Google Android vulnerabilities

CVE-2022-47336 [MEDIUM] CWE-120 CVE-2022-47336: In telecom service, there is a missing permission check. This could lead to local denial of service In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

CVE-2022-47464 [MEDIUM] CWE-120 CVE-2022-47464: In telecom service, there is a missing permission check. This could lead to local denial of service In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

CVE-2022-47466 [MEDIUM] CWE-476 CVE-2022-47466: In telecom service, there is a missing permission check. This could lead to local denial of service In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

CVE-2022-47465 [MEDIUM] CWE-476 CVE-2022-47465: In vdsp service, there is a missing permission check. This could lead to local denial of service in In vdsp service, there is a missing permission check. This could lead to local denial of service in vdsp service.

CVE-2022-47467 [MEDIUM] CWE-476 CVE-2022-47467: In telecom service, there is a missing permission check. This could lead to local denial of service In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

CVE-2022-47463 [MEDIUM] CWE-120 CVE-2022-47463: In telecom service, there is a missing permission check. This could lead to local denial of service In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

CVE-2022-47356 [MEDIUM] CWE-400 CVE-2022-47356: In log service, there is a missing permission check. This could lead to local denial of service in l In log service, there is a missing permission check. This could lead to local denial of service in log service.

CVE-2022-47354 [MEDIUM] CWE-400 CVE-2022-47354: In log service, there is a missing permission check. This could lead to local denial of service in l In log service, there is a missing permission check. This could lead to local denial of service in log service.

CVE-2022-47355 [MEDIUM] CWE-400 CVE-2022-47355: In log service, there is a missing permission check. This could lead to local denial of service in l In log service, there is a missing permission check. This could lead to local denial of service in log service.

CVE-2009-2656 [MEDIUM] CVE-2009-2656: Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remot Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service (network disconnection) via a crafted SMS message, as demonstrated by Collin Mulliner and Charlie Miller at Black Hat USA 2009.

CVE-2009-3698 [MEDIUM] CVE-2009-3698: An unspecified function in the Dalvik API in Android 1.5 and earlier allows remote attackers to caus An unspecified function in the Dalvik API in Android 1.5 and earlier allows remote attackers to cause a denial of service (system process restart) via a crafted application, possibly a related issue to CVE-2009-2656.

CVE-2017-0532 [MEDIUM] CWE-200 CVE-2017-0532: An information disclosure vulnerability in the MediaTek video codec driver could enable a local mali An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-32370398. References: M-ALPS03069985.

CVE-2016-8472 [MEDIUM] CWE-200 CVE-2016-8472: An information disclosure vulnerability in the MediaTek driver could enable a local malicious applic An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31531758. References: MT-ALPS02961384.

CVE-2016-8470 [MEDIUM] CWE-200 CVE-2016-8470: An information disclosure vulnerability in the MediaTek driver could enable a local malicious applic An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31528889. References: MT-ALPS02961395.

CVE-2016-8471 [MEDIUM] CWE-200 CVE-2016-8471: An information disclosure vulnerability in the MediaTek driver could enable a local malicious applic An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31528890. References: MT-ALPS02961380.

CVE-2022-39134 [MEDIUM] CWE-362 CVE-2022-39134: In audio driver, there is a use after free due to a race condition. This could lead to local denial In audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel.

CVE-2025-20765 [MEDIUM] CWE-362 CVE-2025-20765: In aee daemon, there is a possible system crash due to a race condition. This could lead to local de In aee daemon, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10190802; Issue ID: MSV-4833.

CVE-2022-20497 [MEDIUM] CWE-200 CVE-2022-20497: In updatePublicMode of NotificationLockscreenUserManagerImpl.java, there is a possible way to reveal In updatePublicMode of NotificationLockscreenUserManagerImpl.java, there is a possible way to reveal sensitive notifications on the lockscreen due to an incorrect state transition. This could lead to local information disclosure with physical access required and an app that runs above the lockscreen, with no additional execution privileges needed. U

CVE-2022-39900 [MEDIUM] CWE-284 CVE-2022-39900: Improper access control vulnerability in Nice Catch prior to SMR Dec-2022 Release 1 allows physical Improper access control vulnerability in Nice Catch prior to SMR Dec-2022 Release 1 allows physical attackers to access contents of all toast generated in the application installed in Secure Folder through Nice Catch.

CVE-2020-25048 [MEDIUM] CWE-306 CVE-2020-25048: An issue was discovered on Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software. In the Loc An issue was discovered on Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software. In the Lockscreen state, the Quick Share feature allows unauthenticated downloads, aka file injection. The Samsung ID is SVE-2020-17760 (August 2020).