CVE-2022-20385

CVE-2022-20385 affects Android and is tied to a nla_parse path that does not validate para length. Userspace can influence nla_type via maxtype (GSCAN_MAX) and trigger OOB access to the policy[type] array. This is described across multiple sources as a kernel/Android issue with potential for loca...

CVE-2022-20386

CVE-2022-20386 is listed in Android security bulletin details as affecting Android with Unisoc components (Unisoc U-1903099*). Severity is High. The connected sources do not provide concrete root-cause, exploit details, affected product versions, or a remediation/patch version. The CVE appears wi...

CVE-2024-23695

CVE-2024-23695 involves the Android/Linux kernel’s CacheOpPMRExec in cache_km.c, with a reported out-of-bounds write caused by an integer overflow. This can lead to local elevation of privilege with no extra execution privileges or user interaction required. The available connected documents do n...

CVE-2018-9384

CVE-2018-9384 is documented in the Pixel/Android security context as a kernel‑level issue (Kernel components → Upstream kernel) that could enable bypassing KASLR, potentially allowing local information disclosure with SYSTEM privileges. The description consistently notes a “unusual root cause” an...

CVE-2021-0942

CVE-2021-0942 describes an ioctl-based path where an untrusted app can control the ui32PageIndex in sPA.uiAddr = page_to_phys(psOSPageArrayData->pagearray[ui32PageIndex]), leading to an out-of-bounds read (and plausibly an OOB write) in the Android kernel. Multiple sources confirm a high-sever...

CVE-2021-1050

CVE-2021-1050 affects the PowerVR kernel driver (MMU_UnmapPages). The root cause is a missing bounds check causing an out-of-bounds write, enabling local privilege escalation with no user interaction. Impact is High. The Android bulletin notes patch levels 2022-11-01/2022-11-05 or newer address t...

CVE-2021-39661

CVE-2021-39661 affects the PowerVR kernel driver on Android. In the function PMRLogicalOffsetToPhysicalOffset , a missing bounds check can cause an out-of-bounds write, leading to local escalation of privilege with no additional execution privileges or user interaction required. Exploitation stat...

CVE-2021-39710

CVE-2021-39710 is listed in the Pixel security bulletin as a Telephony-related Elevation of Privilege (EoP) vulnerability in the Android kernel, categorized as High impact. The CVE entry in the bulletin confirms the affected component (Kernel/Telephony) and assigns a High severity for Pixel devic...

CVE-2021-39720

CVE-2021-39720Concern: Affects Google Pixel devices in the Modem component; classified as Remote Code Execution (RCE) with Critical severity in the Pixel security bulletin. Root cause is documented as a modem-related vulnerability within the Android stack; no exploit details are provided in the c...

CVE-2022-20431

CVE-2022-20431 describes a local elevation of privilege in Android due to a missing authorization check in a system service. The issue affects Android devices (specific component not publicly named in the documents) and is exploited locally with high impact (confidentiality, integrity, and availa...

CVE-2021-0887

CVE-2021-0887 describes a leak of kernel heap content in PVRSRVBridgeHeapCfgHeapConfigName due to uninitialized data, enabling local information disclosure without extra privileges or user interaction. This affects Android environments utilizing PowerVR-GPU components and is reflected across mult...

CVE-2021-39724

CVE-2021-39724 is an Android/kernel issue: in TuningProviderBase::GetTuningTreeSet there is an out-of-bounds read due to a missing bounds check. This can enable local information disclosure with system privileges required. The vulnerability affects the Android kernel via tuning_provider_base.cc a...

CVE-2022-20119

CVE-2022-20119 affects the Android display/graphics path (mali_gralloc_buffer.h, private_handle_t) where an uninitialized data path allows local information disclosure. The root cause is uninitialized data in the private_handle_t structure, enabling information leakage without extra execution pri...

CVE-2023-48409

Summary: CVE-2023-48409 affects the Mali KBase GPU kernel module on Google Pixel devices. The vulnerability is described as a possible out-of-bounds write triggered by an integer overflow in the function gpu_pixel_handle_buffer_liveness_update_ioctl within private/google-modules/gpu/mali_kbase/ma...

CVE-2021-39731

CVE-2021-39731 concerns an out-of-bounds write in Android’s ProtocolStkProactiveCommandAdapter::Init (protocolstkadapter.cpp). The vulnerability arises from an incorrect bounds check in the Android kernel component, enabling a local elevation of privilege with System execution privileges, without...

CVE-2024-27227

CVE-2024-27227 affects Google Pixel devices via the modem component, with remote code execution reported as the impact. The Pixel security bulletin lists this CVE under the Modem subcomponent with a High severity and notes that applying patch level 2024-03-05 or later mitigates issues described i...

CVE-2024-31336

The CVE-2024-31336 entry concerns PVRSRVBridgeRGXKickTA3D2 in server_rgxta3d_bridge.c, affecting the PowerVR-GPU component. The issue is described as an arbitrary code execution caused by improper input validation, enabling local kernel privilege escalation without extra privileges or user intera...

CVE-2021-0578

CVE-2021-0578 affects the Android WiFi driver (MediaTek components) with an out-of-bounds read caused by a missing bounds check. This could allow remote information disclosure by a nearby attacker without user interaction or additional privileges. Documents do not specify an affected version, exp...

CVE-2021-39712

CVE-2021-39712 is an Elevation of Privilege issue in the Android kernel tied to a race-condition leading to a possible user-after-free. The connected Pixel bulletin and related records confirm this vulnerability affects the Android kernel (upstream kernel) and can enable local privilege escalatio...

CVE-2022-20236

CVE-2022-20236 is referenced in the Android Security Bulletin under Unisoc GPU; the affected component is a UNISOC GPU driver. The underlying root cause and specific impact are not detailed in the provided documents. The CVSS from NVD indicates HIGH impact with network attack vector and no user i...

CVE-2022-20390

Technical details about CVE-2022-20390 are not publicly available in the provided documents. Monitor the Android Bulletin and vendor advisories for updates and fixes.

CVE-2021-0324

CVE-2021-0324 is associated with Android/Unisoc components in the 2021 May Android bulletin. Sources catalog it under Unisoc Framework with High severity (per patch-level details), affecting Android devices via the Android SoC/Unisoc stack. The connected records do not provide concrete technical ...

CVE-2021-0943

CVE-2021-0943 affects Android, with the MMU_MapPages function showing an out-of-bounds write due to improper input validation. This could lead to local escalation of privilege without extra execution privileges, and exploitation requires no user interaction. Sources consistently describe the vuln...

CVE-2021-0467

CVE-2021-0467 affects Chromecast bootROM with an out-of-bounds write caused by an incorrect bounds check. This allows local escalation of privilege in the bootloader with physical USB access and no user interaction. The Android bulletin notes fixes at 2021-05-01/2021-05-05 patch levels; no exploi...

CVE-2021-0582

CVE-2021-0582 is an information-disclosure vulnerability in the Android Wi‑Fi driver caused by a missing bounds check that enables a remote attacker in adjacent network range to read memory without executing code or requiring user interaction. Impact is confidentiality loss (high per CVSS‑3.1) wi...

CVE-2021-0891

CVE-2021-0891 affects the PowerVR-GPU driver in Android. An unprivileged app can trigger the driver to return uninitialized heap memory, enabling information disclosure. Exploitation is possible without privileges or user interaction over network. The issue is mapped in Android’s 2022-08-01/08-05...

CVE-2021-39657

CVE-2021-39657 concerns an out-of-bounds read in the Android kernel’s ufshcd_eh_device_reset_handler (ufshcd.c). The issue enables local information disclosure with System privileges required, and does not require user interaction to exploit. The provided connected documents reiterate the same de...

CVE-2021-39716

CVE-2021-39716 is present in multiple feeds. The Pixel Update Bulletin categorizes it under Modem with type ID and Moderate severity, indicating a Modem-related issue in Pixel devices; remediation is via Google’s 2022-03-05 patch level. However, the NVD entry lists the affected component as Andro...

CVE-2021-39725

CVE-2021-39725 affects the Android kernel component gasket_page_table.c, specifically the function gasket_free_coherent_memory_all. The issue is memory corruption caused by a double free, enabling local escalation of privilege with System-level execution privileges required; exploitation is descr...

CVE-2021-39736

CVE-2021-39736 affects the Android kernel: in lwis_ioctl.c and lwis_periodic_io.c, an integer overflow can cause an out-of-bounds write, enabling local elevation of privileges with SYSTEM access. Exploitation details are not provided in the documents, and no user interaction is required for explo...

CVE-2021-39815

CVE-2021-39815 concerns the PowerVR-GPU driver in Android. Unprivileged apps can allocate pinned memory, unpin it, and continue using the page in GPU calls, allowing kernel memory corruption without privileges. CVSSv3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H assigns a base score of 9.8 (CRITICAL) wi...

CVE-2023-21216

CVE-2023-21216 affects the Linux kernel memory path (PMRChangeSparseMemOSMem in physmem_osmem_linux.c) where a use-after-free can cause arbitrary code execution, enabling local escalation of privilege with no additional privileges and no user interaction. The NVD entry rates this as CRITICAL (CVS...

CVE-2024-44093

CVE-2024-44093 describes a memory corruption vulnerability in the function ppmp_unprotect_buf within drm/code/drm_fw.c. Exploitation could enable local privilege escalation without additional execution privileges or user interaction. The issue is referenced across multiple feeds (NVD, Red Hat, CV...

CVE-2018-9385

CVE-2018-9385 affects the Linux/Android kernel: in driver_override_store of bus.c there is an out-of-bounds write due to an incorrect bounds check, enabling local privilege escalation with SYSTEM privileges. Exploitation reportedly does not require user interaction. Connected advisories (Unity Li...

CVE-2018-9464

CVE-2018-9464 is an Elevation of Privilege in the Google Android Kernel (Taimen bootloader) identified across multiple trackers. The vulnerability arises from a missing permission check, enabling local access to read protected files and escalate privileges with no additional execution privileges ...

CVE-2021-0573

Summary: CVE-2021-0573 affects the asf extractor on Android (notably MediaTek components). The root cause is an out-of-bounds write due to a missing bounds check, enabling local escalation of privilege with no user interaction. Impact (as stated): local privilege escalation with partial confident...

CVE-2021-0580

CVE-2021-0580 pertains to a vulnerability in the Android WiFi driver (MediaTek component) where a missing bounds check enables an out-of-bounds read, potentially allowing remote information disclosure to a proximal attacker without extra privileges or user interaction. The issue is described as a...

CVE-2021-39722

CVE-2021-39722 affects ProtocolStkProactiveCommandAdapter::Init in protocolstkadapter.cpp, with an out-of-bounds read caused by an incorrect bounds check. This could allow local information disclosure and requires system privileges, with no user interaction needed. Connected sources (OSV entry) c...

CVE-2021-39732

CVE-2021-39732 affects the Android kernel component copy_io_entries in lwis_ioctl.c. It describes an out-of-bounds write caused by an integer overflow, which could enable local privilege escalation without user interaction. The available connected documents confirm the issue’s presence in Android...

CVE-2021-39733

CVE-2021-39733 affects the Android kernel audio path (audiometrics.c) via amcs_cdev_unlocked_ioctl. The vulnerability is a possible out-of-bounds write caused by improper input validation, which could enable local elevation of privilege to SYSTEM if exploited. Exploitation is described as local w...

CVE-2022-20391

CVE-2022-20391 is listed in the Android 2022-09-01 bulletin under Unisoc components with a High severity. The provided documents do not include explicit root-cause, exploit details, or affected Android versions beyond the bulletin’s context. remediation guidance, where provided, is to apply the 2...

CVE-2022-20437

CVE-2022-20437 affects Android Messaging. The issue is a denial-of-service vulnerability caused by an unauthorized broadcast within Messaging, leading to Local DoS on affected devices. Affected platform: Google Android (Android OS family with Messaging component). Root cause described as a flaw i...

CVE-2023-48421

CVE-2023-48421 affects Google Pixel GPU driver code: gpu_pixel_handle_buffer_liveness_update_ioctl in private/google-modules/gpu/mali_kbase/platform/pixel/pixel_gpu_slc.c. Root cause is an out-of-bounds write due to improper input validation, enabling local privilege escalation with no extra priv...

CVE-2024-27218

CVE-2024-27218 describes an out-of-bounds read in update_freq_data (TBD module), enabling local information disclosure without extra privileges and with no user interaction. Connected sources consistently cite a missing bounds check as the root cause and local disclosure as the impact. The Androi...

CVE-2021-39727

CVE-2021-39727 describes an information-disclosure vulnerability in Android’s acropora/app/identity/libeic/EicPresentation.c, caused by a race condition in the function eicPresentationRetrieveEntryValue . The issue can enable local information disclosure with System-level privileges and does not ...

CVE-2021-39729

The CVE-2021-39729 issue affects the TitanM chip in Android, caused by a missing bounds check that enables an out-of-bounds write. This can lead to local privilege escalation with System execution privileges required, and exploitation does not require user interaction. Documents consistently desc...

CVE-2022-20237

The CVE-2022-20237 entry affects Android kernel code, specifically the BuildDevIDResponse function in miscdatabuilder.cpp. A missing bounds check can cause an out-of-bounds write, which the provided documents state could enable remote code execution without extra privileges or user interaction. T...

CVE-2024-23696

The CVE-2024-23696 issue is tied to the RGXCreateZSBufferKM function in rgxta3d.c, where a use-after-free leads to possible arbitrary code execution and local elevation of privilege in the kernel. Exploitation reportedly requires local access with no extra privileges and no user interaction. Conn...

CVE-2024-34732

This CVE (CVE-2024-34732) concerns the Android kernel’s RGXMMUCacheInvalidate routine in rgxmem.c, where a race condition can enable arbitrary code execution and local privilege escalation without extra privileges or user interaction. The vulnerability description is consistently reported across ...

CVE-2020-0252

CVE-2020-0252 is a memory-corruption (use-after-free) issue affecting the MediaTek Multimedia Processing Driver in Google Android. The Red Hat/Red Hat-derived and CVE catalogs classify it as an Elevation of Privilege (High) vulnerability. The Android security bulletin for 2020-08-01/08-05 lists M...