CVE-2023-20915

CVE-2023-20915 concerns a logic error in PhoneAccountRegistrar.java (Android framework) that can allow enabling a phone account without user interaction. The issue enables local escalation of privilege with no additional execution privileges, impacting Android 10–13 per the CVE record. The proble...

CVE-2023-20929

CVE-2023-20929 involves an information disclosure in Android 13 where the method sendHalfSheetCancelBroadcast in HalfSheetActivity.java can leak nearby Bluetooth MAC addresses via an unrestricted broadcast intent. This enables local information disclosure without extra execution privileges or use...

CVE-2023-20941

CVE-2023-20941 : In the Android kernel, the function acc_ctrlrequest_composite in f_accessory.c has an out-of-bounds write due to a missing bounds check. This could enable elevation of privilege with user interaction required. The impact is reported as a physical escalation of privilege with high...

CVE-2023-20956

The CVE-2023-20956 entry affects Android 12–13 and is due to an out-of-bounds write in C2SurfaceSyncObj.cpp caused by a missing bounds check. This leads to potential local information disclosure with System-level privileges required; exploitation does not require user interaction. Public referenc...

CVE-2023-21129

CVE-2023-21129 affects Android 11–13 and is described as a BAL bypass in getFullScreenIntentDecision within NotificationInterruptStateProviderImpl.java, enabling a possible activity launch when the app is in the background and potentially allowing local elevation of privilege with no extra execut...

CVE-2017-7375

CVE-2017-7375 describes a flaw in the libxml2 parser that allows remote XML entity inclusion when default parser flags are used (no substitution/validation/DTD loading). This XXE can cause access to local files or remote resources (HTTP/FTP) depending on context, potentially expanding the attacke...

CVE-2019-2174

CVE-2019-2174 affects Android devices running 7.1.1, 7.1.2, 8.0, 8.1 and 9, where SensorManager::assertStateLocked in SensorManager.cpp has a use-after-free due to improper locking. This is an Elevation of Privilege vulnerability with local attack vector and no user interaction required, as descr...

CVE-2019-2177

CVE-2019-2177 affects Android 7.1.1–9 (HidProfile.java, isPreferred) where a permissions bypass can cause device type confusion in the System component, enabling remote code execution. The issue is described as a possible RCE with user interaction required for exploitation. The Android Security B...

CVE-2020-0081

CVE-2020-0081 is a local-elevation vulnerability in the Android Framework (AssetManager.java) caused by a double-free leading to memory corruption. Affected: Android 8.0–10; exploit requires local access with no user interaction. Exploitation status is not detailed in the provided documents. Reme...

CVE-2021-0339

CVE-2021-0339 is an Android elevation-of-privilege issue found in WindowContainer.java loadAnimation, enabling a malicious app to remain visible while another app is foregrounded. This could allow local privilege escalation with no extra execution privileges; user interaction is required to explo...

CVE-2021-0481

CVE-2021-0481 affects Android platform apps: in EditUserPhotoController.java, onActivityResult allows possible access to unauthorized files due to an unexpected URI handler, potentially enabling local escalation of privilege with user interaction. Affected Android versions include 8.1–11. The And...

CVE-2021-39672

CVE-2021-39672 describes a secure boot bypass in the Fastboot component due to a configuration error, enabling local elevation of privilege with no user interaction. The issue is documented in Android/AOSP risk tables and is listed under Amlogic components in the 2022 February security bulletin. ...

CVE-2021-39808

In CVE-2021-39808, the issue is in Android’s PreferencesHelper.java within createNotificationChannelGroup, where improper input validation can allow a service to run in the foreground without a user notification. This enables local elevation of privilege on Android 10–12, with no additional execu...

CVE-2022-20392

CVE-2022-20392: Android framework flaw in declareDuplicatePermission (ParsedPermissionUtils.java) could allow obtaining a dangerous permission without user consent due to input validation issues, enabling local privilege escalation during app installation or upgrade with no extra execution privil...

CVE-2022-42498

CVE-2022-42498 affects Google Pixel cellular firmware (Android kernel) and is caused by a missing bounds check that enables an out-of-bounds write. This can lead to remote code execution with no privileges and no user interaction. The issue is classified as RCE with high impact. Public references...

CVE-2023-20922

CVE-2023-20922 affects Android 11–13 and targets the Java function PackageManagerService.setMimeGroup, where a crash loop caused by resource exhaustion can lead to a local DoS without user interaction. The vulnerability arises from a resource exhaustion condition in the setMimeGroup path; the imp...

CVE-2023-21094

CVE-2023-21094 describes a local elevation-of-privilege in Android: in the sanitize path of LayerState.cpp a missing permission check could allow an attacker to take over the display content on Android 11, 12, 12L, and 13. The issue enables local code execution without additional privileges or us...

CVE-2023-21124

CVE-2023-21124 affects the Android System component. It describes an elevation of privilege via unsafe deserialization in the execution of multiple files, with local exploitability and no user interaction. The vulnerability is listed for Android 11–Android 13 (AOSP updated versions 11, 12, 12L, 1...

CVE-2023-35673

CVE-2023-35673 involves a potential out-of-bounds write in the Bluetooth stack (gatt_sr.cc: build_read_multi_rsp) caused by an integer overflow. This could enable remote code execution on nearby devices without user interaction. The vulnerability affects Android-related Bluetooth components as de...

CVE-2024-0048

CVE-2024-0048 affects Android (AccountManagerService.java) where NULL-response handling can allow local elevation of privileges. Exploitation requires local access; no user interaction documented. Root cause: incorrect handling of NULL responses in the AccountManagerService session. Android secur...

CVE-2024-20125

Summary (CVE-2024-20125) : A missing bounds check in MediaTek’s vdec component may allow an out-of-bounds write, enabling local escalation of privilege if an attacker already has System privileges. The entry indicates exploitation requires no user interaction and specifies a patch: ALPS09046782 (...

CVE-2024-23710

CVE-2024-23710 affects Google Android: a logic error in InstallPackageHelper.java (assertPackageWithSharedUserIdIsPrivileged) could allow local elevation of privilege by executing arbitrary code as a privileged app, without extra privileges or user interaction. Impact is described as high (CVE-20...

CVE-2020-0070

CVE-2020-0070 is a Android System out-of-bounds write in rw_t2t_update_lock_attributes of rw_t2t_ndef.cc caused by a missing bounds check, enabling remote code execution over NFC without extra privileges. Affected: Android 8.0–10 (Android 8.0, 8.1, 9, 10). MITRE/ATT&CK not explicitly stated in pr...

CVE-2020-0072

The CVE-2020-0072 issue affects Android devices (Android 8.0–10) in rw_t2t_handle_tlv_detect_rsp within rw_t2t_ndef.cc, where a missing bounds check allows an out-of-bounds write that could enable remote code execution over NFC without user interaction. The NVD/Android bulletin context confirms h...

CVE-2020-0224

CVE-2020-0224 is a documented Android vulnerability affecting Android 8.0–10. It exploits an out-of-bounds write in FastKeyAccumulator::GetKeysSlow (keys.cc) caused by type confusion, enabling remote code execution when processing a proxy configuration without extra privileges. No user interactio...

CVE-2021-0981

Summary. CVE-2021-0981 describes an input-validation flaw in Android’s NotificationManagerService.enqueueNotificationInternal that could allow a foreground service to run without displaying a notification, enabling local elevation of privilege with no additional execution privileges needed on And...

CVE-2021-39658

CVE-2021-39658 concerns the ismsEx service (Unisoc Android) which extends the SMS system service. The vulnerability arises because ismsEx does not enforce caller permissions, leading to permission leaks. This allows third‑party apps to arbitrarily modify and set system properties. Reports in conn...

CVE-2022-20415

CVE-2022-20415 affects Android via a logic error in StatusBarNotificationActivityStarter.java (handleFullScreenIntent) that bypasses the background-start restriction, enabling local elevation of privilege without extra privileges. Affected: Android 10–13 (Android-10,11,12,12L,13). Root cause: inc...

CVE-2022-20425

CVE-2022-20425 affects Android (10–13) via addAutomaticZenRule in ZenModeHelper.java. The issue: possible permanent degradation of performance due to resource exhaustion, enabling local DoS with low-privilege user and no user interaction required. Impact is limited to affected Android versions pe...

CVE-2022-20442

CVE-2022-20442 is a local elevation-of-privilege in Android via ReviewPermissionsActivity.java: an overlay/tapjacking path could allow granting permissions to another app on devices with API

CVE-2022-20450

The CVE-2022-20450 entry concerns Android: In restorePermissionState of PermissionManagerServiceImpl.java, a missing permission check could allow local privilege escalation without user interaction. Affected: Android 10–13 (Android-10, -11, -12, -12L, -13). Impact stated as local EoP with high co...

CVE-2023-20696

CVE-2023-20696 affects MediaTek MT6880/MT6890 preloader. The flaw is an out-of-bounds write caused by a missing bounds check in the preloader, enabling local elevation of privilege with System privileges and no user interaction required. Reported impact is high for confidentiality, integrity, and...

CVE-2023-20921

CVE-2023-20921 affects Android 10–13, where a logic error in AccessibilityManagerService.java can automatically grant accessibility services, enabling local elevation of privilege. The issue requires user interaction for exploitation and does not state additional execution privileges. Public refe...

CVE-2023-21251

CVE-2023-21251 affects the Android Framework, specifically the onCreate path in ConfirmDialog.java . The issue describes an improper input validation that could permit a connection to VNP without user consent, yielding a local elevation of privilege (requires user interaction). The impact is cons...

CVE-2023-32820

CVE-2023-32820 affects MediaTek wlan firmware. The issue arises from improper input handling that can trigger a firmware assertion, potentially enabling remote denial of service without extra privileges or user interaction. Public details consistently reference a patch ID ALPS07932637 (and ALPS07...

CVE-2024-20007

CVE-2024-20007 affects MediaTek MP3 decoder: a race condition could trigger an out-of-bounds write, enabling remote escalation of privileges with user interaction required. Public details confirm the mp3 decoder component and patch ALPS08441369; exploitation status is not provided in the sources....

CVE-2018-9389

CVE-2018-9389 affects the Linux kernel IPv6 code path, specifically ip6_append_data in ip6_output.c. The vulnerability is described as a heap-based buffer overflow that could enable local code execution, resulting in privilege escalation with no additional privileges required and no user interact...

CVE-2018-9473

Summary : CVE-2018-9473 affects Android 8.0, involving the function ihevcd_parse_sei_payload in ihevcd_parse_headers.c. The vulnerability is an out‑of‑bounds write caused by an integer overflow, with the potential for remote code execution and requiring user interaction to exploit. The Android se...

CVE-2019-2123

CVE-2019-2123 is an Elevation of Privilege flaw in Android’s Framework, triggered by a memory overwrite in Binder.java during execTransact. Affects Android 7.1.1, 7.1.2, 8.0, 8.1, and 9; exploitation can occur locally in a privileged process without user interaction. The issue is surfaced in the ...

CVE-2019-2178

CVE-2019-2178 affects Android 7.1.1–9 in the rw_t4t NFC stack (rw_t4t_sm_read_ndef). The issue is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege in the NFC service with no user interaction required. The vulnerability is documented across multiple f...

CVE-2020-0368

Summary of CVE-2020-0368 (Android) Affects Android 11 where the issue lies in the CallLogProvider.java function queryInternal . The root cause is improper input validation, enabling a local permission bypass that could disclose voicemail metadata. Exploitation requires User privileges but not use...

CVE-2022-20154

CVE-2022-20154 : In the Android kernel, the vulnerability occurs in lock_sock_nested() within sock.c due to a race that can cause a use-after-free, enabling local privilege escalation with SYSTEM privileges; exploitation does not require user interaction. The initial description notes this as a l...

CVE-2022-20354

CVE-2022-20354 affects Android 11, 12 and 12L. The issue is in the VPN subsystem (onDefaultNetworkChanged in Vpn.java) and arises from a logic error that can allow disabling VPN, enabling local elevation of privilege with no extra execution privileges required. The impact is described as local Eo...

CVE-2022-20441

CVE-2022-20441 affects Android 10–13, originating from a logic error in Task.java: navigateUpTo can launch an unexported intent handler, enabling local elevation of privilege if the target app uses an intent trampoline. The vulnerability is described as requiring local access with no additional e...

CVE-2022-20457

CVE-2022-20457 affects Android 13 and is caused by improper input validation in StorageManagerService.getMountModeInternal, which can prevent package installation and enable local privilege escalation without additional privileges. Exploitation details are not provided in the sources; the vulnera...

CVE-2022-20551

CVE-2022-20551 affects Android, specifically AudioFlinger.cpp createTrack in Android 12–13. Root cause is a logic error that can allow recording audio without a privacy indicator, enabling local elevation of privilege with System privileges required and no user interaction. Documents consistently...

CVE-2023-20920

CVE-2023-20920 describes a memory corruption vulnerability in the UsbRequest.java queue of Android, caused by a use-after-free. Affects Android 10–13 according to the Android security bulletin references. Impact is local escalation of privilege with high severity (CVSS: LO-CI). The vulnerability ...

CVE-2023-21098

The CVE-2023-21098 entry affects Android and involves a local elevation of privilege in AccountManagerService.java where a confused deputy could load arbitrary code into the System Settings app. The attached connected exploit notes an ABX injection chain that leverages PackageInstaller.Session an...

CVE-2023-21269

CVE-2023-21269 involves an elevation-of-privilege via a BAL bypass in Android’s startActivityInner (ActivityStarter.java) that could allow launching an activity into PiP mode from the background with no user interaction. The issue is documented across multiple sources (NVD/Red Hat/CNVD/OSV) and i...

CVE-2023-21276

CVE-2023-21276 affects Google Android: information disclosure via writeToParcel in CursorWindow.cpp caused by uninitialized data. This enables local information disclosure with no extra privileges and no user interaction required. The provided documents state the issue, its root cause, and impact...