CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Samsung Mobile MFC Charger Driver Race Condition Use-After-Free (CVE-2021-25394) Technical Analysis and Hardening Guide
[Affected Scope] Samsung mobile devices running firmware versions prior to SMR (Samsung Security Maintenance Release) MAY-2021 Release 1.
[Impact] A local attacker with compromised radio privileges can trigger a race condition to perform an arbitrary write in kernel memory, leading to local privilege escalation (LPE).
[Mitigation] Apply the official Samsung security update (SMR MAY-2021 Release 1 or later) and restrict unauthorized local application execution.
Samsung Android sec_log Kernel Information Disclosure Vulnerability Analysis (CVE-2021-25369)
[Affected Scope] Samsung Android devices prior to SMR (Samsung Maintenance Release) March 2021 Release 1
[Impact] Local attackers can bypass critical kernel protections like KASLR by reading sensitive kernel memory addresses and structures from the improperly secured sec_log file
[Mitigation] Apply the official Samsung SMR March 2021 Release 1 (or later) firmware update immediately, or restrict access permissions to the debug log node
Samsung Mobile Devices Clipboard Service Privilege Escalation and Arbitrary File Read/Write Vulnerability (CVE-2021-25337) Analysis & Mitigation Guide
[Affected Scope] Samsung mobile devices running software versions prior to SMR (Samsung Security Maintenance Release) Mar-2021 Release 1
[Impact] Untrusted local applications can bypass sandbox boundaries to read or write sensitive local files, potentially leading to data theft or privilege escalation
[Mitigation] Immediately apply the official Samsung security update (SMR Mar-2021 Release 1 or later)
Qualcomm MSM Audio Driver Stack-Based Buffer Overflow (CVE-2013-2597) Technical Advisory
[Affected Scope] Android devices powered by Qualcomm MSM chipsets running Linux kernel versions 2.6.x and 3.x
[Impact] Local attackers can exploit the /dev/msm_acdb device node to trigger a stack-based buffer overflow, leading to local privilege escalation (LPE) to root
[Mitigation] Apply official kernel patches from Qualcomm/Google, or restrict access permissions to the vulnerable /dev/msm_acdb device node
Linux Kernel ARM Platform get_user/put_user Missing Address Validation Arbitrary Kernel Memory Read/Write and Privilege Escalation (CVE-2013-6282)
[Affected Scope] Linux kernel before version 3.5.5 running on v6k and v7 ARM platforms, including affected Android devices
[Impact] Local attackers can exploit missing address validation in get_user and put_user APIs to read or write arbitrary kernel memory, leading to full root privilege escalation
[Mitigation] Upgrade the Linux kernel to version 3.5.5 or higher, or apply the latest security patches provided by your OS/device vendor
Linux Kernel fb_mmap Integer Overflow Local Privilege Escalation Vulnerability (CVE-2013-2596)
[Affected Scope] Linux kernel versions before 3.8.9, including certain Android 4.1.2 builds and embedded Linux systems
[Impact] Local attackers can exploit an integer overflow to map the entire kernel memory space with read-write permissions, leading to full root privilege escalation
[Mitigation] Upgrade the Linux kernel to version 3.8.9 or higher, and restrict access permissions to framebuffer device files
Android vold Daemon Signed Integer Validation Vulnerability Leading to Local Privilege Escalation (CVE-2011-1823, Gingerbreak)
[Affected Scope] Android OS 3.0 and 2.x versions prior to 2.3.4
[Impact] Local attackers can execute arbitrary code and escalate privileges to root by sending crafted netlink messages
[Mitigation] Upgrade the Android operating system to version 2.3.4 or later, or apply the official vendor security patches