CVE-2024-49745

CVE-2024-49745: In growData of Parcel.cpp, an out-of-bounds write may allow local privilege escalation without user interaction. Exploitation details are not provided in the documents; no active exploit status is stated. Android security bulletins (2025-01-01 and 2025-01-05 patch levels) include ...

CVE-2019-2096

CVE-2019-2096 affects Google Android components, specifically linked to a memory corruption vulnerability in EffectBundle.cpp caused by a double free. This could enable local escalation of privilege in the Android audio server with no extra execution privileges and no user interaction required. A...

CVE-2021-39674

This CVE (CVE-2021-39674) affects Android 10–12 and involves a use-after-free in btm_sec_connected/btm_sec_disconnected within btm_sec.cc, enabling local elevation of privilege. Exploitation requires user privileges but not user interaction. There is no public exploit code in the provided docs. R...

CVE-2022-20112

The CVE-2022-20112 issue is in Android’s PrivateDnsPreferenceController.java getAvailabilityStatus. A guest user can bypass permissions to change private DNS settings, enabling local escalation of privilege with no additional execution privileges and no user interaction required. Affected Android...

CVE-2023-21291

CVE-2023-21291 affects Android’s Notification.java (visitUris in the framework). The vulnerability arises from a missing permission check, potentially allowing a local attacker to reveal image contents belonging to another user. This is described as a local information disclosure with User privil...

CVE-2021-39663

CVE-2021-39663 affects Android 10 and is linked to MediaProvider.java’s openFileAndEnforcePathPermissionsHelper. The vulnerability describes a bypass of a permissions check caused by a confused deputy, enabling local elevation of privilege without user interaction. The Android CVE entry documents...

CVE-2021-39670

CVE-2021-39670: In Android, the setStream method of WallpaperManager.java can trigger a permanent DoS via improper input validation, requiring local access and no user interaction. Affected: Android 12 and Android 12L (Android ID A-204087139). The issue is described across multiple sources (NVD/N...

CVE-2021-39700

CVE-2021-39700 affects Android devices (Android 10–12) via a logic error in adbd.te that corrupted CTS Listening Ports Test results, enabling local information disclosure without extra privileges. The issue is classified as Information Disclosure (Type: ID) with a Medium severity in the Chromecas...

CVE-2022-20227

CVE-2022-20227 affects the Android kernel USB driver: a heap-based overflow leads to an out-of-bounds read. This can enable local information disclosure with user privileges; exploitation does not require user interaction. Public details reference the upstream kernel and the Android 2022-07-01 bu...

CVE-2022-20350

The CVE-2022-20350 issue affects Android’s NotificationAccessConfirmationActivity.java. It describes an input validation flaw that can trick a user into granting notification access to the wrong app, causing local information disclosure with high confidentiality impact. Affected Android versions:...

CVE-2023-35673

CVE-2023-35673 involves a potential out-of-bounds write in the Bluetooth stack (gatt_sr.cc: build_read_multi_rsp) caused by an integer overflow. This could enable remote code execution on nearby devices without user interaction. The vulnerability affects Android-related Bluetooth components as de...

CVE-2023-40125

The CVE-2023-40125 entry concerns Android: a vulnerability in ApnEditor.java that allows a Guest user to change the APN due to a permission bypass, enabling local elevation of privilege with no extra execution privileges or user interaction required. Affected component is the ApnEditor.java logic...

CVE-2017-0539

CVE-2017-0539: A remote code execution in libhevc/Mediaserver on Android. A crafted media file can trigger memory corruption within Mediaserver. Affected Android versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Impact: potential remote code execution within Mediaserver. Remediation: patches releas...

CVE-2021-39696

CVE-2021-39696 affects Android (10–12) via Task.java, enabling local privilege escalation (confused deputy) with no extra execution privileges; exploitation requires user interaction. CVSS3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base score 7.8 (High). The vulnerability is documented in Android s...

CVE-2021-39798

CVE-2021-39798 affects Google Android 12 and Android 12L. The flaw is in Bitmap_createFromParcel (Bitmap.cpp) where a missing bounds check enables arbitrary code execution, leading to local escalation of privileges with user-level rights and no user interaction required. Exploitation would occur ...

CVE-2021-39800

CVE-2021-39800 affects the Android kernel ION component (ion_ioctl.c) where a use-after-free can leak kernel head data, enabling local information disclosure without extra privileges or user interaction. Exploitation details are not provided in the supplied documents. Impact is limited to local d...

CVE-2022-20490

CVE-2022-20490 affects Android devices via the file AutomaticZenRule.java, with a vulnerability caused by resource exhaustion that can cause a failure to persist permissions settings. The impact is a local escalation of privilege, requiring local access with no additional execution privileges and...

CVE-2023-20904

The CVE-2023-20904 issue is in Android SettingsActivity.getTrampolineIntent, where an Intent mismatch can launch an arbitrary activity. This could enable local privilege escalation without extra privileges or user interaction. Affected: Android-12L and Android-13. According to Android security bu...

CVE-2023-20916

CVE-2023-20916 affects Android 12 and Android 12L. In the LauncherAppsService.getMainActivityLaunchIntent function, there is a reported bypass of restrictions on starting activities from the background due to a missing permission check. This could enable local elevation of privilege with no addit...

CVE-2024-40677

CVE-2024-40677 concerns the Android shouldSkipForInitialSUW path in AdvancedPowerUsageDetail.java. The issue enables bypassing factory reset protections via a missing permission check, enabling local elevation of privilege with no extra execution privileges required and no user interaction needed...

CVE-2018-9422

CVE-2018-9422 concerns a use-after-free in get_futex_key() in futex.c, causing a local privilege escalation on Android/kernel environments. The vulnerability is triggered due to improper locking in futex.c and can be exploited with no user interaction. Connected sources (Unity Linux Nessus plugin...

CVE-2019-2093

The CVE-2019-2093 issue affects Android 9 in the Media/ndc path: In huff_dec_1D of nlc_dec.cpp there is a potential out-of-bounds write caused by a missing bounds check, enabling remote code execution with no extra privileges and requiring user interaction to exploit. Connected sources (NVD/NVD v...

CVE-2021-39797

CVE-2021-39797 affects Google Android 12/12L and is tied to a logic error in LauncherApps.java that enables local elevation of privilege. The issue can be exploited locally without user interaction, granting higher privileges due to a flawed control path in several LauncherApps functions. The vul...

CVE-2022-20223

CVE-2022-20223 affects Android (10–12/12L). Root cause: an obfuscated proxy in AppRestrictionsFragment.java (assertSafeToStartCustomActivity) may allow starting a phone call without required permissions, due to a confused deputy, enabling local elevation of privilege with no extra execution privi...

CVE-2022-20461

CVE-2022-20461 affects Android BLE code: in pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp there is a possible out-of-bounds read due to type confusion. The cited impact is local escalation of privilege via BLE with no additional execution privileges required and no user int...

CVE-2022-47339

CVE-2022-47339 describes a local OS command injection in the cmd_services component due to missing permission checks, enabling local privilege escalation to a root/system level on affected Unisoc/Android devices. The CVSS vector indicates LOCAL access, low attack complexity, but HIGH privileges r...

CVE-2023-21110

The CVE 2023-21110 entry documents an elevation-of-privilege in Android related to SnoozeHelper.java, enabling a local attacker to gain notification access due to resource exhaustion. Affected products include Android 11, 12, and 12L/13, with a local-exploit path that does not require user intera...

CVE-2023-21115

CVE-2023-21115: In Android, the vulnerability stems from a weakness in btm_sec_encrypt_change in btm_sec.cc that allows downgrading the link key type due to improper crypto, enabling paired-device elevation of privilege without user interaction. Affected: Android 11, 12, 12L. Status: remediation ...

CVE-2023-40122

CVE-2023-40122 : Affected component is Android’s SaveUi.java (applyCustomDescription). The issue enables a confused deputy to disclose another user’s images via local information disclosure, requiring no additional execution privileges and no user interaction. This is a local vulnerability; no re...

CVE-2024-23704

CVE-2024-23704 is an elevation-of-privilege vulnerability in Android’s WifiDialogActivity.onCreate that bypasses DISALLOW_ADD_WIFI_CONFIG due to a missing permission check. Exploitation requires local access with no user interaction; no remote vector is described. Multiple connected sources (NVD,...

CVE-2015-9016

CVE-2015-9016 : In the upstream Linux kernel, the use-after-free race in blk_mq_tag_to_rq (blk-mq.c) can occur when a request was already freed by blk_mq_complete_request . This race enables local escalation of privilege on affected systems, with the Android kernel explicitly mentioned as impacte...

CVE-2019-2095

CVE-2019-2095 affects Android 9 (Pie) with a race condition in SkPixelRef.cpp leading to a use-after-free and potential remote code execution. The vulnerability is triggered via callGenIDChangeListeners and related paths; exploitation requires user interaction. The Android Security Bulletin (June...

CVE-2019-2183

CVE-2019-2183 details (Android) : The issue resides in the RegisteredServicesCache.java, specifically in generateServicesMap, where a caching optimization can bypass account protection, enabling local information disclosure without extra privileges and with no user interaction. Affected platforms...

CVE-2020-0110

CVE-2020-0110 affects the Android kernel, with the issue located in psi_write of psi.c. The flaw is an out-of-bounds write caused by a missing bounds check, enabling local privilege escalation without required user interaction. The available documents do not specify exploit details, affected vers...

CVE-2021-0646

CVE-2021-0646 affects Android via an out-of-bounds write in sqlite3_str_vappendf (sqlite3.c) caused by improper input validation. This could enable local privilege escalation if an attacker can inject a printf into a privileged process' SQL; exploitation does not require user interaction. Android...

CVE-2021-39691

CVE-2021-39691 describes a tapjacking risk in Android’s WindowManager caused by an incorrect window flag when processing user input, enabling a local elevation of privilege with user interaction required. Affected: Android 10–12. Exploitation would be local; no remote access indicated. The issue ...

CVE-2022-20473

CVE-2022-20473 is an Android Framework vulnerability caused by an out-of-bounds read in LocaleListCache.cpp:toLanguageTag, stemming from an incorrect bounds check. This can enable remote code execution without user interaction on affected builds. Public details confirm impact across Android-10, A...

CVE-2023-21098

The CVE-2023-21098 entry affects Android and involves a local elevation of privilege in AccountManagerService.java where a confused deputy could load arbitrary code into the System Settings app. The attached connected exploit notes an ABX injection chain that leverages PackageInstaller.Session an...

CVE-2026-0097

Technical details about CVE-2026-0097 are not publicly available in the provided documents. Monitor for updates from sources such as the Android bulletin and NVD.

CVE-2016-2431

CVE-2016-2431 affects Android devices with Qualcomm TrustZone prior to 2016-05-01 (notably Nexus 5, Nexus 6, Nexus 7 (2013), and Android One). The issue is an Elevation of Privilege in the Qualcomm TrustZone component that could allow a local attacker via a crafted application to gain privileged ...

CVE-2020-0073

The CVE-2020-0073 entry describes an out-of-bounds write in Android’s NFC processing, specifically in rw_t2t_handle_tlv_detect_rsp within rw_t2t_ndef.cc. The issue allows remote code execution over NFC with no privileges and no user interaction, per the description. Affected products/versions inc...

CVE-2021-0981

Summary. CVE-2021-0981 describes an input-validation flaw in Android’s NotificationManagerService.enqueueNotificationInternal that could allow a foreground service to run without displaying a notification, enabling local elevation of privilege with no additional execution privileges needed on And...

CVE-2021-39671

CVE-2021-39671 affects Android 12. The flaw is an out-of-bounds read in code generated by aidl_const_expressions.cpp caused by uninitialized data, leading to information disclosure without additional privileges or user interaction. The issue is listed in Android’s February 2022 security bulletins...

CVE-2023-20932

CVE-2023-20932 affects Android 10–13 where, in the onCreatePreferences method of EditInfoFragment.java, improper input validation could allow reading contacts belonging to other users. This is an information-disclosure vulnerability with local access and no required user interaction. The issue is...

CVE-2023-21107

CVE-2023-21107 describes an elevation-of-privilege flaw in Android where a missing permission check in retrieveAppEntry(NotificationAccessDetails.java) could allow a local attacker to escalate privileges across user boundaries without extra execution privileges or user interaction. Affected are A...

CVE-2023-21122

CVE-2023-21122 is an Android local-EoP flaw: bypass of DISALLOW_DEBUGGING_FEATURES due to a missing permission check in various files/functions, enabling escalation with no extra privileges and no user interaction. Affected: Android 11–13. Exploitation is local and relies on access to the device....

CVE-2023-21272

CVE-2023-21272 concerns an elevation of privilege in Android via the readFrom path in the Uri.java implementation. The vulnerability arises from improper input validation in Uri.readFrom, enabling a possible bad URI permission grant with local impact and no extra execution privileges required. Re...

CVE-2024-0048

CVE-2024-0048 affects Android (AccountManagerService.java) where NULL-response handling can allow local elevation of privileges. Exploitation requires local access; no user interaction documented. Root cause: incorrect handling of NULL responses in the AccountManagerService session. Android secur...

CVE-2017-9725

CVE-2017-9725 affects Qualcomm CAF Android builds using the Linux kernel. Root cause: during DMA allocation, a wrong data type of size truncates the allocation size, causing it to succeed when it should fail. This yields a high-severity issue (local access, low attack complexity) as reflected in ...

CVE-2021-0588

CVE-2021-0588 describes an information-disclosure flaw in Android’s System component where processInboundMessage in MceStateMachine.java can disclose SMS-related data due to a missing permission check. Exploitation is local (no user interaction required) and could occur on affected versions (Andr...