CVE-2019-2215

CVE-2019-2215 is a use-after-free in the Android binder driver (binder.c) that enables local privilege escalation from an app to the Linux kernel. The issue is local, with no user interaction required, and exploitation may lead to memory corruption, denial of service, or escalation per the cited ...

CVE-2020-0069

The CVE-2020-0069 issue affects MediaTek CMDQ driver ioctl handlers in Android kernel, where insufficient input sanitization and missing SELinux restrictions can cause an out-of-bounds write, enabling local privilege escalation without extra privileges or user interaction. Public material confirm...

CVE-2019-9506

CVE-2019-9506 affects Bluetooth KNOB (Key Negotiation of Bluetooth) by allowing nearby attackers to influence encryption key length during BR/EDR negotiation, enabling potential eavesdropping and ciphertext injection. Connected sources show this vulnerability being acknowledged by Apple across iO...

CVE-2020-9081

CVE-2020-9081 affects Huawei smartphones with an improper authorization vulnerability that could allow bypassing app lock when performing a series of operations in a specific mode. The issue is associated with HWPSIRT-2019-12144. Public documents describe the affected product class as Huawei smar...

CVE-2020-9235

CVE-2020-9235 affects Huawei HONOR 20 PRO devices with information disclosure due to a design-level input-control flaw in multiple firmware versions. Affected versions include various 10.x builds (e.g., 10.1.0.230/231/212/213/214/160/225, across several codenames), with exploitation leading to pa...