CVE-2024-27237

CVE-2024-27237 involves a logic error in wipe_ns_memory() within nsmemwipe.c that can cause an incorrect size calculation. This flaw permits local information disclosure without requiring elevated privileges or user interaction. The vulnerability is described across multiple sources (NVD/Red Hat/...

CVE-2022-42520

CVE-2022-42520: Use-after-free in Android’s ServiceInterface::HandleRequest (serviceinterface.cpp) can lead to local escalation of privilege to system level. Affected component: Android kernel/service interface; exploitation described as LOCAL with HIGH privileges required and no user interaction...

CVE-2024-23697

CVE-2024-23697: A use-after-free in RGXCreateHWRTData_aux (rgxta3d.c) enables possible arbitrary code execution and local kernel privilege escalation. No user interaction required. Documents consistently describe this as a local-privilege escalation vulnerability with kernel impact and do not pro...

CVE-2024-40651

CVE-2024-40651 describes a possible local escalation of privilege in the Android kernel stemming from a use-after-free caused by a logic error (exact component not disclosed in provided documents). The vulnerability, as described across multiple sources, can be exploited with local access and doe...

CVE-2017-13216

CVE-2017-13216 affects Android kernel ashmem: in ashmem_ioctl, an out-of-bounds write occurs due to insufficient locking when accessing asma. This can enable local privilege escalation and code execution within a privileged process, with no user interaction required. Public advisories describe th...

CVE-2021-0577

CVE-2021-0577 affects the Android flv extractor component. The issue is described as an out-of-bounds write caused by a heap buffer overflow, leading to local privilege escalation with no additional execution privileges required and no user interaction needed. The vulnerability is labeled high se...

CVE-2021-0881

CVE-2021-0881 describes an integer overflow in the PowerVR kernel driver component PVRSRVBridgeRGXKickCDM that occurs due to a missing size check. This can enable out-of-bounds heap access and lead to local escalation of privilege without extra execution privileges or user interaction. The vulner...

CVE-2021-39636

CVE-2021-39636 is a local information-disclosure vulnerability in the Linux kernel's ip_tables.c (do_ipt_get_ctl/do_ipt_set_ctl) that can leak uninitialized kernel data. Android kernel also implicated in the description. The issue enables local information disclosure with system execution privile...

CVE-2021-39656

CVE-2021-39656 affects the Linux kernel used by Android. A use-after-free in __configfs_open_file (file.c) arises from improper locking, enabling local privilege escalation with kernel execution privileges; no user interaction is required. The vulnerability is documented in upstream kernel refere...

CVE-2022-20149

CVE-2022-20149 is listed in the Pixel Update Bulletin as a Modem-component vulnerability with Type: ID (information disclosure) and Moderate severity. The connected Pixel bulletin entry confirms the issue is mapped to the Modem and labeled as an information-disclosure (ID) vulnerability, but does...

CVE-2023-21162

CVE-2023-21162 affects the PowerVR GPU driver (Imagination Technologies) via RGXUnbackingZSBuffer in rgxta3d.c. The issue is a use-after-free that could enable arbitrary code execution and local kernel privilege escalation without extra interaction. Public exploitation details aren’t provided in ...

CVE-2020-0019

CVE-2020-0019 affects Broadcom Nexus firmware in Android SoCs, where an insecure default password may allow local information disclosure in the kernel without extra privileges or user interaction. Exploitation is local; impact is confidentiality loss as described by CVSS metrics. The available do...

CVE-2020-0457

CVE-2020-0457 is an out-of-bounds write due to a missing bounds check affecting Android devices, with a specific association to MediaTek components (vcu) in the 2020 Android security bulletin set. Connected sources indicate the issue is documented across NVD, Red Hat, CVE records, and OSV entries...

CVE-2021-0871

PowerVR kernel driver issue CVE-2021-0871 involves PVRSRVBridgePMRPDumpSymbolicAddr where a missing size check can cause an integer overflow and out-of-bounds heap access. The described impact is local escalation of privilege with no additional execution privileges needed, and exploitation is not...

CVE-2021-39687

Summary: CVE-2021-39687 affects Android kernel code in the driver path, specifically the HandleTransactionIoEvent in the actuator_driver.cc. The issue is a possible out-of-bounds read caused by a heap buffer overflow, which can lead to a local information disclosure without requiring user interac...

CVE-2022-20389

CVE-2022-20389 is tied to Android SoC/Unisoc components. The connected documents specify affected areas as Android SoC and Unisoc Android components, with a high severity rating (CVE-2022-20389) and no publicly disclosed exploit details in the provided sources. There are no vendor/product version...

CVE-2022-20402

CVE-2022-20402 is documented in the Pixel Update Bulletin as a Critical RCE affecting the Android kernel via the modem component. The NVD entry shows a high-severity, network-exposed vulnerability with CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (score 9.8). The Pixel bulletin lists CVE-2022-2...

CVE-2022-20459

CVE-2022-20459 affects the Android kernel’s Titan M component on Google Pixel devices. The issue is described as improper input validation that can redirect code execution, enabling local escalation of privilege with system-level privileges and no user interaction required. The vulnerability is c...

CVE-2023-21402

CVE-2023-21402 affects the PowerVR GPU driver (Imagination Technologies) in Android/ChromeOS via the MMU_UnmapPages() function in mmu_common.c. The issue is an out-of-bounds read caused by improper input validation, enabling local escalation of privilege in the kernel with no user interaction req...

CVE-2024-23698

CVE-2024-23698 affects the Android/Linux kernel code path RGXFWChangeOSidPriority in rgxfwutils.c, where a missing bounds check could enable arbitrary code execution and local escalation of privilege with no user interaction. The issue is described consistently across multiple sources (Android An...

CVE-2020-0367

CVE-2020-0367 is documented as an out-of-bounds write due to a missing bounds check affecting Android components (notably Widevine) with Android ID A-162980455. Connected OSV records (ASB-A-162980455 and ASB-A-162980705) describe out-of-bounds write/read issues related to this same identifier. Pu...

CVE-2022-20170

CVE-2022-20170 affects Google Pixel modem/Kernel stack (Pixel modem) and enables a remote code execution via a zero-click attack that could downgrade the device to 2G and seize control of the handset. Publicly documented as a critical, network-exposed vulnerability (CVSS v3.1 score 9.8). Google p...

CVE-2022-20427

CVE-2022-20427 affects the Android kernel and is tied to memory corruption caused by improper input validation, leading to local escalation of privilege with high impact on confidentiality, integrity, and availability. Exploitation is described as local with no user interaction required; details ...

CVE-2023-21215

CVE-2023-21215 relates to a race condition in the PowerVR GPU driver (DevmemIntAcquireRemoteCtx in devicemem_server.c) that can allow arbitrary code execution and local kernel privilege escalation without user interaction. The available connected records confirm the vulnerability and its impact b...

CVE-2020-0433

CVE-2020-0433 affects the Android/Linux kernel: use-after-free in blk_mq_queue_tag_busy_iter (blk-mq-tag.c) caused by improper locking, enabling local privilege escalation with no user interaction. Public details in the Initial document describe the flaw; connected Nessus advisories (Unity Linux/...

CVE-2022-20155

CVE-2022-20155 affects the Android kernel component ipu-core-jqs-msg-transport.c, specifically the function ipu_core_jqs_msg_transport_kernel_write_sync. The vulnerability arises from a race condition that can cause a use-after-free, enabling local escalation of privilege without additional execu...

CVE-2022-20171

CVE-2022-20171 is a Critical remote code execution vulnerability affecting Google Pixel modem components, disclosed in the Pixel Update Bulletin (June 2022). The NVD entry lists CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network-based exploitation with no user interaction could co...

CVE-2022-20172

CVE-2022-20172 concerns the Android kernel component ShannonRcsService.java, where the onbind method lacks a necessary permission check. This can enable local information disclosure without requiring additional execution privileges or user interaction, per multiple sources. Affected context is de...

CVE-2022-20400

CVE-2022-20400 affects Android kernel code, specifically the cd_CodeMsg path in cd_codec.c, where a missing bounds check can cause an out-of-bounds write. This leads to remote code execution with no privileges required and no user interaction, as indicated by the description and NVD metrics (CVSS...

CVE-2022-20464

CVE-2022-20464 affects Android’s audio processing path in ap_input_processor.c (Android kernel). The logic error can allow recording audio during a phone call, causing local information disclosure. Impact is confidentiality loss (HIGH) with access locally from a user with LOW privileges and no us...

CVE-2024-22011

CVE-2024-22011 affects the Android/Pixel surface via the ss_ProcessRejectComponent function in ss_MmConManagement.c, where a missing bounds check enables an out-of-bounds read. This can lead to remote information disclosure without user interaction and without additional execution privileges. The...

CVE-2024-34724

CVE-2024-34724 describes a race condition in the kernel function _UnrefAndMaybeDestroy (pmr.c) that can enable arbitrary code execution and local escalation of privilege without user interaction. The vulnerability is rooted in race timing within memory/reference handling, allowing a local attacke...

CVE-2024-34747

CVE-2024-34747 is described across multiple sources as a use‑after‑free in the DevmemXIntMapPages path of devicemem_server.c. The underlying flaw is a logic error that can enable local escalation of privilege in the kernel without additional execution privileges and without user interaction. The ...

CVE-2024-44095

CVE-2024-44095 affects Google Pixel/Android via the function ppmp_protect_mfcfw_buf in code/drm_fw.c, where a logic error can cause memory corruption and local privilege escalation without needing user interaction. The issue is classified as Elevation of Privilege (EoP) with high impact (confiden...

CVE-2022-20151

CVE-2022-20151 is listed in Pixel security patches as an Information Disclosure (Type: ID) affecting the Modem component on Google Pixel devices. The Android bug ID associated is A-210712565. Public sources also flag it as related to the Android kernel in the CVE context, with no explicit exploit...

CVE-2022-20384

CVE-2022-20384 is referenced in Pixel security bulletin as an Elevation of Privilege in the Modem component affecting Google Pixel devices (Modem stack). The bulletin groups it under Pixel issues and indicates affected devices receive patches at the 2022-08-05 security level. No explicit root-cau...

CVE-2024-31334

CVE-2024-31334 affects the DevmemIntFreeDefBackingPage function in the Android/Linux kernel code path devicemem_server.c. The described logic error could allow arbitrary code execution leading to local elevation of privilege without requiring user interaction. Exploitation is local (no remote vec...

CVE-2024-34748

Possible use-after-free in DevmemXReservationPageAddress of devicemem_server.c due to improper casting, enabling local kernel privilege escalation without extra privileges or user interaction. Affected: Linux kernel component described in multiple sources (CVE-2024-34748). Impact: local EoP with ...

CVE-2024-44096

CVE-2024-44096 affects Google Pixel devices (Android) and is caused by an insecure default value that enables an arbitrary read, potentially leading to local information disclosure with system execution privileges. Exploitation does not require user interaction. The issue is listed in the Pixel s...

CVE-2020-0253

CVE-2020-0253 is a memory corruption (use-after-free) vulnerability in the MediaTek Multimedia Processing Driver for Android, classified as Elevation of Privilege (EoP) with High impact. Affected: Android devices using MediaTek multimedia driver; root cause: use-after-free leading to unauthorized...

CVE-2020-0254

CVE-2020-0254 is an information-disclosure vulnerability in Android’s MediaTek Multimedia Processing Driver. It stems from an incorrect bounds check, which could allow an out-of-bounds read. The issue is associated with the MediaTek component in Android and is documented in the Android 2020 secur...

CVE-2020-27067

CVE-2020-27067 affects the Android kernel’s l2tp subsystem, where a race condition can cause a use-after-free leading to local privilege escalation. Exploitation is described as requiring local access with no user interaction. The provided documents specify the affected product area and the impac...

CVE-2021-0882

The CVE-2021-0882 issue affects Android devices using the Imagination Technologies PowerVR PowerVR kernel driver (PVRSRVBridgeRGXKickSync). The root cause is a missing size check that enables an integer overflow, leading to out-of-bounds heap access. This can allow local escalation of privilege w...

CVE-2021-0883

The CVE-2021-0883 entry affects the PVRSRVBridgeCacheOpQueue in the PowerVR kernel driver. A missing size check can cause an integer overflow, enabling out-of-bounds heap access and local escalation of privilege without extra execution privileges. Impact is described as local EoP with high confid...

CVE-2021-0951

CVE-2021-0951 concerns an integer overflow in the DevmemIntHeapAcquire function (Android-related). The vulnerability could enable arbitrary code execution and local privilege escalation without extra privileges or user interaction. Public details in the provided documents identify the affected st...

CVE-2022-20190

Technical details for CVE-2022-20190 are not publicly available in the provided documents. No concrete information on affected components, root cause, impact, or fixes is present. Monitor for updates.

CVE-2022-20370

CVE-2022-20370 ties to Android kernel/modem firmware with Android bug ID A-215730643. Pixel bulletin classifies it under Modem with type ID and Moderate severity; NVD describes a kernel-related issue affecting Android kernel (CVSSv3.1: 7.5, Network exploit, no user interaction). Some connected so...

CVE-2022-20377

CVE-2022-20377 affects Android’s keymaster_ipc.cpp, enabling an attacker to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This configuration flaw can lead to local elevation of privilege with no additional execution privileges required and without user interaction. Public r...

CVE-2022-20378

CVE-2022-20378 affects Android kernel and Pixel modem. The Pixel security bulletin lists it under the Kernel/Modem category as an Elevation of Privilege (EoP) issue with “Modem” as the component and indicates a high-severity impact, corroborated by NVD’s CVSS v3.1 base score of 9.8 (CRITICAL) wit...

CVE-2024-29749

CVE-2024-29749 affects the tmu_set_tr_thresholds function in tmu.c, with a missing bounds check causing a possible out-of-bounds write. This can lead to local elevation of privilege without extra execution privileges and without user interaction. Public sources repeatedly describe the issue in th...