CVE-2023-21166

CVE-2023-21166: Use-after-free in RGXBackingZSBuffer (rgxta3d.c) of the PowerVR GPU driver can enable arbitrary code execution and local kernel privilege escalation without extra user interaction. Public details across the connected entries confirm the issue and its impact (no explicit exploit sp...

CVE-2023-21217

CVE-2023-21217 is associated with Google Android, affecting the PowerVR-GPU driver. The vulnerability arises in the function PMRWritePMPageList() and is described as a possible out-of-bounds write caused by an integer overflow . The impact is a local escalation of privilege with no additional exe...

CVE-2023-35659

CVE-2023-35659 affects the kernel through the DevmemIntChangeSparse function in devicemem_server.c. The connected sources describe a logic error that can cause arbitrary code execution, enabling local escalation of privilege with no additional privileges or user interaction required. Multiple fee...

CVE-2024-34724

CVE-2024-34724 describes a race condition in the kernel function _UnrefAndMaybeDestroy (pmr.c) that can enable arbitrary code execution and local escalation of privilege without user interaction. The vulnerability is rooted in race timing within memory/reference handling, allowing a local attacke...

CVE-2020-0253

CVE-2020-0253 is a memory corruption (use-after-free) vulnerability in the MediaTek Multimedia Processing Driver for Android, classified as Elevation of Privilege (EoP) with High impact. Affected: Android devices using MediaTek multimedia driver; root cause: use-after-free leading to unauthorized...

CVE-2022-20190

Technical details for CVE-2022-20190 are not publicly available in the provided documents. No concrete information on affected components, root cause, impact, or fixes is present. Monitor for updates.

CVE-2022-20377

CVE-2022-20377 affects Android’s keymaster_ipc.cpp, enabling an attacker to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This configuration flaw can lead to local elevation of privilege with no additional execution privileges required and without user interaction. Public r...

CVE-2022-20405

CVE-2022-20405 affects the Android kernel/modem stack used by Google Pixel devices, described as a Modem Elevation of Privilege vulnerability. Public details indicate a zero-click style chain that could downgrade the device’s cellular modem to 2G and potentially allow takeover of the handset via ...

CVE-2022-20460

CVE-2022-20460 affects the Android kernel (mprot_unmap) where improper input validation could corrupt the memory mapping. The consequence is local escalation of privilege, requiring System execution privileges, with no user interaction needed. The description appears across multiple sources (e.g....

CVE-2024-22011

CVE-2024-22011 affects the Android/Pixel surface via the ss_ProcessRejectComponent function in ss_MmConManagement.c, where a missing bounds check enables an out-of-bounds read. This can lead to remote information disclosure without user interaction and without additional execution privileges. The...

CVE-2024-31334

CVE-2024-31334 affects the DevmemIntFreeDefBackingPage function in the Android/Linux kernel code path devicemem_server.c. The described logic error could allow arbitrary code execution leading to local elevation of privilege without requiring user interaction. Exploitation is local (no remote vec...

CVE-2024-32897

CVE-2024-32897 involves an out-of-bounds read in ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() within protocolsmsadapter.cpp. The issue arises from a missing bounds check, enabling a possible information disclosure; exploitability is network-based with no user interaction and could lead to baseb...

CVE-2024-32915

A security vulnerability exists in the Exynos RIL subcomponent affecting Google Pixel devices. The issue is caused by a missing bounds check in the CellInfoListParserV2::FillCellInfo() function within protocolnetadapter.cpp, leading to a possible out-of-bounds read . This vulnerability could resu...

CVE-2024-47017

CVE-2024-47017 affects the ufshc_scsi_cmd function in ufs.c, with a stack variable use-after-free leading to local escalation of privilege. The vulnerability description across Red Hat, NVD, CVE lists, and OSV entries consistently state that no further user interaction is required, and exploitati...

CVE-2020-0231

CVE-2020-0231 is a MediaTek External Memory Interface elevation-of-privilege vulnerability in Android. The issue is an out-of-bounds write caused by an incorrect bounds check; it is listed with high to critical impact (CVSS v3.1: 9.8) and affects Android devices with the MTK External Memory Inter...

CVE-2020-0339

CVE-2020-0339 is confirmed as an out-of-bounds read caused by a missing bounds check, associated with Android/SoC component A-162980705. OSV entries explicitly describe the issue as an out-of-bounds read (ASB-A-162980705) and (ASB-A-162980455). Exploitation status is not provided in the supplied ...

CVE-2020-0367

CVE-2020-0367 is documented as an out-of-bounds write due to a missing bounds check affecting Android components (notably Widevine) with Android ID A-162980455. Connected OSV records (ASB-A-162980455 and ASB-A-162980705) describe out-of-bounds write/read issues related to this same identifier. Pu...

CVE-2021-0876

CVE-2021-0876 affects PVRSRVBridgePhysmemNewRamBackedLockedPMR in the PowerVR kernel driver on Android. The issue is a missing size check that enables an integer overflow, potentially allowing out-of-bounds heap access and local escalation of privilege with no extra privileges or user interaction...

CVE-2022-20191

CVE-2022-20191 is a Google Pixel modem vulnerability described as a Remote Code Execution issue in the Pixel modem, affecting Android kernel components. It is rated CRITICAL (CVSSv3.1: 9.8) with network exploitation and no required user interaction. The Pixel Update Bulletin assigns a fix via pat...

CVE-2022-42527

CVE-2022-42527 involves a crash in the Android kernel due to a missing null check in the function cd_SsParseMsg of cd_SsCodec.c. The issue could allow remote denial of service without requiring privileges or user interaction. The available sources consistently describe the affected component as p...

CVE-2023-21061

CVE-2023-21061 affects the Android kernel (Pixel devices). The connected Pixel bulletin entry indicates this issue is a DoS vulnerability with a Moderate impact in the Wifi subcomponent. No exploitation/details are provided beyond the classification. A fix is indicated via the Pixel security patc...

CVE-2023-21164

CVE-2023-21164 affects the DevmemIntMapPMR code path in devicemem_server.c within the PowerVR GPU driver stack on Android/ChromeOS. The issue is a use-after-free that can lead to arbitrary code execution and local escalation of privileges in the kernel, with no additional execution privileges or ...

CVE-2020-0254

CVE-2020-0254 is an information-disclosure vulnerability in Android’s MediaTek Multimedia Processing Driver. It stems from an incorrect bounds check, which could allow an out-of-bounds read. The issue is associated with the MediaTek component in Android and is documented in the Android 2020 secur...

CVE-2021-0885

CVE-2021-0885 affects the PowerVR kernel driver (PVRSRVBridgeSyncPrimOpTake). The issue is a missing size check that enables an integer overflow, causing out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed, and exploitation is...

CVE-2021-39812

CVE-2021-39812 affects the Android kernel component where a use-after-free leads to an out-of-bounds read, enabling local escalation of privileges without user interaction. The issue is documented in Pixel Update Bulletin entries against the affected Pixel/Android kernel and is mitigated by apply...

CVE-2022-20152

CVE-2022-20152 affects the TitanM chip in Android kernel space, describing an out-of-bounds write caused by a missing bounds check that enables local escalation of privileges to System with no user interaction required. Public details on affected patch level or remediation are not provided in the...

CVE-2022-20162

CVE-2022-20162 is an information-disclosure flaw in the Android kernel’s crypto/asn1.c, specifically in the function asn1_p256_int, where an incorrect bounds check allows an out-of-bounds read. The impact is local information disclosure with system privileges required; exploitation requires no us...

CVE-2022-20167

CVE-2022-20167 is listed in the Google Pixel security bulletin as a modem component Elevation of Privilege vulnerability (High) affecting Pixel devices. The connected Pixel bulletin entry confirms the issue type and severity but does not provide explicit exploit details in the available documents...

CVE-2022-20171

CVE-2022-20171 is a Critical remote code execution vulnerability affecting Google Pixel modem components, disclosed in the Pixel Update Bulletin (June 2022). The NVD entry lists CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network-based exploitation with no user interaction could co...

CVE-2022-20381

Summary (concrete details available): CVE-2022-20381 is mapped to the Android kernel in Google Pixel devices and is classified as an Elevation of Privilege (EoP) issue within the kernel component. The vulnerability is tracked in the NVD entry with a high-impact profile (CVSSv3.1: CVSS:3.1/AV:N/AC...

CVE-2022-20603

CVE-2022-20603 affects the Android kernel: a possible out-of-bounds write in SetDecompContextDb (RohcDeCompContextOfRbId.cpp) due to a missing bounds check. This could enable remote code execution with System privileges, with no user interaction required. Connected sources (NVD, Red Hat, PRION, O...

CVE-2023-20924

CVE-2023-20924 describes a biometric authentication bypass in the Android kernel that could enable local escalation of privilege with physical access and no user interaction. The Pixel bulletin ties this issue to the Pixel 6a fingerprint scanner and marks it as Elevation of Privilege (EoP) with H...

CVE-2023-21062

CVE-2023-21062 describes an out-of-bounds read in the Android kernel, triggered by an incorrect bounds check in the DoSetTempEcc function of imsservice.cpp. The vulnerability can enable local escalation of privilege with System execution privileges required, and exploitation does not require user...

CVE-2023-21154

CVE-2023-21154 : Affects the Android kernel, specifically the StoreAdbSerialNumber path in protocolmiscbuilder.cpp, where a missing bounds check can cause an out-of-bounds read. This is described as enabling local information disclosure with System-level privileges needed; exploitation reportedly...

CVE-2023-21228

CVE-2023-21228 describes an out-of-bounds write in the Linux kernel component physmem_osmem_linux.c (PMRChangeSparseMemOSMem), caused by an incorrect bounds check. This could enable local escalation of privilege with no user interaction. Public documents confirm the vulnerability details and affe...

CVE-2023-40141

The CVE-2023-40141 issue affects the temp_residency_name_store function in thermal_metrics.c, where a missing bounds check enables an out-of-bounds write. This is described as a potential local privilege escalation with no additional execution privileges required and no user interaction needed. C...

CVE-2024-29743

A missing bounds check in the tmu_set_temp_lut function of tmu.c leads to a possible out-of-bounds write on Google Pixel devices. This vulnerability impacts the ACPM subcomponent and could result in a local escalation of privilege (EoP) without requiring additional execution privileges or user in...

CVE-2024-34748

The Linux Kernel is affected by a use-after-free vulnerability in the _DevmemXReservationPageAddress function of devicemem_server.c, caused by improper casting . This flaw allows for a local escalation of privilege in the kernel without requiring additional execution privileges or user interactio...

CVE-2020-0228

CVE-2020-0228 affects Android’s Recorder related service, with the root cause described as an improper configuration of that recorder component. Public summaries in the connected documents indicate an information-disclosure risk (evidence includes CNVD/Red Hat listings and NVD metrics) and classi...

CVE-2020-0342

CVE-2020-0342 is an Android vulnerability described as an out-of-bounds write caused by an incorrect bounds check. Connected sources show this entry associated with Android components including MediaTek ATF and Qualcomm closed-source components, with patches issued in the Android September 2020 s...

CVE-2021-0882

The CVE-2021-0882 issue affects Android devices using the Imagination Technologies PowerVR PowerVR kernel driver (PVRSRVBridgeRGXKickSync). The root cause is a missing size check that enables an integer overflow, leading to out-of-bounds heap access. This can allow local escalation of privilege w...

CVE-2022-20148

Technical details are not publicly available in the provided connected documents for CVE-2022-20148. Monitor for updates from upstream/kernel advisories; no specifics on affected products, versions, or remediation are included.

CVE-2022-20365

CVE-2022-20365 affects the Android kernel (Pixel device context) and is labeled Elevation of Privilege (EoP) in userland. The CVE entry is listed under Pixel Update Bulletin security patches, with the issue categorized as Moderate severity for the affected kernel component, and a patch level of 2...

CVE-2022-20366

CVE-2022-20366 affects the Android kernel component lwis_ioctl.c, in ioctl_dpm_clk_update, where an integer overflow can cause an out-of-bounds write. This is described as enabling local privilege escalation to SYSTEM level with no user interaction required. The vulnerability is documented across...

CVE-2022-20400

CVE-2022-20400 affects Android kernel code, specifically the cd_CodeMsg path in cd_codec.c, where a missing bounds check can cause an out-of-bounds write. This leads to remote code execution with no privileges required and no user interaction, as indicated by the description and NVD metrics (CVSS...

CVE-2023-21052

CVE-2023-21052 affects the Android kernel component ril_external_client.cpp (setToExternal). The issue is an out-of-bounds write caused by a missing bounds check in that function, enabling local privilege escalation with system-level execution privileges and no user interaction required. Exploita...

CVE-2023-48408

The CVE-2023-48408 entry concerns ProtocolNetSimFileInfoAdapter() in protocolnetadapter.cpp, where a missing bounds check can trigger an out-of-bounds read. This vulnerability could enable local information disclosure and may require baseband firmware compromise to exploit. Exploitation is descri...

CVE-2023-48413

CVE-2023-48413 : A missing bounds check in Init of protocolnetadapter.cpp enables an out-of-bounds read. This can lead to remote information disclosure with system execution privileges required, and no user interaction is needed. Multiple connected sources (NVD, OSV, PRION, CVE lists) confirm the...

CVE-2024-29753

A vulnerability exists in the ACPM subcomponent of Google Pixel devices due to a missing bounds check in the tmu_set_control_temp_step function of the tmu.c file. This flaw leads to a possible out-of-bounds write , which could allow for local escalation of privilege without requiring additional e...

CVE-2024-31333

The CVE-2024-31333 issue affects Google Android kernel code, specifically the MMU_AllocLevel path in mmu_common.c, where an integer overflow can lead to arbitrary code execution and local escalation of privilege without user interaction. Multiple connected sources (NVD, Red Hat, CNVD, CVE listing...