CVE-2021-39714

CVE-2021-39714 affects the Ion Memory Manager in the Linux kernel used by Android. The issue in the function ion_buffer_kmap_get can cause a use-after-free due to an integer overflow, leading to local elevation of privilege with no user interaction. Impact is described as partial to high (per CVE...

CVE-2022-20222

CVE-2022-20222 affects Google Android (Android-12/Android-12L). Root cause: in read_attr_value of gatt_db.cc, a missing bounds check allows an out-of-bounds write. Impact: remote code execution without privileges and no user interaction required; attack vector is over the network. Public referenc...

CVE-2022-20357

The CVE-2022-20357 issue affects Android 12 (and 12L) and relates to writeToParcel in SurfaceControl.cpp, enabling local information disclosure due to uninitialized data. The impact is local information disclosure with no additional execution privileges needed; user interaction is not required. M...

CVE-2022-20449

CVE-2022-20449 affects Android 10–13, in the writeApplicationRestrictionsLAr path, where a path traversal flaw could overwrite system files, enabling local DoS with system privileges and no user interaction. Exploitation specifics are not detailed in the provided documents. Android bulletins note...

CVE-2022-20452

CVE-2022-20452 affects Android 13 in the BaseBundle.java method initializeFromParcelLocked, where a flaw (confused deputy) can allow arbitrary code execution, enabling local escalation of privilege without extra privileges or user interaction. Related evidence: CVE described in NVD/NV D represent...

CVE-2023-20909

CVE-2023-20909 describes a privilege-escalation flaw in Android’s RunningTasks.java: a missing privilege check could allow local information disclosure without requiring additional execution privileges. Affected: Android 11–13. Exploitation details, affected patches, and remediation are not speci...

CVE-2023-21268

CVE-2023-21268 concerns a path traversal issue in the Android MmsProvider.java update that can alter directory permissions. The vulnerability enables a local attacker to trigger a denial of service affecting SIM recognition, without requiring additional execution privileges. Exploitation is descr...

CVE-2024-43767

CVE-2024-43767 affects Skia’s SkBlurMaskFilterImpl.cpp, specifically prepare_to_draw_into_mask, where a bound/size handling flaw can cause a heap overflow. The vulnerability can lead to remote code execution with no additional privileges; exploitation is described as not requiring user interactio...

CVE-2024-53842

The CVE-2024-53842 issue affects Google Android components, specifically the cc_SendCcImsInfoIndMsg routine in cc_MmConManagement.c. The root cause is an out-of-bounds write due to missing bounds checking, enabling remote code execution with no privileges and no user interaction required. The vul...

CVE-2020-0022

CVE-2020-0022 describes an out-of-bounds write in Android’s Bluetooth stack (packet_fragmenter.cc, reassemble_and_dispatch) that could enable remote code execution over Bluetooth without user interaction, affecting Android 8.0–10. Connected sources contain concrete exploitation analyses and PoCs ...

CVE-2022-20115

The CVE-2022-20115 issue affects Android 12/12L and centers on TelephonyRegistry.java, in broadcastServiceStateChanged, where a missing permission check could disclose base station information without location permission. This enables local information disclosure with no user interaction required...

CVE-2022-20360

CVE-2022-20360 involves a missing permission check in the Android component SecureNfcPreferenceController.java (method setChecked), allowing local privilege escalation from the guest user without extra execution privileges. Affected products include Android 10, 11, 12, and 12L. The provided docum...

CVE-2022-20472

CVE-2022-20472 : In Android, the out-of-bounds read in LocaleListCache.cpp (toLanguageTag) arises from an incorrect bounds check and can lead to remote code execution with no user interaction. Affected Android versions include 10–13 (Android-10, Android-11, Android-12, Android-12L, Android-13). C...

CVE-2024-20006

CVE-2024-20006 affects MediaTek components (DA module) and is due to an out-of-bounds write caused by a missing bounds check. The vulnerability could enable local escalation of privilege with System execution privileges required; no user interaction is needed. Public references across Red Hat, NV...

CVE-2024-31316

CVE-2024-31316 affects the Android Framework, specifically the onResult path in AccountManagerService.java. The issue is a parcel mismatch that could allow an arbitrary background activity launch, resulting in local elevation of privilege without requiring additional execution privileges. No user...

CVE-2024-40669

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2025-20658

CVE-2025-20658 is a MediaTek DA component vulnerability caused by a logic error that enables a local elevation of privilege with physical access and no user interaction. The issue affects DA and can be exploited without additional execution privileges; CVSS 3.1 metrics indicate physical access re...

CVE-2017-13168

CVE-2017-13168 is an elevation of privilege vulnerability in the Linux kernel SCSI driver affecting the Android kernel (Android ID A-65023233). The connected Nessus/OpenVAS advisories corroborate a kernel SCSI driver flaw that can enable local privilege escalation. The root cause is an issue in t...

CVE-2020-0429

CVE-2020-0429 affects the Android/Linux kernel in the l2tp_core.c path, specifically the l2tp_session_delete and related functions. The vulnerability enables memory corruption via a use-after-free, which could allow local privilege escalation to SYSTEM. Exploitation is described as local with no ...

CVE-2021-39711

The CVE-2021-39711 entry concerns the Linux kernel (Android kernel variant in the initial report) with a vulnerability in bpf_prog_test_run_skb() in test_run.c. The root cause is an out-of-bounds read due to an Incorrect Size Value, which can lead to local information disclosure and potentially p...

CVE-2022-20116

CVE-2022-20116 affects Android 12/12L, arising from onEntryUpdated in OngoingCallController.kt where an intent redirection allows launching non-exported activities. This enables local elevation of privilege with no user interaction required, given User execution privileges. The issue is documente...

CVE-2022-20138

CVE-2022-20138 concerns a missing permission check in the Android framework, specifically in ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java. The issue allows an unprivileged app to send the MANAGED_PROFILE_PROVISIONED intent, potentially enabling local elevation of privileg...

CVE-2022-20220

CVE-2022-20220 affects Android 12/12L where the OpenFile path traversal in CallLogProvider.java can bypass permissions, enabling local escalation of privilege with user privileges and no user interaction required. The root cause is a path traversal fault in openFile that could allow access to pri...

CVE-2024-43770

CVE-2024-43770 stems from a missing bounds check in the Bluetooth GATT server path (gatts_process_find_info in gatt_sr.cc), causing an out-of-bounds write. This can enable remote code execution on Android devices with no user interaction and without extra privileges. The issue is classified as a ...

CVE-2019-2096

CVE-2019-2096 affects Google Android components, specifically linked to a memory corruption vulnerability in EffectBundle.cpp caused by a double free. This could enable local escalation of privilege in the Android audio server with no extra execution privileges and no user interaction required. A...

CVE-2019-2099

CVE-2019-2099 affects Android systems due to an out-of-bounds write in nfa_rw_store_ndef_rx_buf within nfa_rw_act.cc. The underlying cause is a missing bounds check, allowing local elevation of privilege with no extra execution privileges required; exploitation requires user interaction. Affected...

CVE-2021-39674

This CVE (CVE-2021-39674) affects Android 10–12 and involves a use-after-free in btm_sec_connected/btm_sec_disconnected within btm_sec.cc, enabling local elevation of privilege. Exploitation requires user privileges but not user interaction. There is no public exploit code in the provided docs. R...

CVE-2021-39809

CVE-2021-39809 affects Android platforms (Android 10–12, including 12L). The issue resides in avrc_ctrl_pars_vendor_rsp within avrc_pars_ct.cc, where a missing bounds check leads to an out-of-bounds read. This can cause remote information disclosure without requiring user interaction or additiona...

CVE-2022-20224

CVE-2022-20224 is a reported information-disclosure vulnerability in the Android Bluetooth stack. It stems from an out-of-bounds read in AT_SKIP_REST of bta_hf_client_at.cc due to an insufficient bounds check. The issue could allow remote information disclosure without any user interaction, requi...

CVE-2022-20227

CVE-2022-20227 affects the Android kernel USB driver: a heap-based overflow leads to an out-of-bounds read. This can enable local information disclosure with user privileges; exploitation does not require user interaction. Public details reference the upstream kernel and the Android 2022-07-01 bu...

CVE-2022-20228

CVE-2022-20228 affects Android (Android-12/12L) via use-after-free in C2DmaBufAllocator.cpp, causing memory corruption and potential remote information disclosure. Exploitation requires user interaction; no privileges are required beyond normal access. Mitigation: apply Android patch level 2022-0...

CVE-2022-20494

The CVE-2022-20494 issue affects Android (Android 10–13) and involves the AutomaticZenRule component (AutomaticZenRule.java). The described vulnerability is a possible persistent DoS caused by resource exhaustion, enabling a local denial of service with no user interaction required. Impact is lim...

CVE-2023-40135

CVE-2023-40135 affects Android, where in SaveUi.java’s applyCustomDescription a logic error (confused deputy) can allow viewing another user’s images. This results in local information disclosure with no extra execution privileges and no user interaction required. The issue is documented in multi...

CVE-2019-2230

CVE-2019-2230 affects Android 10 (NfcNative code in NativeNfcManager.cpp). The vulnerability arises from a use-after-free in nfcManager_routeAid and nfcManager_unrouteAid, leading to possible memory reuse and remote information disclosure without extra user interaction. Connected sources confirm ...

CVE-2021-39663

CVE-2021-39663 affects Android 10 and is linked to MediaProvider.java’s openFileAndEnforcePathPermissionsHelper. The vulnerability describes a bypass of a permissions check caused by a confused deputy, enabling local elevation of privilege without user interaction. The Android CVE entry documents...

CVE-2021-39700

CVE-2021-39700 affects Android devices (Android 10–12) via a logic error in adbd.te that corrupted CTS Listening Ports Test results, enabling local information disclosure without extra privileges. The issue is classified as Information Disclosure (Type: ID) with a Medium severity in the Chromecas...

CVE-2021-39800

CVE-2021-39800 affects the Android kernel ION component (ion_ioctl.c) where a use-after-free can leak kernel head data, enabling local information disclosure without extra privileges or user interaction. Exploitation details are not provided in the supplied documents. Impact is limited to local d...

CVE-2022-20112

The CVE-2022-20112 issue is in Android’s PrivateDnsPreferenceController.java getAvailabilityStatus. A guest user can bypass permissions to change private DNS settings, enabling local escalation of privilege with no additional execution privileges and no user interaction required. Affected Android...

CVE-2023-21103

CVE-2023-21103 involves a DoS in Android’s PhoneAccountRegistrar.registerPhoneAccount due to uncaught exceptions while parsing persisted user data. Affects Android 11–13; vulnerable component is PhoneAccountRegistrar.java. The issue yields local persistent denial of service with no extra privileg...

CVE-2023-21250

CVE-2023-21250 affects the Android Bluetooth stack (gatt_end_operation in gatt_utils.cc). The root cause is an out-of-bounds write due to a missing bounds check, enabling remote code execution with no privileges and no user interaction required. Android security bulletins for 2023-07-01/07-05 ind...

CVE-2020-8860

CVE-2020-8860 affects Samsung Galaxy S10 devices with Exynos SoCs (G973FXXS3ASJA etc.). The flaw is a buffer overflow in the Call Control Setup messages, caused by inadequate validation of the length of user-supplied data copied into a fixed-length, stack-based buffer. This enables remote code ex...

CVE-2021-39798

CVE-2021-39798 affects Google Android 12 and Android 12L. The flaw is in Bitmap_createFromParcel (Bitmap.cpp) where a missing bounds check enables arbitrary code execution, leading to local escalation of privileges with user-level rights and no user interaction required. Exploitation would occur ...

CVE-2022-20352

The CVE-2022-20352 entry refers to a local information-disclosure flaw in Android 12/12L via a missing permission check in LocationManagerService.addProviderRequestListener. It can reveal which packages request location data (information disclosure with no extra execution privileges). Connected s...

CVE-2022-20453

CVE-2022-20453 affects Android 10–13 (Android-10 to Android-13) and involves a path traversal in MmsProvider.java that can constrict directory permissions, enabling local DoS of SIM recognition. The exploit requires user interaction and does not grant additional code execution privileges. The bas...

CVE-2022-20461

CVE-2022-20461 affects Android BLE code: in pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp there is a possible out-of-bounds read due to type confusion. The cited impact is local escalation of privilege via BLE with no additional execution privileges required and no user int...

CVE-2022-20479

CVE-2022-20479 affects Android’s NotificationChannel.java (NotificationChannel) and is categorized as an Elevation of Privilege (EoP) issue due to a resource exhaustion bug that can enable local privilege escalation without user interaction. Affected: Android-10 through Android-13; root cause is ...

CVE-2023-20950

CVE-2023-20950 affects Android (Android-11, Android-12, Android-12L) in AlarmManagerActivity.java, enabling a bypass of background activity launch restrictions via a pendingIntent. This could cause local elevation of privilege with no additional privileges or user interaction required. The Androi...

CVE-2023-40077

CVE-2023-40077 is a race-condition–driven Use-After-Free (UAF) vulnerability in multiple functions of MetaDataBase.cpp. The flaw enables remote escalation of privilege with no extra execution privileges and no user interaction required. Documented sources (NVD/CNVD/OSV/PRION/PRIOR) confirm the is...

CVE-2023-40125

The CVE-2023-40125 entry concerns Android: a vulnerability in ApnEditor.java that allows a Guest user to change the APN due to a permission bypass, enabling local elevation of privilege with no extra execution privileges or user interaction required. Affected component is the ApnEditor.java logic...

CVE-2023-40128

CVE-2023-40128 is an Android elevation-of-privilege weakness caused by an out-of-bounds write (heap buffer overflow) in xmlregexp.c. The vulnerability enables local privilege escalation without extra user interaction. Public details in the provided documents do not specify affected products/versi...