CVE-2021-39799

CVE-2021-39799 affects Android (Android-12, Android-12L) in the AttributionSource.java AttributionSource component. The issue is a local elevation of privilege due to improper input validation, enabling a potential permission bypass without extra execution privileges and without user interaction....

CVE-2022-20354

CVE-2022-20354 affects Android 11, 12 and 12L. The issue is in the VPN subsystem (onDefaultNetworkChanged in Vpn.java) and arises from a logic error that can allow disabling VPN, enabling local elevation of privilege with no extra execution privileges required. The impact is described as local Eo...

CVE-2022-20425

CVE-2022-20425 affects Android (10–13) via addAutomaticZenRule in ZenModeHelper.java. The issue: possible permanent degradation of performance due to resource exhaustion, enabling local DoS with low-privilege user and no user interaction required. Impact is limited to affected Android versions pe...

CVE-2022-20457

CVE-2022-20457 affects Android 13 and is caused by improper input validation in StorageManagerService.getMountModeInternal, which can prevent package installation and enable local privilege escalation without additional privileges. Exploitation details are not provided in the sources; the vulnera...

CVE-2023-20912

CVE-2023-20912 affects Android 13 where AvatarPickerActivity.java’s onActivityResult lacks a permission check, enabling local privilege escalation by letting an app access other users’ images. Exploitation reportedly requires no user interaction; CVSS shows HIGH severity (LOCAL, LOW PRIVILEGES, N...

CVE-2023-21083

CVE-2023-21083 affects Android, specifically the onNullBinding path in CallScreeningServiceHelper.java. The root cause is a permissions bypass that can enable recording audio without a privacy indicator, allowing local elevation of privilege with user privileges and no user interaction required. ...

CVE-2023-21094

CVE-2023-21094 describes a local elevation-of-privilege in Android: in the sanitize path of LayerState.cpp a missing permission check could allow an attacker to take over the display content on Android 11, 12, 12L, and 13. The issue enables local code execution without additional privileges or us...

CVE-2023-21251

CVE-2023-21251 affects the Android Framework, specifically the onCreate path in ConfirmDialog.java . The issue describes an improper input validation that could permit a connection to VNP without user consent, yielding a local elevation of privilege (requires user interaction). The impact is cons...

CVE-2023-21269

CVE-2023-21269 involves an elevation-of-privilege via a BAL bypass in Android’s startActivityInner (ActivityStarter.java) that could allow launching an activity into PiP mode from the background with no user interaction. The issue is documented across multiple sources (NVD/Red Hat/CNVD/OSV) and i...

CVE-2024-20007

CVE-2024-20007 affects MediaTek MP3 decoder: a race condition could trigger an out-of-bounds write, enabling remote escalation of privileges with user interaction required. Public details confirm the mp3 decoder component and patch ALPS08441369; exploitation status is not provided in the sources....

CVE-2024-20125

Summary (CVE-2024-20125) : A missing bounds check in MediaTek’s vdec component may allow an out-of-bounds write, enabling local escalation of privilege if an attacker already has System privileges. The entry indicates exploitation requires no user interaction and specifies a patch: ALPS09046782 (...

CVE-2024-23710

CVE-2024-23710 affects Google Android: a logic error in InstallPackageHelper.java (assertPackageWithSharedUserIdIsPrivileged) could allow local elevation of privilege by executing arbitrary code as a privileged app, without extra privileges or user interaction. Impact is described as high (CVE-20...

CVE-2024-32913

CVE-2024-32913 affects the WLAN stack in wl_notify_rx_mgmt_frame within wl_cfg80211.c. The issue is an out-of-bounds write caused by an integer overflow, which could enable remote code execution with no authentication or user interaction required. The vulnerability is documented in Android Pixel ...

CVE-2018-9389

CVE-2018-9389 affects the Linux kernel IPv6 code path, specifically ip6_append_data in ip6_output.c. The vulnerability is described as a heap-based buffer overflow that could enable local code execution, resulting in privilege escalation with no additional privileges required and no user interact...

CVE-2019-2115

CVE-2019-2115 affects Google Android GateKeeper:MintAuthToken in gatekeeper.cpp across Android 7.1.1–9. The issue is memory corruption due to a double free, enabling local privilege escalation to the System level without user interaction. Affected component: GateKeeper/auth token generation path....

CVE-2019-2123

CVE-2019-2123 is an Elevation of Privilege flaw in Android’s Framework, triggered by a memory overwrite in Binder.java during execTransact. Affects Android 7.1.1, 7.1.2, 8.0, 8.1, and 9; exploitation can occur locally in a privileged process without user interaction. The issue is surfaced in the ...

CVE-2020-0368

Summary of CVE-2020-0368 (Android) Affects Android 11 where the issue lies in the CallLogProvider.java function queryInternal . The root cause is improper input validation, enabling a local permission bypass that could disclose voicemail metadata. Exploitation requires User privileges but not use...

CVE-2023-20726

The CVE-2023-20726 entry describes a GPS location information disclosure in the MediaTek mnld module caused by a missing permission check. Impact is local information disclosure with no privileges or user interaction required (CVSS v3.1 base score 3.3, LOW). Affected component: mnld in MediaTek S...

CVE-2019-2056

CVE-2019-2056 describes a local information disclosure in Android 10 caused by improper crypto usage that can leak RAM via a shared crypto key. The impact is local information disclosure with no user interaction required. The CVE is listed under Android Framework in the 2020-04 Android security b...

CVE-2019-2179

CVE-2019-2179 affects Android 7.1.1–9, with the flaw in NDEF_MsgValidate of ndef_utils that causes an out-of-bounds read due to an integer overflow. This may lead to local information disclosure without execution privileges; exploitation requires user interaction. The issue is documented across m...

CVE-2021-0701

Summary: CVE-2021-0701 involves the PowerVR kernel driver, specifically the PVRSRVBridgeSyncPrimOpCreate function, where a missing size check can cause an integer overflow leading to out-of-bounds heap access. This could enable local privilege escalation without additional execution privileges an...

CVE-2022-20154

CVE-2022-20154 : In the Android kernel, the vulnerability occurs in lock_sock_nested() within sock.c due to a race that can cause a use-after-free, enabling local privilege escalation with SYSTEM privileges; exploitation does not require user interaction. The initial description notes this as a l...

CVE-2022-20410

The CVE-2022-20410 entry concerns Android: In avrc_ctrl_pars_vendor_rsp in avrc_pars_ct.cc, an out-of-bounds read caused by an integer overflow could enable remote information disclosure without extra privileges or user interaction. Affected: Android 10–13 (Android-10, -11, -12, -12L, -13). Impac...

CVE-2022-20454

CVE-2022-20454 affects Google Android. A vulnerability in the fdt_next_tag function of fdt.c can cause an out-of-bounds write due to an integer overflow, potentially enabling local elevation of privilege with SYSTEM rights and no user interaction. Affected Android versions include 10–13. The Andr...

CVE-2023-20920

CVE-2023-20920 describes a memory corruption vulnerability in the UsbRequest.java queue of Android, caused by a use-after-free. Affects Android 10–13 according to the Android security bulletin references. Impact is local escalation of privilege with high severity (CVSS: LO-CI). The vulnerability ...

CVE-2023-21123

CVE-2023-21123 affects multiple Android versions (11–13). The issue is a bypass of the DISALLOW_DEBUGGING_FEATURES restriction in tracing due to a missing permission check in several functions/files, enabling local elevation of privilege without extra execution privileges. Reported impact is elev...

CVE-2023-21138

CVE-2023-21138 affects Android 11–13; in CallRedirectionProcessor.java onNullBinding, improper input validation enables a long‑lived connection, allowing local escalation of privilege with user‑level execution and background activity launches. No user interaction required. Exploitation details ar...

CVE-2023-21284

The CVE-2023-21284 issue affects Google Android and is described across multiple sources as a denial-of-service due to incorrect input validation in multiple functions of DevicePolicyManager.java. The vulnerability is local (attack vector: local) with execution privileges and does not require use...

CVE-2023-40094

CVE-2023-40094 is a local-EoP flaw in Android’s System component. The root cause is a missing permission check in keyguardGoingAway() within ActivityTaskManagerService.java, enabling a lock-screen bypass with no user interaction. The vulnerability affects Android 11–14 per the 2023-12 security bu...

CVE-2023-40131

CVE-2023-40131 affects the GpuService component in Android (GpuService.cpp). The issue is a use-after-free caused by a race condition, enabling local elevation of privilege with no additional execution privileges required, and no user interaction needed for exploitation. The available connected d...

CVE-2024-56193

CVE-2024-56193 describes a possible disclosure of Bluetooth adapter details due to a permissions bypass, enabling local information disclosure without extra privileges or user interaction. Affected software is Google Pixel devices; impact is information disclosure with no execution required. The ...

CVE-2015-5524

CVE-2015-5524 affects Samsung mobile devices running KK (Android 4.4) and later up to 2015-05-13, due to a buffer overflow in datablock_write caused by unvalidated received data. The Samsung internal ID is SVE-2015-4018. The CVSS indicates high severity (CRITICAL in CVSS‑3.1; High in CVSS‑2). Ava...

CVE-2017-13177

The CVE-2017-13177 entry concerns a vulnerability in the Android Media Framework where several libhevc functions fail to preserve NEON registers. This can enable remote code execution (RCE) in a privileged process with no required user interaction, affecting Android versions 5.1.1, 6.0, 6.0.1, 7....

CVE-2017-13179

CVE-2017-13179 describes an out-of-bounds write in SoftHEVC caused by a use-after-free in ihevcd_allocate_static_bufs and ihevcd_create. Both ps_codec_obj and ps_create_op->s_ivd_create_op_t.pv_handle reference the same memory, allowing the former to be freed without clearing pv_handle. This c...

CVE-2017-9725

CVE-2017-9725 affects Qualcomm CAF Android builds using the Linux kernel. Root cause: during DMA allocation, a wrong data type of size truncates the allocation size, causing it to succeed when it should fail. This yields a high-severity issue (local access, low attack complexity) as reflected in ...

CVE-2019-2124

CVE-2019-2124 affects Android 7.1.1–9 in ComposeActivityEmailExternal.py (ComposeActivityEmailExternal.java). A confused deputy could silently attach files to an email, enabling local information disclosure. Affected: Android 7.1.1, 7.1.2, 8.0, 8.1, 9. Exploitation: local. Remediation: apply patc...

CVE-2020-0082

The CVE-2020-0082 issue affects Android 10, located in ExternalVibration.java under ExternalVibration, where unsafe deserialization can trigger activation of an arbitrary intent. This enables local escalation of privilege to system_server with no additional execution privileges needed and does no...

CVE-2020-0500

CVE-2020-0500 affects Android 11 via InputMethodManager.startInputUncheckedLocked, where an unsafe PendingIntent enables a local information-disclosure permission bypass with no user interaction required. Root cause: unsafe PendingIntent in InputMethodManager.java. Impact is local (not remote) an...

CVE-2021-0515

CVE-2021-0515 : In Android, there is an out-of-bounds write due to an incorrect bounds check in Factory::CreateStrictFunctionMap (factory.cc). This can cause remote code execution in an unprivileged process with no additional privileges and without user interaction. Affected: Android versions 8.1...

CVE-2021-0954

CVE-2021-0954 is an Elevation of Privilege issue affecting Android’s ResolverActivity. A tapjacking/overlay attack could bypass user interaction and enable local privilege elevation with user interaction required. Affected versions include Android 10 and 11. Public references in the 2021-12 Andro...

CVE-2021-39634

CVE-2021-39634 affects the Android/Linux kernel: the use-after-free in fs/eventpoll.c can enable local privilege escalation with no additional execution privileges or user interaction required. The vulnerability is described across the public CVE entry and Nessus advisories (e.g., UTSA-2026 varia...

CVE-2021-39726

CVE-2021-39726 affects the Android kernel component cd_ParseMsg in cd_codec.c. Root cause: an out-of-bounds read caused by an incorrect bounds check, leading to remote information disclosure without user interaction. Severity/impact are stated as high in the Pixel bulletin context; exploitation s...

CVE-2022-20446

CVE-2022-20446 affects Android Framework (AlwaysOnHotwordDetector). The issue is a missing permission check that allows background microphone access, enabling local privilege escalation with no user interaction. Public docs in the Android bulletin assign this as a Framework EoP issue at patch lev...

CVE-2022-20448

The CVE-2022-20448 issue affects Android (10–13) via the buzzBeepBlinkLocked path in NotificationManagerService.java, enabling data sharing across users due to a permissions bypass and resulting in local privilege escalation without extra execution privileges. The exposed component is Android’s N...

CVE-2022-20455

CVE-2022-20455 affects Android 10–13 (Android-10, Android-11, Android-12, Android-12L, Android-13). In ZenModeHelper.addAutomaticZenRule, a resource-exhaustion path can cause a persistent local DoS with no user interaction and no additional privileges required. Technical details consistently desc...

CVE-2022-20611

CVE-2022-20611 affects Android 10–13, arising from a permissions bypass in DeletePackageHelper.java: deletePackageVersionedInternal can bypass carrier restrictions, enabling local privilege escalation without additional execution privileges. Exploitation is local and does not require user interac...

CVE-2023-20905

CVE-2023-20905 affects Android 10 via Mfc_Transceive in phNxpExtns_MifareStd.cpp, with a possible out-of-bounds write due to a missing bounds check. The impact is local escalation of privilege with high confidentiality/integrity/availability concerns, and no user interaction is required. Exploita...

CVE-2023-21089

CVE-2023-21089 affects Android 11–13 and arises from a flaw in ActivityManagerService.startInstrumentation that could keep a foreground service alive when the app is in the background. This enables local escalation of privilege without additional execution privileges, with no user interaction req...

CVE-2023-21113

CVE-2023-21113 is an Android System elevation-of-privilege vulnerability caused by a confused deputy, enabling local escalation with no user interaction. Affected: Android devices; payload in multiple locations. Evidence in Android Security Bulletin shows updated AOSP versions (12, 12L, 13) and p...

CVE-2023-21277

CVE-2023-21277: The vulnerability is in Android’s RemoteViews.java visitUris method, where a missing permission check can allow an attacker to disclose images across users. The impact is local information disclosure with User privileges, and exploitation does not require user interaction. Public ...