CVE-2024-31333

The CVE-2024-31333 issue affects Google Android kernel code, specifically the MMU_AllocLevel path in mmu_common.c, where an integer overflow can lead to arbitrary code execution and local escalation of privilege without user interaction. Multiple connected sources (NVD, Red Hat, CNVD, CVE listing...

CVE-2024-47040

CVE-2024-47040 is a Use-After-Free in the Android Android Pixel stack involving the android.hardware.radio.sap.ISap/slot2 service. Root cause: a logic error leads to UAF, enabling local Elevation of Privilege with no user interaction. Documents provide no exploitation details or specific patch/ve...

CVE-2018-9390

CVE-2018-9390 involves an out-of-bounds read in procfile_write within gl_proc.c caused by an incorrect bounds check, enabling local privilege escalation with SYSTEM rights. Exploitation is not user-initiated. Reports from NVD/Red Hat/CNNVD mirror a consistent description across Android Pixel devi...

CVE-2018-9518

CVE-2018-9518 affects the Android/Linux kernel description in the connected Nessus/NASL entries. The flaw is in nfc_llcp_build_sdreq_tlv of llcp_commands.c, where a missing bounds check allows an out-of-bounds write. This could enable local escalation of privilege with SYSTEM execution privileges...

CVE-2020-0447

CVE-2020-0447 is described in connected documents as an out-of-bounds write caused by a missing bounds check, linked to Android SoC component A-168251617. The OSV entry ASB-A-168251617 explicitly states the issue as an out-of-bounds write; other sources (NVD, Red Hat, CVE listings) reflect this d...

CVE-2020-0456

CVE-2020-0456 is an out-of-bounds write due to a missing bounds check affecting Android with Android SoC A-170378843 (MediaTek vcu). CVSS v3.1 shows 9.8 (CRITICAL); CVSS v2 shows 7.5 (HIGH). Exploitation remotely over network without user interaction; impact on confidentiality, integrity, and ava...

CVE-2021-0875

CVE-2021-0875 affects the PowerVR GPU stack (PVRSRVBridgeChangeSparseMem in the PowerVR kernel driver). The issue is a missing size check that can cause an integer overflow, enabling out-of-bounds heap access. This could lead to local elevation of privilege with no additional execution privileges...

CVE-2021-0878

The CVE-2021-0878 issue affects the PowerVR PVRSRVBridgeServerSyncGetStatus path in the PVRSRV kernel driver. The root cause is a missing size check that can trigger an integer overflow, enabling out-of-bounds heap access. This could enable local escalation of privilege without additional executi...

CVE-2022-20156

CVE-2022-20156 is an elevation-of-privilege vulnerability in Android’s graphics path: specifically, an issue in the unflatten path of GraphicBuffer.cpp that allows arbitrary code execution via improper input validation. Exploitation is local and does not require user interaction. The impact is st...

CVE-2022-42508

CVE-2022-42508 affects Android kernel components via ProtocolCallBuilder::BuildSendUssd, where a missing bounds check enables an out-of-bounds write. This can lead to local elevation of privilege with SYSTEMExecution privileges required; exploitation does not require user interaction. The availab...

CVE-2022-42517

CVE-2022-42517 affects the Android kernel, specifically the MiscService::DoOemSetTcsFci function in miscservice.cpp. The issue is an out-of-bounds read caused by a missing bounds check, leading to local information disclosure with System privileges required for exploitation and no user interactio...

CVE-2022-42531

CVE-2022-42531 affects the Android kernel component gs_ldfw_load.c, specifically the mmu_map_for_fw path. The issue is described as a mitigation bypass due to Permissive Memory Allocation, enabling local elevation of privilege without additional execution privileges or user interaction. The vulne...

CVE-2024-29783

A security vulnerability exists in the ACPM component of Google Pixel devices due to a missing bounds check in the tmu_get_tr_thresholds function. This flaw leads to an out-of-bounds read , which could result in local information disclosure without requiring additional execution privileges or use...

CVE-2024-32906

CVE-2024-32906 affects Google Pixel/Android components: In the AcvpOnMessage function of avcp.cpp, uninitialized data may cause an Elevation of Privilege (EoP). This could enable local privilege escalation with no extra execution privileges and no user interaction required. The available connecte...

CVE-2024-32930

A vulnerability exists in the slc_plugin.c component, specifically within the plugin_ipc_handler function, due to the use of uninitialized data . This flaw could allow for local information disclosure of 4 bytes of stack memory without requiring additional execution privileges or user interaction...

CVE-2024-47035

The CVE affects virtio’s vring_init in external/headers/include/virtio/virtio_ring.h, where a logic error can cause an out-of-bounds write. This may enable local privilege escalation with no extra privileges or user interaction; exploitation details are not provided in the supplied documents. Rem...

CVE-2025-27701

A NULL pointer dereference vulnerability exists in the process_crypto_cmd function within Google Pixel software. The issue arises because values in ptrs[i] can be NULL after calling slice_map_array(), yet they are subsequently dereferenced without a prior NULL check . This flaw can lead to a loca...

CVE-2020-0123

CVE-2020-0123 describes a possible out-of-bounds write caused by an incorrect bounds check in the Android TV sound driver. The vulnerability affects Android TV components, with the root cause identified as a bounds-check fault in the sound subsystem, potentially enabling out-of-bounds writes. The...

CVE-2022-20562

The CVE-2022-20562 entry concerns a logic error in ap_input_processor.c within the Android kernel’s audio processing path that could allow recording audio during a phone call, leading to local information disclosure. The vulnerability is classified as Information Disclosure with a Local attack ve...

CVE-2022-20569

CVE-2022-20569 affects the Android kernel, specifically the thermal cooling device stats update path in the thermal_sysfs.c driver. The issue is described as an out-of-bounds write caused by improper input validation in the function thermal_cooling_device_stats_update, which could lead to local e...

CVE-2022-20581

CVE-2022-20581 affects the Pixel camera driver in the Android kernel. The issue is a use-after-free caused by a logic error, enabling local escalation of privilege with System-level execution privileges required. No user interaction is needed for exploitation. Documented exposure is limited to th...

CVE-2022-42519

CVE-2022-42519 affects the Android kernel component, specifically In CdmaBroadcastSmsConfigsRequestData::encode in cdmasmsdata.cpp. The root cause is a stack clash that can lead to memory corruption, enabling local escalation of privilege with SYSTEM privileges required; exploitation requires no ...

CVE-2022-42528

CVE-2022-42528 affects Android kernel (ffa_mrd_prot in shared_mem.c). A logic error can cause local information disclosure without additional privileges, with no user interaction required. The vulnerability is documented across multiple sources (Android Pixel kernel context, Red Hat/GNU reference...

CVE-2023-21041

CVE-2023-21041 affects the Android kernel, specifically the function sequence in param_util.c ’s append_to_params . The description states an out-of-bounds write caused by an incorrect bounds check, potentially enabling local privilege escalation with no additional execution privileges and no use...

CVE-2023-21065

The CVE-2023-21065 issue affects the Android kernel’s fdt_next_tag function in fdt.c, causing a possible out-of-bounds write driven by an integer overflow. This could enable local elevation of privilege with system execution privileges required, and no user interaction is needed. No concrete reme...

CVE-2023-21075

CVE-2023-21075 affects the Android kernel; the vulnerability is in get_svc_hash inside nan.cpp, caused by an out-of-bounds write due to a heap buffer overflow. The impact is local elevation of privilege with System-level execution privileges required; exploitation is possible without user interac...

CVE-2023-35654

CVE-2023-35654 concerns the stmvl53l1_module.c ctrl_roi function, where an incorrect bounds check may cause an out-of-bounds read. This could enable local escalation of privilege with system execution privileges required. Exploitation is described as local (no user interaction required). Connecte...

CVE-2023-48402

CVE-2023-48402 refers to a local elevation-of-privilege in the ppcfw_enable function of ppcfw.c due to a missing permission check. Exploitation requires no user interaction and could grant higher privileges on the device. Multiple sources (including Red Hat and NVD entries) corroborate the same d...

CVE-2023-48405

CVE-2023-48405 describes a logic error that allows the secure world to write to NS memory, enabling local elevation of privilege (System-level) without user interaction. The vulnerability is listed in Google Pixel security bulletin as CVE-2023-48405 with EoP impact (High) in the LDFW component. A...

CVE-2024-32903

CVE-2024-32903 affects the lwis transaction component, specifically the function prepare_response_locked. The provided documents indicate a possible out-of-bounds write caused by improper input validation, which could lead to local privilege escalation without requiring additional privileges or u...

CVE-2024-34725

The CVE-2024-34725 entry describes a race condition in DevmemIntUnexportCtx of devicemem_server.c that can allow arbitrary code execution and local privilege escalation in the kernel, with no extra privileges or user interaction required. Connected records (Red Hat, NVD, CVE lists, OSV) confirm t...

CVE-2017-6274

CVE-2017-6274 affects NVIDIA Tegra kernel: CORE DVFS thermal driver missing bounds checks can cause an out-of-bounds write in the kernel. Documents indicate impact as denial of service or privilege escalation. Affected products are Jetson TX1/TX2 with Linux for Tegra; remediation is to update to ...

CVE-2020-0278

CVE-2020-0278 describes a possible out-of-bounds write due to an incorrect bounds check in Android components (notably ATF) as referenced in the 2020-09 Android bulletin. The NVD entry assigns a high/critical impact with remote network exploitation, no user interaction required. Connected records...

CVE-2020-0455

CVE-2020-0455 is an out-of-bounds write caused by a missing bounds check in the MediaTek vcu component (MediaTek MTK ALPS05324771) within Android. The issue is listed under Android’s 2020-12 security bulletin with patches recommended for patch levels 2020-12-01 or later; exact affected device mod...

CVE-2021-0527

CVE-2021-0527 concerns a memory management driver issue where a use-after-free can cause memory corruption, enabling local privilege escalation without additional privileges. The vulnerability is described across multiple sources as affecting Android devices with MediaTek memory management driver...

CVE-2021-0884

CVE-2021-0884 concerns the PowerVR kernel driver’s PVRSRVBridgePhysmemImportSparseDmaBuf function. A missing size check enables an integer overflow, which could permit out-of-bounds heap access and local escalation of privilege without additional execution privileges. Exploitation details (vector...

CVE-2022-20180

CVE-2022-20180 describes an elevation of privilege in Android kernel code, arising from a missing bounds check in mali_gralloc_reference.cpp that can allow arbitrary code execution on a local basis. The impact is local privilege escalation with high confidentiality/integrity/availability implicat...

CVE-2022-20579

CVE-2022-20579 concerns Android devices with the rild_exynos/ril service legacy code. The issue is described as a stack clash in RadioImpl::setCdmaBroadcastConfig within ril_service_legacy.cpp that can cause memory corruption. The resulting impact is local escalation of privilege, granting System...

CVE-2022-20583

CVE-2022-20583 affects the Android kernel DRM firmware path: in function ppmp_unprotect_mfcfw_buf there is an out-of-bounds write due to improper input validation. This could enable local escalation of privilege in S-EL1 with System privileges granted, and exploitation is described as not requiri...

CVE-2023-21047

CVE-2023-21047 affects Android kernel, with the issue localized to ConvertToHalMetadata in aidl_utils.cc where a missing bounds check enables an out-of-bounds read. This can lead to local information disclosure with system-level privileges required for exploitation and does not require user inter...

CVE-2023-21163

CVE-2023-21163 : A use-after-free in the PowerVR GPU driver PMR_ReadBytes (pmr.c) can enable arbitrary code execution and local kernel privilege escalation without user interaction. Exploitation details are not provided in the documents; no patch/version details are disclosed here. Affected: Powe...

CVE-2023-35663

CVE-2023-35663 describes a vulnerability in Init of protocolnetadapter.cpp where a missing bounds check may cause an out-of-bounds read. This can lead to remote information disclosure without requiring user interaction, per the provided description. The affected software/component is tied to Andr...

CVE-2024-47023

CVE-2024-47023 is an elevation-of-privilege in the Pixel modem due to a logic error in the code. The vulnerability could allow remote escalation with no user interaction. Pixel bulletin entries show the issue as EoP in the Modem subcomponent and indicate that applying security patch level 2024-10...

CVE-2018-9439

A use-after-free vulnerability exists in the Linux kernel 's network stack (specifically within __unregister_prot_hook and packet_release functions of af_packet.c) due to improper locking . This flaw could allow an attacker with System execution privileges to achieve a local escalation of privile...

CVE-2018-9463

The Google Android Kernel component is vulnerable to an elevation of privilege (EoP) via an out-of-bounds write in the sw49408_irq_runtime_engine_debug function of touch_sw49408.c. This issue stems from an incorrect bounds check and allows an attacker to gain elevated privileges, with System exec...

CVE-2021-0948

CVE-2021-0948 affects the PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver. The issue allows returning uninitialized kernel memory to user space, meaning the contents of that memory could disclose sensitive information. Supported by multiple connected sources (NVD/Red Hat/CVE ecosy...

CVE-2022-20146

CVE-2022-20146 affects Android via the information disclosure in the uploadFile function of FileUploadServiceImpl.java, caused by a confused deputy that can expose private files locally without extra privileges. Exploitation is local and does not require user interaction. Public details in the co...

CVE-2022-20231

CVE-2022-20231 affects the Android kernel on at least some Pixel/Android devices. The issue is an out-of-bounds write in smc_intc_request_fiq within arm_gic.c, caused by improper input validation, enabling local escalation of privilege with System execution privileges required; no user interactio...

CVE-2022-20371

Summary: CVE-2022-20371 affects the Android kernel, specifically the dm_bow_dtr path in dm-bow.c, due to a race-condition use-after-free. The vulnerability enables local escalation of privilege to System by exploiting a race condition, with no user interaction required. Documents consistently des...

CVE-2023-21155

The CVE-2023-21155 issue concerns the Android kernel component BuildSetRadioNode in protocolmiscbuilder.cpp, where a missing null check enables an out-of-bounds read that could cause local information disclosure with no extra privileges or user interaction. Several connected sources confirm the r...