CVE-2022-20441

CVE-2022-20441 affects Android 10–13, originating from a logic error in Task.java: navigateUpTo can launch an unexported intent handler, enabling local elevation of privilege if the target app uses an intent trampoline. The vulnerability is described as requiring local access with no additional e...

CVE-2022-20466

CVE-2022-20466 describes a local information-disclosure flaw in Android where applyKeyguardFlags in NotificationShadeWindowControllerImpl.java could allow observing the user’s password on a secondary display due to an insecure default value. The issue affects Android 10–13 (Android-10, Android-11...

CVE-2022-20480

The CVE-2022-20480 issue affects Android’s NotificationChannel.java, where a risk of failing to persist permissions settings can occur due to resource exhaustion. This leads to local elevation of privilege without extra execution privileges required, and exploitation is user interaction–independe...

CVE-2022-20485

CVE-2022-20485 affects Android’s NotificationChannel.java across Android 10–13 (including 12L/12) and is due to a resource-exhaustion path that can fail to persist permissions settings. The issue enables local elevation of privilege with no extra execution privileges required and no user interact...

CVE-2024-32913

CVE-2024-32913 affects the WLAN stack in wl_notify_rx_mgmt_frame within wl_cfg80211.c. The issue is an out-of-bounds write caused by an integer overflow, which could enable remote code execution with no authentication or user interaction required. The vulnerability is documented in Android Pixel ...

CVE-2017-7375

CVE-2017-7375 describes a flaw in the libxml2 parser that allows remote XML entity inclusion when default parser flags are used (no substitution/validation/DTD loading). This XXE can cause access to local files or remote resources (HTTP/FTP) depending on context, potentially expanding the attacke...

CVE-2019-2025

CVE-2019-2025 affects the Android kernel via the binder.c function, in which the binder_thread_read path can trigger a use-after-free caused by improper locking. This potential defect could permit local escalation of privilege with no additional execution privileges required and without user inte...

CVE-2020-0224

CVE-2020-0224 is a documented Android vulnerability affecting Android 8.0–10. It exploits an out-of-bounds write in FastKeyAccumulator::GetKeysSlow (keys.cc) caused by type confusion, enabling remote code execution when processing a proxy configuration without extra privileges. No user interactio...

CVE-2021-0318

CVE-2021-0318 affects Android and is tied to SensorEventConnection.cpp, where a use-after-free can cause an out-of-bounds write. This leads to local escalation of privilege with no extra execution privileges required and no user interaction. Documented impact covers Android versions 8.1, 9, 10, a...

CVE-2021-0481

CVE-2021-0481 affects Android platform apps: in EditUserPhotoController.java, onActivityResult allows possible access to unauthorized files due to an unexpected URI handler, potentially enabling local escalation of privilege with user interaction. Affected Android versions include 8.1–11. The And...

CVE-2022-20396

CVE-2022-20396 affects SettingsActivity.java on Android 12L and 13, where a permissions bypass could allow a device to be discovered over Bluetooth without user interaction or required permissions. This enables local elevation of privilege with no additional execution privileges needed, and explo...

CVE-2022-20482

CVE-2022-20482 affects Android 12, 12L, and 13, specifically the NotificationManager.java createNotificationChannel path. The vulnerability stems from a resource exhaustion condition that can be triggered locally, without user interaction, to make the device unusable and potentially require a fac...

CVE-2022-20497

CVE-2022-20497 описывает возможность локального раскрытия информации через неправильное состояние в методе updatePublicMode в NotificationLockscreenUserManagerImpl.java на Android 12–13 (Android-12, Android-12L, Android-13). Уязвимость связана с тем, что в результате некорректного перехода состоя...

CVE-2024-40649

Technical details (affected product, version, root cause, exploitability) are not publicly available in the provided documents; monitor for updates.

CVE-2024-43771

CVE-2024-43771 affects Android’s Bluetooth stack: in gatts_process_read_req() of gatt_sr.cc there is a missing bounds check, causing an out-of-bounds write that could enable remote (proximal/adjacent) code execution without extra privileges or user interaction. CVSSv3.1 vector: Adjacent access, L...

CVE-2019-2177

CVE-2019-2177 affects Android 7.1.1–9 (HidProfile.java, isPreferred) where a permissions bypass can cause device type confusion in the System component, enabling remote code execution. The issue is described as a possible RCE with user interaction required for exploitation. The Android Security B...

CVE-2021-0307

CVE-2021-0307 is an Android elevation-of-privilege issue in updatePermissionSourcePackage within PermissionManagerService.java. A careless deputy flaw could allow a malicious app on Android 10–11 to gain a dangerous permission automatically, without user interaction, leading to local privilege es...

CVE-2021-0339

CVE-2021-0339 is an Android elevation-of-privilege issue found in WindowContainer.java loadAnimation, enabling a malicious app to remain visible while another app is foregrounded. This could allow local privilege escalation with no extra execution privileges; user interaction is required to explo...

CVE-2021-39808

In CVE-2021-39808, the issue is in Android’s PreferencesHelper.java within createNotificationChannelGroup, where improper input validation can allow a service to run in the foreground without a user notification. This enables local elevation of privilege on Android 10–12, with no additional execu...

CVE-2022-20446

CVE-2022-20446 affects Android Framework (AlwaysOnHotwordDetector). The issue is a missing permission check that allows background microphone access, enabling local privilege escalation with no user interaction. Public docs in the Android bulletin assign this as a Framework EoP issue at patch lev...

CVE-2023-20919

CVE-2023-20919 affects Android 13 (Settings.java: getStringsForPrefix). A logic error could prevent package uninstallation, enabling local elevation of privilege with no user interaction. CVSS v3.1: Local attacker, low privileges, no user interaction, high confidentiality/ integrity/ availability...

CVE-2023-20921

CVE-2023-20921 affects Android 10–13, where a logic error in AccessibilityManagerService.java can automatically grant accessibility services, enabling local elevation of privilege. The issue requires user interaction for exploitation and does not state additional execution privileges. Public refe...

CVE-2023-20955

CVE-2023-20955 affects Android 11–13 and is triggered in the app component AppInfoDashboardFragment.java, in onPrepareOptionsMenu, due to a missing permission check. This enables local privilege escalation to uninstall apps for all users without user interaction. Conditions described in the linke...

CVE-2023-21100

CVE-2023-21100 affects Android’s inflate.c with a heap-buffer overflow causing an out-of-bounds write. This leads to local escalation of privilege without extra execution privileges or user interaction. Affected Android versions include 12, 12L, and 13. The vulnerability is rooted in the inflate ...

CVE-2019-2178

CVE-2019-2178 affects Android 7.1.1–9 in the rw_t4t NFC stack (rw_t4t_sm_read_ndef). The issue is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege in the NFC service with no user interaction required. The vulnerability is documented across multiple f...

CVE-2020-0368

Summary of CVE-2020-0368 (Android) Affects Android 11 where the issue lies in the CallLogProvider.java function queryInternal . The root cause is improper input validation, enabling a local permission bypass that could disclose voicemail metadata. Exploitation requires User privileges but not use...

CVE-2021-0474

CVE-2021-0474: Out-of-bounds memory write (heap buffer overflow) in avrc_msg_cback of avrc_api.cc could allow remote code execution without user interaction. Affected Android versions include Android-8.1, Android-9, Android-10, and Android-11. The issue is described as a remote code execution vul...

CVE-2021-39635

CVE-2021-39635 concerns Unisoc’s ims_ex, a vendor system service used to manage VoLTE on Android devices. The root cause is that ims_ex does not verify the caller’s permissions, allowing normal apps without phone permissions to access VoLTE‑sensitive information and to manage VoLTE calls. Various...

CVE-2021-39804

CVE-2021-39804 describes a DoS in Google Android, caused by a missing null check in the reinit path of HeifDecoderImpl.cpp. The flaw can allow a remote persistent denial of service in the file picker with user interaction required and no extra privileges. Affected products/versions include Androi...

CVE-2021-39805

The CVE-2021-39805 issue affects Android 12/12L where the l2cble_process_sig_cmd function in l2c_ble.cc may trigger an out-of-bounds read due to a missing bounds check, enabling remote information disclosure over Bluetooth without user interaction. Available details indicate the vulnerability exi...

CVE-2022-20496

CVE-2022-20496 affects Android’s media framework via a vulnerability in the setDataSource function of initMediaExtractor.cpp. The issue is caused by a use-after-free, which could allow arbitrary code execution and/or local information disclosure without user interaction. Affected products include...

CVE-2023-20941

CVE-2023-20941 : In the Android kernel, the function acc_ctrlrequest_composite in f_accessory.c has an out-of-bounds write due to a missing bounds check. This could enable elevation of privilege with user interaction required. The impact is reported as a physical escalation of privilege with high...

CVE-2023-20956

The CVE-2023-20956 entry affects Android 12–13 and is due to an out-of-bounds write in C2SurfaceSyncObj.cpp caused by a missing bounds check. This leads to potential local information disclosure with System-level privileges required; exploitation does not require user interaction. Public referenc...

CVE-2024-0049

CVE-2024-0049 is an Android framework elevation-of-privilege issue caused by an out-of-bounds heap buffer write. The NVD entry cites local EoP with no extra privileges or user interaction required. Android’s March 2024 security bulletin documents this CVE under the Framework cluster with fixes in...

CVE-2024-56193

CVE-2024-56193 describes a possible disclosure of Bluetooth adapter details due to a permissions bypass, enabling local information disclosure without extra privileges or user interaction. Affected software is Google Pixel devices; impact is information disclosure with no execution required. The ...

CVE-2018-9389

CVE-2018-9389 affects the Linux kernel IPv6 code path, specifically ip6_append_data in ip6_output.c. The vulnerability is described as a heap-based buffer overflow that could enable local code execution, resulting in privilege escalation with no additional privileges required and no user interact...

CVE-2020-0081

CVE-2020-0081 is a local-elevation vulnerability in the Android Framework (AssetManager.java) caused by a double-free leading to memory corruption. Affected: Android 8.0–10; exploit requires local access with no user interaction. Exploitation status is not detailed in the provided documents. Reme...

CVE-2021-39658

CVE-2021-39658 concerns the ismsEx service (Unisoc Android) which extends the SMS system service. The vulnerability arises because ismsEx does not enforce caller permissions, leading to permission leaks. This allows third‑party apps to arbitrarily modify and set system properties. Reports in conn...

CVE-2022-20392

CVE-2022-20392: Android framework flaw in declareDuplicatePermission (ParsedPermissionUtils.java) could allow obtaining a dangerous permission without user consent due to input validation issues, enabling local privilege escalation during app installation or upgrade with no extra execution privil...

CVE-2022-20450

The CVE-2022-20450 entry concerns Android: In restorePermissionState of PermissionManagerServiceImpl.java, a missing permission check could allow local privilege escalation without user interaction. Affected: Android 10–13 (Android-10, -11, -12, -12L, -13). Impact stated as local EoP with high co...

CVE-2022-20500

CVE-2022-20500 : In ShortcutPackage.java, loadFromXml may crash on boot due to an uncaught exception, causing local denial of service without extra privileges. Affected: Android 10–13. Impact is a local DoS; exploitation requires no user interaction. Mitigation: update Android to a patched build ...

CVE-2023-20929

CVE-2023-20929 involves an information disclosure in Android 13 where the method sendHalfSheetCancelBroadcast in HalfSheetActivity.java can leak nearby Bluetooth MAC addresses via an unrestricted broadcast intent. This enables local information disclosure without extra execution privileges or use...

CVE-2023-20960

CVE-2023-20960 affects Google Android 12L–13, involving the function launchDeepLinkIntentToRight in SettingsHomepageActivity.java . The root cause is improper input validation that can allow launching arbitrary activities, enabling a local elevation of privilege with user privileges and no user i...

CVE-2023-21088

The CVE affects Android (Android-12, Android-12L, Android-13) via a logic error in LocationProviderManager.java’s deliverOnFlushComplete, enabling bypass of background activity launch restrictions and leading to local elevation of privilege without extra privileges or user interaction. Affected c...

CVE-2023-21251

CVE-2023-21251 affects the Android Framework, specifically the onCreate path in ConfirmDialog.java . The issue describes an improper input validation that could permit a connection to VNP without user consent, yielding a local elevation of privilege (requires user interaction). The impact is cons...

CVE-2023-21284

The CVE-2023-21284 issue affects Google Android and is described across multiple sources as a denial-of-service due to incorrect input validation in multiple functions of DevicePolicyManager.java. The vulnerability is local (attack vector: local) with execution privileges and does not require use...

CVE-2023-40140

CVE-2023-40140: Android component android_view_InputDevice_create (android_view_InputDevice.cpp) has a use-after-free vulnerability that can lead to arbitrary code execution and local escalation of privilege. Impact is local, with no user interaction required. The Android Security Bulletin notes ...

CVE-2019-2174

CVE-2019-2174 affects Android devices running 7.1.1, 7.1.2, 8.0, 8.1 and 9, where SensorManager::assertStateLocked in SensorManager.cpp has a use-after-free due to improper locking. This is an Elevation of Privilege vulnerability with local attack vector and no user interaction required, as descr...

CVE-2019-2180

The CVE-2019-2180 entry refers to an out-of-bounds read in ippSetValueTag of ipp.c on Android 8.0/8.1/9, caused by improper input validation. This can lead to local information disclosure from the printer service without extra privileges and without user interaction. The connected documents confi...

CVE-2020-0070

CVE-2020-0070 is a Android System out-of-bounds write in rw_t2t_update_lock_attributes of rw_t2t_ndef.cc caused by a missing bounds check, enabling remote code execution over NFC without extra privileges. Affected: Android 8.0–10 (Android 8.0, 8.1, 9, 10). MITRE/ATT&CK not explicitly stated in pr...