CVE-2022-20449

CVE-2022-20449 affects Android 10–13, in the writeApplicationRestrictionsLAr path, where a path traversal flaw could overwrite system files, enabling local DoS with system privileges and no user interaction. Exploitation specifics are not detailed in the provided documents. Android bulletins note...

CVE-2023-20933

CVE-2023-20933 affects Google Android: a use-after-free in several MediaCodec.cpp functions can lead to memory corruption and local elevation of privilege without extra exploitation steps. Affected are Android 10–13 (including 12L/12). The issue is described as a memory corruption vulnerability i...

CVE-2023-21287

The CVE-2023-21287 entry concerns a type confusion vulnerability in Google Android that could allow remote code execution without user interaction. Connected sources corroborate that this issue is listed under the Android security bulletin as a high-severity, remote code execution vulnerability a...

CVE-2016-3841

CVE-2016-3841 affects the Linux kernel IPv6 stack before 4.3.3. A crafted sendmsg can mishandle options data, allowing local users to gain privileges or cause a denial of service via a use-after-free leading to a system crash. Public documents (e.g., MiracleLinux AXSA-2016-1135:09 and Unity Linux...

CVE-2019-1986

CVE-2019-1986 affects the Android Framework, specifically a vulnerability in SkSwizzler (SkSwizzler.cpp) where a missing bounds check enables an out-of-bounds write. This can allow remote escalation of privilege to system_server, with execution in a privileged context, requiring user interaction ...

CVE-2019-2090

CVE-2019-2090 affects Android Framework code (PackageManagerService.java) where isPackageDeviceAdminOnAnyUser lacks a necessary permissions check, enabling local elevation of privilege without extra permissions. Documented impact is local compromise with high impact on confidentiality, integrity,...

CVE-2019-2217

CVE-2019-2217 is a memory corruption via use-after-free in GpuStats.cpp (setCpuVulkanInUse) leading to local privilege escalation on Android 10. Public docs confirm the flaw is in the Android Framework (GpuStats.cpp) and cause is memory corruption with use-after-free. The Android Security Bulleti...

CVE-2022-20113

CVE-2022-20113 affects Android 12/12L via a logic error in mPreference of DefaultUsbConfigurationPreferenceController.java that could enable file transfer mode, enabling local elevation of privilege with no extra execution privileges and no user interaction required. Documented impact is high (CV...

CVE-2022-20126

The vulnerability CVE-2022-20126 affects Android (Android-10 to Android-12L) via the Bluetooth stack: in AdapterService.java, setScanMode can enable Bluetooth discovery mode without user interaction due to a missing permission check. This creates local elevation of privilege with user execution p...

CVE-2022-20137

CVE-2022-20137 affects Android 12/Android 12L. The issue resides in NetworkProviderSettings.java onCreateContextMenu, where a missing permission check could allow a non-owner user to change WiFi settings, enabling local elevation of privilege. Exploitation requires user interaction, and the impac...

CVE-2022-20361

CVE-2022-20361 describes a vulnerability in Android Bluetooth stack (btif_dm_auth_cmpl_evt in btif_dm.cc) related to Cross-Transport Key Derivation. Root cause is a weakness in the Bluetooth protocol implementation, enabling remote elevation of privilege with no user interaction. Affected product...

CVE-2023-40138

CVE-2023-40138 affects the FillUi component (FillUi.java) in Android, enabling information disclosure by viewing another user’s images via a confused deputy. The vulnerability can be exploited locally without user interaction, and the impact is local information exposure with no added executable ...

CVE-2024-40672

CVE-2024-40672 affects Android’s ChooserActivity.java, where a missing permission check in onCreate could bypass factory reset protections. This enables local elevation of privilege with no extra execution privileges or user interaction required. Documented impact is a local EoP; exploitation det...

CVE-2013-4710

CVE-2013-4710 affects Android WebView implementations (Android 3.0–4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank and other devices). The issue arises from improper WebView handling of addJavascriptInterface, enabling remote attackers to call arbitrary Java object methods or cause a ...

CVE-2016-3822

CVE-2016-3822 affects jhead/libjhead (exif.c) across Android 4.x before 4.4.4, 5.x before 5.0.2/5.0.x, 5.1.x before 5.1.1, and 6.x before 2016-08-01. The issue is an out-of-bounds access via crafted EXIF data, enabling remote code execution or a denial of service. Public advisories and vendor upd...

CVE-2017-13220

CVE-2017-13220 is described in connected advisories as an elevation of privilege in the Upstream kernel bluez affecting the Android kernel (Android ID A-63527053). The Nessus/OpenVAS entries reference this CVE alongside other Linux kernel CVEs, confirming a kernel-related issue, but the provided ...

CVE-2019-2184

CVE-2019-2184 affects Android’s Media framework, specifically PV_DecodePredictedIntraDC in dec_pred_intra_dc.cpp. The issue is an out-of-bounds write caused by a missing bounds check, leading to remote code execution with no special privileges required. Exploitation is described as requiring user...

CVE-2021-39623

CVE-2021-39623 (Android Media Framework) : An out-of-bounds write in SimpleDecodingSource.cpp (doRead) due to an incorrect bounds check could enable remote escalation of privilege with no user interaction. Affected: Android versions 9–12. Exploit risk is described by the CVE entry (CVSS up to 9.8...

CVE-2021-39668

CVE-2021-39668 is an Android elevation-of-privilege issue identified in onActivityViewReady within DetailDialog.kt, caused by an Intent Redirect (confused deputy) that could allow local escalation of privileges to the System UI. Affected versions are Android 11 and 12; exploitation requires user ...

CVE-2021-39690

CVE-2021-39690 affects Android 12, where the vulnerability lies in setDisplayPadding within WallpaperManagerService.java. The issue permits a persistent Denial of Service (DoS) due to improper input validation, with local attack vector and no user interaction required. Exploitation status is not ...

CVE-2021-39703

CVE-2021-39703 affects Android 12 through a flaw in UsbDeviceManager.updateState that can cause unauthorized file access via a confused deputy, enabling local EoP with no extra execution privileges and no user interaction. Public fix references appear in Android security bulletins; patch levels 2...

CVE-2022-20129

The CVE-2022-20129 issue affects Android (Android-10, Android-11, Android-12, Android-12L) in the PhoneAccountRegistrar.java function registerPhoneAccount. Root cause: improper input validation that can prevent a user from selecting a phone account, leading to local Denial of Service without requ...

CVE-2023-21252

CVE-2023-21252 affects Android’s WifiConfigurationUtil.java, specifically its validatePassword function. The root cause is improper input validation, which can cause the device to boot loop and result in local denial of service without requiring user interaction. The issue is categorized as DoS w...

CVE-2019-2092

CVE-2019-2092 affects the Android Framework, specifically DevicePolicyManagerService.java’s isSeparateProfileChallengeAllowed, where a missing permission check enables local elevation of privilege. Impact is local EoP with no extra privileges required, no user interaction needed. Affected version...

CVE-2020-0429

CVE-2020-0429 affects the Android/Linux kernel in the l2tp_core.c path, specifically the l2tp_session_delete and related functions. The vulnerability enables memory corruption via a use-after-free, which could allow local privilege escalation to SYSTEM. Exploitation is described as local with no ...

CVE-2021-0928

CVE-2021-0928 concerns an Elevation of Privilege in Android’s Media Framework. The vulnerability arises from a mismatch in parcel serialization/deserialization in createFromParcel of OutputConfiguration.java due to improper input validation, allowing local privilege elevation with no authenticate...

CVE-2021-39667

CVE-2021-39667 is a vulnerability in the Android Media Framework. The issue arises from an out-of-bounds write caused by a heap buffer overflow in ih264d_parse_decode_slice (ih264d_parse_slice.c), enabling potential remote information disclosure. Exploitation requires user interaction. Affected p...

CVE-2023-21268

CVE-2023-21268 concerns a path traversal issue in the Android MmsProvider.java update that can alter directory permissions. The vulnerability enables a local attacker to trigger a denial of service affecting SIM recognition, without requiring additional execution privileges. Exploitation is descr...

CVE-2019-2110

CVE-2019-2110 affects Android 9 (Android-9) and is tied to ScreenRotationAnimation.java. The vulnerability arises from a missing permission check in ScreenRotationAnimation, enabling local information disclosure without requiring user interaction. The NVD entry lists a reachable impact of PARTIAL...

CVE-2019-2229

CVE-2019-2229 affects Android (Android-8.0/8.1/9/10) where BaseWidgetProvider.java::updateWidget can leak user data due to a missing permission check. The vulnerability enables local information disclosure without additional execution privileges and does not require user interaction. Exploitation...

CVE-2021-39709

CVE-2021-39709 is an Android 12 elevation-of-privilege issue. The root cause is an unsafe PendingIntent in SipAccountRegistry.java’s sendSipAccountsRemovedNotification, enabling a possible permission bypass. The vulnerability could allow local escalation to a higher privilege where attacker needs...

CVE-2021-39714

CVE-2021-39714 affects the Ion Memory Manager in the Linux kernel used by Android. The issue in the function ion_buffer_kmap_get can cause a use-after-free due to an integer overflow, leading to local elevation of privilege with no user interaction. Impact is described as partial to high (per CVE...

CVE-2022-20143

CVE-2022-20143 concerns a DoS vulnerability in Android’s ZenModeHelper.addAutomaticZenRule due to resource exhaustion. The initial entry and connected documents identify the root cause as resource exhaustion in addAutomaticZenRule and describe a local denial of service that can be triggered with ...

CVE-2023-21111

CVE-2023-21111 affects Android 11–13 and is caused by improper input validation in several functions of PhoneAccountRegistrar.java, enabling a local Denial of Service without extra privileges or user interaction. The available sources confirm the affected component and the root cause, and describ...

CVE-2019-2106

CVE-2019-2106 affects Android’s Media framework: in ihevcd_sao_shift_ctb of ihevcd_sao.c, a missing bounds check can cause an out-of-bounds write leading to remote code execution. Impacted Android versions include 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. The issue is described in the July 2019 Android...

CVE-2019-2187

CVE-2019-2187 affects Android where an out-of-bounds read can occur in nfc_ncif_decode_rf_params in nfc_ncif.cc due to an integer underflow, enabling local information disclosure without user interaction. Affected Android versions include 7.1.1, 7.1.2, 8.0, 8.1, 9, and 10. The Red Hat and CVE rec...

CVE-2020-0432

CVE-2020-0432 affects the Android kernel networking.c function skb_to_mamac, where an integer overflow can cause an out-of-bounds write. The consequence specified is local privilege escalation with no extra execution privileges or user interaction required. The provided connected advisories (Unit...

CVE-2021-39662

Summary (CVE-2021-39662): In Android’s MediaProvider (MediaProvider.java), a missing permission check in checkUriPermission could allow local elevation of privilege by accessing media provider collections. The issue is exploitable with local access and does not require user interaction, as stated...

CVE-2021-39689

CVE-2021-39689 is a local elevation-of-privilege vulnerability reported in Android 12, due to a logic error in multiple functions of odsign_main.cpp. It could allow a local attacker with system privileges to gain full control without user interaction. The Android bulletin notes this issue under t...

CVE-2021-39758

Summary of CVE-2021-39758 : In Android 12L, WindowManager could start a foreground activity from the background due to a missing permission check, enabling local elevation of privilege without user interaction. The Android bulletin classifies this issue under Framework/EoP with a moderate severit...

CVE-2022-20005

CVE-2022-20005 is an Android elevation-of-privilege issue in PackageInstallerSession.java (validateApkInstallLocked). The vulnerability allows a mismatch between running code and a parsed APK, enabling local privilege escalation with no user interaction required, on Android 10, 11, 12 and 12L. Th...

CVE-2022-20133

The CVE-2022-20133 entry affects Android (Android-10, 11, 12, 12L) in the AdapterService.java function setDiscoverableTimeout. The root cause is a missing permission check that enables bypassing user interaction, allowing local elevation of privilege with User privileges. Exploitation is claimed ...

CVE-2022-20477

CVE-2022-20477 affects Android 13, due to a logic error in KeyguardNotificationVisibilityProvider.kt (shouldHideNotification) that can cause hidden notifications to be shown. This may enable local elevation of privilege with no extra execution privileges and no user interaction required. Public d...

CVE-2023-21130

CVE-2023-21130 describes a buffer overflow in the Android Bluetooth stack (btm_ble_periodic_adv_sync_lost in btm_ble_gap.cc) that could allow remote code execution without user interaction or additional privileges on Android 13. Multiple sources consistently identify this as a Critical/RCE issue ...

CVE-2023-40116

CVE-2023-40116 affects Android via a logic error in PipTaskOrganizer.java (onTaskAppeared), enabling bypass of background activity launch restrictions and resulting in local elevation of privilege without additional execution privileges or user interaction. Public sources in the Connected documen...

CVE-2022-20218

CVE-2022-20218 affects Android 12/12L, with the PermissionController component vulnerable due to a logic error that can allow obtaining and retaining permissions without user consent. This yields local elevation of privilege and, per sources, requires user interaction to exploit. AOSP/Android Bul...

CVE-2022-20222

CVE-2022-20222 affects Google Android (Android-12/Android-12L). Root cause: in read_attr_value of gatt_db.cc, a missing bounds check allows an out-of-bounds write. Impact: remote code execution without privileges and no user interaction required; attack vector is over the network. Public referenc...

CVE-2022-20224

CVE-2022-20224 is a reported information-disclosure vulnerability in the Android Bluetooth stack. It stems from an out-of-bounds read in AT_SKIP_REST of bta_hf_client_at.cc due to an insufficient bounds check. The issue could allow remote information disclosure without any user interaction, requi...

CVE-2022-20357

The CVE-2022-20357 issue affects Android 12 (and 12L) and relates to writeToParcel in SurfaceControl.cpp, enabling local information disclosure due to uninitialized data. The impact is local information disclosure with no additional execution privileges needed; user interaction is not required. M...

CVE-2022-20452

CVE-2022-20452 affects Android 13 in the BaseBundle.java method initializeFromParcelLocked, where a flaw (confused deputy) can allow arbitrary code execution, enabling local escalation of privilege without extra privileges or user interaction. Related evidence: CVE described in NVD/NV D represent...