CVE-2023-20924

CVE-2023-20924 describes a biometric authentication bypass in the Android kernel that could enable local escalation of privilege with physical access and no user interaction. The Pixel bulletin ties this issue to the Pixel 6a fingerprint scanner and marks it as Elevation of Privilege (EoP) with H...

CVE-2022-20460

CVE-2022-20460 affects the Android kernel (mprot_unmap) where improper input validation could corrupt the memory mapping. The consequence is local escalation of privilege, requiring System execution privileges, with no user interaction needed. The description appears across multiple sources (e.g....

CVE-2022-20562

The CVE-2022-20562 entry concerns a logic error in ap_input_processor.c within the Android kernel’s audio processing path that could allow recording audio during a phone call, leading to local information disclosure. The vulnerability is classified as Information Disclosure with a Local attack ve...

CVE-2022-20569

CVE-2022-20569 affects the Android kernel, specifically the thermal cooling device stats update path in the thermal_sysfs.c driver. The issue is described as an out-of-bounds write caused by improper input validation in the function thermal_cooling_device_stats_update, which could lead to local e...

CVE-2022-20603

CVE-2022-20603 affects the Android kernel: a possible out-of-bounds write in SetDecompContextDb (RohcDeCompContextOfRbId.cpp) due to a missing bounds check. This could enable remote code execution with System privileges, with no user interaction required. Connected sources (NVD, Red Hat, PRION, O...

CVE-2022-42508

CVE-2022-42508 affects Android kernel components via ProtocolCallBuilder::BuildSendUssd, where a missing bounds check enables an out-of-bounds write. This can lead to local elevation of privilege with SYSTEMExecution privileges required; exploitation does not require user interaction. The availab...

CVE-2022-42528

CVE-2022-42528 affects Android kernel (ffa_mrd_prot in shared_mem.c). A logic error can cause local information disclosure without additional privileges, with no user interaction required. The vulnerability is documented across multiple sources (Android Pixel kernel context, Red Hat/GNU reference...

CVE-2023-21062

CVE-2023-21062 describes an out-of-bounds read in the Android kernel, triggered by an incorrect bounds check in the DoSetTempEcc function of imsservice.cpp. The vulnerability can enable local escalation of privilege with System execution privileges required, and exploitation does not require user...

CVE-2023-35663

CVE-2023-35663 describes a vulnerability in Init of protocolnetadapter.cpp where a missing bounds check may cause an out-of-bounds read. This can lead to remote information disclosure without requiring user interaction, per the provided description. The affected software/component is tied to Andr...

CVE-2023-35690

CVE-2023-35690 affects RGXDestroyHWRTData in rgxta3d.c and can cause arbitrary code execution leading to local kernel privilege escalation with no user interaction. Connected sources confirm the issue and its kernel-level impact; no exploit details are provided beyond that. Android’s December 202...

CVE-2024-32906

CVE-2024-32906 affects Google Pixel/Android components: In the AcvpOnMessage function of avcp.cpp, uninitialized data may cause an Elevation of Privilege (EoP). This could enable local privilege escalation with no extra execution privileges and no user interaction required. The available connecte...

CVE-2020-0260

CVE-2020-0260 affects Android devices via the MediaTek Multimedia Processing Driver. The issue is an out-of-bounds read caused by an incorrect bounds check, enabling a potential memory access violation. The CVE is listed with high/severe impact (NVD: CVSSv3.1 base score 9.1, Critical) and Low/Net...

CVE-2020-0278

CVE-2020-0278 describes a possible out-of-bounds write due to an incorrect bounds check in Android components (notably ATF) as referenced in the 2020-09 Android bulletin. The NVD entry assigns a high/critical impact with remote network exploitation, no user interaction required. Connected records...

CVE-2021-0592

CVE-2021-0592 is a Widevine DRM code-execution vulnerability described across multiple sources as out-of-bounds writes caused by improper input validation in WideVine. The NVD entry lists a network attack vector with high impact and a base CVSS v3 score of 8.8 (I:H, A:H, C:H) and notes that user ...

CVE-2021-39653

CVE-2021-39653 describes a local elevation of privilege in the Android boot path, enabling boot with a hidden debug policy due to a missing user warning. The vulnerability is associated with the Android kernel/Bootloader surface (as reflected in Pixel bulletin categorization), and iled by the des...

CVE-2022-20156

CVE-2022-20156 is an elevation-of-privilege vulnerability in Android’s graphics path: specifically, an issue in the unflatten path of GraphicBuffer.cpp that allows arbitrary code execution via improper input validation. Exploitation is local and does not require user interaction. The impact is st...

CVE-2022-20175

CVE-2022-20175 is documented in the Pixel security bulletin under the Modem component, with Android bug ID A-209252491. It is classified as Information Disclosure (Type: ID) and rated Moderate; no exploit details are provided in the connected documents. The Pixel bulletin notes the patch level 20...

CVE-2022-20180

CVE-2022-20180 describes an elevation of privilege in Android kernel code, arising from a missing bounds check in mali_gralloc_reference.cpp that can allow arbitrary code execution on a local basis. The impact is local privilege escalation with high confidentiality/integrity/availability implicat...

CVE-2022-20403

CVE-2022-20403 targets Google Pixel devices via the Android modem component. The Pixel security bulletin classifies it as RCE (critical) in the Modem with a high impact; the NVD entry records a CVSSv3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The initial records list Product: And...

CVE-2022-20583

CVE-2022-20583 affects the Android kernel DRM firmware path: in function ppmp_unprotect_mfcfw_buf there is an out-of-bounds write due to improper input validation. This could enable local escalation of privilege in S-EL1 with System privileges granted, and exploitation is described as not requiri...

CVE-2022-42522

CVE-2022-42522 concerns the Android kernel, specifically a bound-check issue in DoSetCarrierConfig() inside miscservice.cpp. The flaw allows an out-of-bounds read, which could cause local information disclosure with system-level privileges required for exploitation; no user interaction is needed....

CVE-2022-42531

CVE-2022-42531 affects the Android kernel component gs_ldfw_load.c, specifically the mmu_map_for_fw path. The issue is described as a mitigation bypass due to Permissive Memory Allocation, enabling local elevation of privilege without additional execution privileges or user interaction. The vulne...

CVE-2023-21236

CVE-2023-21236 affects the Android kernel in the aoc_service_set_read_blocked function of aoc.c, where a missing bounds check enables an out-of-bounds write. This can lead to local elevation of privileges requiring System level execution. The vulnerability is associated with Android kernel compon...

CVE-2023-48401

CVE-2023-48401 affects the protocoladapter.cpp function GetSizeOfEenlRecords, causing an out-of-bounds read and potential local information disclosure with no user interaction. The available documents consistently describe the root cause as a bounds-check error and do not provide explicit exploit...

CVE-2023-48403

Summary: CVE-2023-48403 describes a possible out-of-bounds read due to a heap buffer overflow in the function sms_DecodeCodedTpMsg of sms_PduCodec.c. This could enable remote information disclosure without user interaction, as exploitation does not require additional privileges. The vulnerability...

CVE-2018-5873

The CVE-2018-5873 entry refers to a race-condition induced Use-After-Free in the Linux kernel before 4.11, specifically in __ns_get_path within fs/nsfs.c. This affects the mainline Linux kernel and Android builds derived from CAF for Android kernels (Android for MSM, Firefox OS for MSM, QRD Andro...

CVE-2018-9415

CVE-2018-9415 affects the Android kernel’s bus.c, specifically in driver_override_store and driver_override_show, where a double free can occur due to improper locking. This can enable local escalation of privilege to SYSTEM without user interaction. The vulnerability follows from upstream kernel...

CVE-2020-0446

CVE-2020-0446 refers to an Android vulnerability in the video decoder where a missing bounds check enables an out-of-bounds write. Affected component/area: MediaTek video decoder (Android SoC). Root cause: insufficient bounds checking in decoding paths leading to memory/write outside bounds. Impa...

CVE-2021-0468

CVE-2021-0468 maps to an elevation of privilege in LK (Little Kernel) used on Android devices. The root cause is an insecure default value in LK, enabling local privilege escalation when an attacker has physical access and no additional execution privileges are required; exploitation may require ...

CVE-2021-0527

CVE-2021-0527 concerns a memory management driver issue where a use-after-free can cause memory corruption, enabling local privilege escalation without additional privileges. The vulnerability is described across multiple sources as affecting Android devices with MediaTek memory management driver...

CVE-2021-0873

CVE-2021-0873 : A missing size check in PVRSRVBridgeRGXKickRS within the PowerVR kernel driver can cause an integer overflow, enabling out-of-bounds heap access. This may permit local escalation of privilege with no additional execution privileges required and without user interaction. The issue ...

CVE-2021-0880

CVE-2021-0880 involves the PowerVR kernel driver’s PVRSRVBridgeRGXKickTA3D, where a missing size check can trigger an integer overflow and out-of-bounds heap access. This enables local escalation of privilege with no additional execution privileges required and without user interaction. Connected...

CVE-2021-0884

CVE-2021-0884 concerns the PowerVR kernel driver’s PVRSRVBridgePhysmemImportSparseDmaBuf function. A missing size check enables an integer overflow, which could permit out-of-bounds heap access and local escalation of privilege without additional execution privileges. Exploitation details (vector...

CVE-2021-0948

CVE-2021-0948 affects the PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver. The issue allows returning uninitialized kernel memory to user space, meaning the contents of that memory could disclose sensitive information. Supported by multiple connected sources (NVD/Red Hat/CVE ecosy...

CVE-2022-20148

Technical details are not publicly available in the provided connected documents for CVE-2022-20148. Monitor for updates from upstream/kernel advisories; no specifics on affected products, versions, or remediation are included.

CVE-2022-20173

Technical details about CVE-2022-20173 are not provided in the supplied documents. No specifics on affected components or impact. Monitor for updates.

CVE-2022-20174

CVE-2022-20174 affects the Android kernel on Exynos GS101. The issue is in the function exynos_secEnv_init in mach-gs101.c , where an incorrect bounds check may cause an out-of-bounds read. This can lead to local information disclosure with system execution privileges required; exploitation is de...

CVE-2022-20579

CVE-2022-20579 concerns Android devices with the rild_exynos/ril service legacy code. The issue is described as a stack clash in RadioImpl::setCdmaBroadcastConfig within ril_service_legacy.cpp that can cause memory corruption. The resulting impact is local escalation of privilege, granting System...

CVE-2022-20581

CVE-2022-20581 affects the Pixel camera driver in the Android kernel. The issue is a use-after-free caused by a logic error, enabling local escalation of privilege with System-level execution privileges required. No user interaction is needed for exploitation. Documented exposure is limited to th...

CVE-2022-42519

CVE-2022-42519 affects the Android kernel component, specifically In CdmaBroadcastSmsConfigsRequestData::encode in cdmasmsdata.cpp. The root cause is a stack clash that can lead to memory corruption, enabling local escalation of privilege with SYSTEM privileges required; exploitation requires no ...

CVE-2023-21075

CVE-2023-21075 affects the Android kernel; the vulnerability is in get_svc_hash inside nan.cpp, caused by an out-of-bounds write due to a heap buffer overflow. The impact is local elevation of privilege with System-level execution privileges required; exploitation is possible without user interac...

CVE-2023-35656

CVE-2023-35656 affects the Android protocol stack component protocolembmsadapter.cpp, where a missing bounds check enables an out-of-bounds read. This trust boundary flaw can cause remote information disclosure without user interaction, as described across multiple CVE feeds. The available docume...

CVE-2023-35662

CVE-2023-35662 is a Pixel/Shannon baseband vulnerability described as an out-of-bounds write due to a buffer overflow that could enable remote code execution with no user interaction. The issue is reported as a Critical RCE in Google Pixel security guidance, and the Pixel Update Bulletin lists th...

CVE-2023-48399

CVE-2023-48399 describes an out-of-bounds read in ProtocolMiscATCommandAdapter::Init() (protocolmiscadapter.cpp) due to a missing bounds check. This can lead to local information disclosure and requires baseband firmware compromise for exploitation; no user interaction is needed. Multiple connect...

CVE-2024-32894

The CVE-2024-32894 entry describes a likely out-of-bounds read in bc_get_converted_received_bearer of bc_utilities.c, enabling remote information disclosure with no privileges or user interaction. Multiple connected records (Red Hat, NVD, OSV, CNNVD) reiterate the same root cause and impact, with...

CVE-2017-13165

CVE-2017-13165 is an elevation-of-privilege vulnerability in the Android kernel file system, affecting the Android kernel (Android ID A-31269937). It is documented across multiple sources (NVD, OSV/UBUNTU-CVE/CNVD) as an EoP issue. The Pixel/Nexus security bulletin lists CVE-2017-13165 under Kern...

CVE-2017-6274

CVE-2017-6274 affects NVIDIA Tegra kernel: CORE DVFS thermal driver missing bounds checks can cause an out-of-bounds write in the kernel. Documents indicate impact as denial of service or privilege escalation. Affected products are Jetson TX1/TX2 with Linux for Tegra; remediation is to update to ...

CVE-2020-0229

CVE-2020-0229 is an out-of-bounds write due to an incorrect bounds check in Android components, specifically affecting MediaTek mdla in the 2020-09-01/05 patch window. The vulnerability is categorized as High/CRITICAL impact with network attack requirements and no user interaction, per the NVD en...

CVE-2020-0283

CVE-2020-0283 describes a potential out-of-bounds write caused by a missing bounds check in affected Android components. Public vulnerability entries in NVD/NVD-derived feeds reiterate the issue with the Android platform. An OSV entry (ASB-A-163008257) also notes a possible out-of-bounds write du...

CVE-2022-20183

CVE-2022-20183 affects the Android kernel, specifically the hypx_create_blob_dmabuf path in faceauth_hypx.c. The issue is a missing bounds check that leads to an out-of-bounds write. This could enable local escalation of privilege with System execution privileges required; no user interaction is ...