 is listed in the Pixel security bulletin as a Modem component vulnerability (RCE) affecting Google Pixel devices. The entry ties the issue to the Pixel modem with a critical impact profile (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The public documentation does not specify t...

CVE-2023-48421

CVE-2023-48421 affects Google Pixel GPU driver code: gpu_pixel_handle_buffer_liveness_update_ioctl in private/google-modules/gpu/mali_kbase/platform/pixel/pixel_gpu_slc.c. Root cause is an out-of-bounds write due to improper input validation, enabling local privilege escalation with no extra priv...

CVE-2024-27227

CVE-2024-27227 affects Google Pixel devices via the modem component, with remote code execution reported as the impact. The Pixel security bulletin lists this CVE under the Modem subcomponent with a High severity and notes that applying patch level 2024-03-05 or later mitigates issues described i...

CVE-2021-39725

CVE-2021-39725 affects the Android kernel component gasket_page_table.c, specifically the function gasket_free_coherent_memory_all. The issue is memory corruption caused by a double free, enabling local escalation of privilege with System-level execution privileges required; exploitation is descr...

CVE-2021-39733

CVE-2021-39733 affects the Android kernel audio path (audiometrics.c) via amcs_cdev_unlocked_ioctl. The vulnerability is a possible out-of-bounds write caused by improper input validation, which could enable local elevation of privilege to SYSTEM if exploited. Exploitation is described as local w...

CVE-2022-20391

CVE-2022-20391 is listed in the Android 2022-09-01 bulletin under Unisoc components with a High severity. The provided documents do not include explicit root-cause, exploit details, or affected Android versions beyond the bulletin’s context. remediation guidance, where provided, is to apply the 2...

CVE-2023-21216

CVE-2023-21216 affects the Linux kernel memory path (PMRChangeSparseMemOSMem in physmem_osmem_linux.c) where a use-after-free can cause arbitrary code execution, enabling local escalation of privilege with no additional privileges and no user interaction. The NVD entry rates this as CRITICAL (CVS...

CVE-2024-27218

CVE-2024-27218 describes an out-of-bounds read in update_freq_data (TBD module), enabling local information disclosure without extra privileges and with no user interaction. Connected sources consistently cite a missing bounds check as the root cause and local disclosure as the impact. The Androi...

CVE-2021-0573

Summary: CVE-2021-0573 affects the asf extractor on Android (notably MediaTek components). The root cause is an out-of-bounds write due to a missing bounds check, enabling local escalation of privilege with no user interaction. Impact (as stated): local privilege escalation with partial confident...

CVE-2021-0582

CVE-2021-0582 is an information-disclosure vulnerability in the Android Wi‑Fi driver caused by a missing bounds check that enables a remote attacker in adjacent network range to read memory without executing code or requiring user interaction. Impact is confidentiality loss (high per CVSS‑3.1) wi...

CVE-2022-20390

Technical details about CVE-2022-20390 are not publicly available in the provided documents. Monitor the Android Bulletin and vendor advisories for updates and fixes.

CVE-2023-48423

CVE-2023-48423 : The vulnerability is an out-of-bounds write in the function dhcp4_SetPDNAddress of dhcp4_Main.c caused by a missing bounds check. This could enable remote code execution with no additional privileges and without user interaction. Public documents (NVD, OSV) reiterate the same des...

CVE-2018-9385

CVE-2018-9385 affects the Linux/Android kernel: in driver_override_store of bus.c there is an out-of-bounds write due to an incorrect bounds check, enabling local privilege escalation with SYSTEM privileges. Exploitation reportedly does not require user interaction. Connected advisories (Unity Li...

CVE-2020-0251

CVE-2020-0251 : An out-of-bounds read due to an incorrect bounds check in the Android Multimedia Processing Driver (Android SoC). Per the CVE entry, it is rated HIGH (CVSS v3.1 base 7.5). Connected documents corroborate the component as the Multimedia Processing Driver in Android; no exploitation...

CVE-2020-0252

CVE-2020-0252 is a memory-corruption (use-after-free) issue affecting the MediaTek Multimedia Processing Driver in Google Android. The Red Hat/Red Hat-derived and CVE catalogs classify it as an Elevation of Privilege (High) vulnerability. The Android security bulletin for 2020-08-01/08-05 lists M...

CVE-2021-0324

CVE-2021-0324 is associated with Android/Unisoc components in the 2021 May Android bulletin. Sources catalog it under Unisoc Framework with High severity (per patch-level details), affecting Android devices via the Android SoC/Unisoc stack. The connected records do not provide concrete technical ...

CVE-2021-0580

CVE-2021-0580 pertains to a vulnerability in the Android WiFi driver (MediaTek component) where a missing bounds check enables an out-of-bounds read, potentially allowing remote information disclosure to a proximal attacker without extra privileges or user interaction. The issue is described as a...

CVE-2021-0891

CVE-2021-0891 affects the PowerVR-GPU driver in Android. An unprivileged app can trigger the driver to return uninitialized heap memory, enabling information disclosure. Exploitation is possible without privileges or user interaction over network. The issue is mapped in Android’s 2022-08-01/08-05...

CVE-2021-0938

CVE-2021-0938 is described as a by-design bypass in memzero_explicit of compiler-clang.h, enabling a local information disclosure due to uninitialized data in the kernel/Android context. The issue is exploitable with local access and does not require user interaction, per the description. The Con...

CVE-2021-39716

CVE-2021-39716 is present in multiple feeds. The Pixel Update Bulletin categorizes it under Modem with type ID and Moderate severity, indicating a Modem-related issue in Pixel devices; remediation is via Google’s 2022-03-05 patch level. However, the NVD entry lists the affected component as Andro...

CVE-2021-39722

CVE-2021-39722 affects ProtocolStkProactiveCommandAdapter::Init in protocolstkadapter.cpp, with an out-of-bounds read caused by an incorrect bounds check. This could allow local information disclosure and requires system privileges, with no user interaction needed. Connected sources (OSV entry) c...