CVE-2022-20496

CVE-2022-20496 affects Android’s media framework via a vulnerability in the setDataSource function of initMediaExtractor.cpp. The issue is caused by a use-after-free, which could allow arbitrary code execution and/or local information disclosure without user interaction. Affected products include...

CVE-2023-20956

The CVE-2023-20956 entry affects Android 12–13 and is due to an out-of-bounds write in C2SurfaceSyncObj.cpp caused by a missing bounds check. This leads to potential local information disclosure with System-level privileges required; exploitation does not require user interaction. Public referenc...

CVE-2023-21122

CVE-2023-21122 is an Android local-EoP flaw: bypass of DISALLOW_DEBUGGING_FEATURES due to a missing permission check in various files/functions, enabling escalation with no extra privileges and no user interaction. Affected: Android 11–13. Exploitation is local and relies on access to the device....

CVE-2024-0048

CVE-2024-0048 affects Android (AccountManagerService.java) where NULL-response handling can allow local elevation of privileges. Exploitation requires local access; no user interaction documented. Root cause: incorrect handling of NULL responses in the AccountManagerService session. Android secur...

CVE-2020-0224

CVE-2020-0224 is a documented Android vulnerability affecting Android 8.0–10. It exploits an out-of-bounds write in FastKeyAccumulator::GetKeysSlow (keys.cc) caused by type confusion, enabling remote code execution when processing a proxy configuration without extra privileges. No user interactio...

CVE-2021-39635

CVE-2021-39635 concerns Unisoc’s ims_ex, a vendor system service used to manage VoLTE on Android devices. The root cause is that ims_ex does not verify the caller’s permissions, allowing normal apps without phone permissions to access VoLTE‑sensitive information and to manage VoLTE calls. Various...

CVE-2021-39658

CVE-2021-39658 concerns the ismsEx service (Unisoc Android) which extends the SMS system service. The vulnerability arises because ismsEx does not enforce caller permissions, leading to permission leaks. This allows third‑party apps to arbitrarily modify and set system properties. Reports in conn...

CVE-2021-39805

The CVE-2021-39805 issue affects Android 12/12L where the l2cble_process_sig_cmd function in l2c_ble.cc may trigger an out-of-bounds read due to a missing bounds check, enabling remote information disclosure over Bluetooth without user interaction. Available details indicate the vulnerability exi...

CVE-2021-39808

In CVE-2021-39808, the issue is in Android’s PreferencesHelper.java within createNotificationChannelGroup, where improper input validation can allow a service to run in the foreground without a user notification. This enables local elevation of privilege on Android 10–12, with no additional execu...

CVE-2022-20497

CVE-2022-20497 описывает возможность локального раскрытия информации через неправильное состояние в методе updatePublicMode в NotificationLockscreenUserManagerImpl.java на Android 12–13 (Android-12, Android-12L, Android-13). Уязвимость связана с тем, что в результате некорректного перехода состоя...

CVE-2022-20500

CVE-2022-20500 : In ShortcutPackage.java, loadFromXml may crash on boot due to an uncaught exception, causing local denial of service without extra privileges. Affected: Android 10–13. Impact is a local DoS; exploitation requires no user interaction. Mitigation: update Android to a patched build ...

CVE-2023-20929

CVE-2023-20929 involves an information disclosure in Android 13 where the method sendHalfSheetCancelBroadcast in HalfSheetActivity.java can leak nearby Bluetooth MAC addresses via an unrestricted broadcast intent. This enables local information disclosure without extra execution privileges or use...

CVE-2023-20941

CVE-2023-20941 : In the Android kernel, the function acc_ctrlrequest_composite in f_accessory.c has an out-of-bounds write due to a missing bounds check. This could enable elevation of privilege with user interaction required. The impact is reported as a physical escalation of privilege with high...

CVE-2023-21088

The CVE affects Android (Android-12, Android-12L, Android-13) via a logic error in LocationProviderManager.java’s deliverOnFlushComplete, enabling bypass of background activity launch restrictions and leading to local elevation of privilege without extra privileges or user interaction. Affected c...

CVE-2023-32820

CVE-2023-32820 affects MediaTek wlan firmware. The issue arises from improper input handling that can trigger a firmware assertion, potentially enabling remote denial of service without extra privileges or user interaction. Public details consistently reference a patch ID ALPS07932637 (and ALPS07...

CVE-2023-40140

CVE-2023-40140: Android component android_view_InputDevice_create (android_view_InputDevice.cpp) has a use-after-free vulnerability that can lead to arbitrary code execution and local escalation of privilege. Impact is local, with no user interaction required. The Android Security Bulletin notes ...

CVE-2018-9473

Summary : CVE-2018-9473 affects Android 8.0, involving the function ihevcd_parse_sei_payload in ihevcd_parse_headers.c. The vulnerability is an out‑of‑bounds write caused by an integer overflow, with the potential for remote code execution and requiring user interaction to exploit. The Android se...

CVE-2019-2177

CVE-2019-2177 affects Android 7.1.1–9 (HidProfile.java, isPreferred) where a permissions bypass can cause device type confusion in the System component, enabling remote code execution. The issue is described as a possible RCE with user interaction required for exploitation. The Android Security B...

CVE-2020-0081

CVE-2020-0081 is a local-elevation vulnerability in the Android Framework (AssetManager.java) caused by a double-free leading to memory corruption. Affected: Android 8.0–10; exploit requires local access with no user interaction. Exploitation status is not detailed in the provided documents. Reme...

CVE-2021-0339

CVE-2021-0339 is an Android elevation-of-privilege issue found in WindowContainer.java loadAnimation, enabling a malicious app to remain visible while another app is foregrounded. This could allow local privilege escalation with no extra execution privileges; user interaction is required to explo...

CVE-2021-39616

CVE-2021-39616 affects Android via the Unisoc component sprd-vowifi; listed as High severity in the 2022-02-05 Android bulletin under Unisoc components. The provided documents do not include exploit details or a specific patched version. No root-cause or impact outside the stated classification i...

CVE-2022-20392

CVE-2022-20392: Android framework flaw in declareDuplicatePermission (ParsedPermissionUtils.java) could allow obtaining a dangerous permission without user consent due to input validation issues, enabling local privilege escalation during app installation or upgrade with no extra execution privil...

CVE-2022-20415

CVE-2022-20415 affects Android via a logic error in StatusBarNotificationActivityStarter.java (handleFullScreenIntent) that bypasses the background-start restriction, enabling local elevation of privilege without extra privileges. Affected: Android 10–13 (Android-10,11,12,12L,13). Root cause: inc...

CVE-2022-20441

CVE-2022-20441 affects Android 10–13, originating from a logic error in Task.java: navigateUpTo can launch an unexported intent handler, enabling local elevation of privilege if the target app uses an intent trampoline. The vulnerability is described as requiring local access with no additional e...

CVE-2022-20442

CVE-2022-20442 is a local elevation-of-privilege in Android via ReviewPermissionsActivity.java: an overlay/tapjacking path could allow granting permissions to another app on devices with API

CVE-2022-20473

CVE-2022-20473 is an Android Framework vulnerability caused by an out-of-bounds read in LocaleListCache.cpp:toLanguageTag, stemming from an incorrect bounds check. This can enable remote code execution without user interaction on affected builds. Public details confirm impact across Android-10, A...

CVE-2023-20960

CVE-2023-20960 affects Google Android 12L–13, involving the function launchDeepLinkIntentToRight in SettingsHomepageActivity.java . The root cause is improper input validation that can allow launching arbitrary activities, enabling a local elevation of privilege with user privileges and no user i...

CVE-2023-21098

The CVE-2023-21098 entry affects Android and involves a local elevation of privilege in AccountManagerService.java where a confused deputy could load arbitrary code into the System Settings app. The attached connected exploit notes an ABX injection chain that leverages PackageInstaller.Session an...

CVE-2023-21129

CVE-2023-21129 affects Android 11–13 and is described as a BAL bypass in getFullScreenIntentDecision within NotificationInterruptStateProviderImpl.java, enabling a possible activity launch when the app is in the background and potentially allowing local elevation of privilege with no extra execut...

CVE-2023-21272

CVE-2023-21272 concerns an elevation of privilege in Android via the readFrom path in the Uri.java implementation. The vulnerability arises from improper input validation in Uri.readFrom, enabling a possible bad URI permission grant with local impact and no extra execution privileges required. Re...

CVE-2024-43771

CVE-2024-43771 affects Android’s Bluetooth stack: in gatts_process_read_req() of gatt_sr.cc there is a missing bounds check, causing an out-of-bounds write that could enable remote (proximal/adjacent) code execution without extra privileges or user interaction. CVSSv3.1 vector: Adjacent access, L...

CVE-2021-0307

CVE-2021-0307 is an Android elevation-of-privilege issue in updatePermissionSourcePackage within PermissionManagerService.java. A careless deputy flaw could allow a malicious app on Android 10–11 to gain a dangerous permission automatically, without user interaction, leading to local privilege es...

CVE-2021-39672

CVE-2021-39672 describes a secure boot bypass in the Fastboot component due to a configuration error, enabling local elevation of privilege with no user interaction. The issue is documented in Android/AOSP risk tables and is listed under Amlogic components in the 2022 February security bulletin. ...

CVE-2022-20450

The CVE-2022-20450 entry concerns Android: In restorePermissionState of PermissionManagerServiceImpl.java, a missing permission check could allow local privilege escalation without user interaction. Affected: Android 10–13 (Android-10, -11, -12, -12L, -13). Impact stated as local EoP with high co...

CVE-2022-20551

CVE-2022-20551 affects Android, specifically AudioFlinger.cpp createTrack in Android 12–13. Root cause is a logic error that can allow recording audio without a privacy indicator, enabling local elevation of privilege with System privileges required and no user interaction. Documents consistently...

CVE-2022-42498

CVE-2022-42498 affects Google Pixel cellular firmware (Android kernel) and is caused by a missing bounds check that enables an out-of-bounds write. This can lead to remote code execution with no privileges and no user interaction. The issue is classified as RCE with high impact. Public references...

CVE-2023-20915

CVE-2023-20915 concerns a logic error in PhoneAccountRegistrar.java (Android framework) that can allow enabling a phone account without user interaction. The issue enables local escalation of privilege with no additional execution privileges, impacting Android 10–13 per the CVE record. The proble...

CVE-2023-20921

CVE-2023-20921 affects Android 10–13, where a logic error in AccessibilityManagerService.java can automatically grant accessibility services, enabling local elevation of privilege. The issue requires user interaction for exploitation and does not state additional execution privileges. Public refe...

CVE-2023-20922

CVE-2023-20922 affects Android 11–13 and targets the Java function PackageManagerService.setMimeGroup, where a crash loop caused by resource exhaustion can lead to a local DoS without user interaction. The vulnerability arises from a resource exhaustion condition in the setMimeGroup path; the imp...

CVE-2023-21100

CVE-2023-21100 affects Android’s inflate.c with a heap-buffer overflow causing an out-of-bounds write. This leads to local escalation of privilege without extra execution privileges or user interaction. Affected Android versions include 12, 12L, and 13. The vulnerability is rooted in the inflate ...

CVE-2023-21124

CVE-2023-21124 affects the Android System component. It describes an elevation of privilege via unsafe deserialization in the execution of multiple files, with local exploitability and no user interaction. The vulnerability is listed for Android 11–Android 13 (AOSP updated versions 11, 12, 12L, 1...

CVE-2023-21276

CVE-2023-21276 affects Google Android: information disclosure via writeToParcel in CursorWindow.cpp caused by uninitialized data. This enables local information disclosure with no extra privileges and no user interaction required. The provided documents state the issue, its root cause, and impact...

CVE-2019-2174

CVE-2019-2174 affects Android devices running 7.1.1, 7.1.2, 8.0, 8.1 and 9, where SensorManager::assertStateLocked in SensorManager.cpp has a use-after-free due to improper locking. This is an Elevation of Privilege vulnerability with local attack vector and no user interaction required, as descr...

CVE-2019-2178

CVE-2019-2178 affects Android 7.1.1–9 in the rw_t4t NFC stack (rw_t4t_sm_read_ndef). The issue is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege in the NFC service with no user interaction required. The vulnerability is documented across multiple f...

CVE-2019-2180

The CVE-2019-2180 entry refers to an out-of-bounds read in ippSetValueTag of ipp.c on Android 8.0/8.1/9, caused by improper input validation. This can lead to local information disclosure from the printer service without extra privileges and without user interaction. The connected documents confi...

CVE-2020-0070

CVE-2020-0070 is a Android System out-of-bounds write in rw_t2t_update_lock_attributes of rw_t2t_ndef.cc caused by a missing bounds check, enabling remote code execution over NFC without extra privileges. Affected: Android 8.0–10 (Android 8.0, 8.1, 9, 10). MITRE/ATT&CK not explicitly stated in pr...

CVE-2020-0072

The CVE-2020-0072 issue affects Android devices (Android 8.0–10) in rw_t2t_handle_tlv_detect_rsp within rw_t2t_ndef.cc, where a missing bounds check allows an out-of-bounds write that could enable remote code execution over NFC without user interaction. The NVD/Android bulletin context confirms h...

CVE-2021-0474

CVE-2021-0474: Out-of-bounds memory write (heap buffer overflow) in avrc_msg_cback of avrc_api.cc could allow remote code execution without user interaction. Affected Android versions include Android-8.1, Android-9, Android-10, and Android-11. The issue is described as a remote code execution vul...

CVE-2021-0929

CVE-2021-0929 affects the Android kernel, with a use-after-free in ion_dma_buf_end_cpu_access (ion.c) that could allow memory corruption and local privilege escalation without user interaction. Connected Nessus entries (UNITY_LINUX_UTSA-2026-004442 and 003872) quote the same root cause and impact...

CVE-2021-0933

CVE-2021-0933 relates to Android Bluetooth pairing flow, where HTML tags could disrupt the consent dialog due to improper input validation in CompanionDeviceActivity.java or DeviceChooserActivity.java. The issue enables remote elevation of privilege by coercing a user into pairing a malicious Blu...