CVE-2023-40094

CVE-2023-40094 is a local-EoP flaw in Android’s System component. The root cause is a missing permission check in keyguardGoingAway() within ActivityTaskManagerService.java, enabling a lock-screen bypass with no user interaction. The vulnerability affects Android 11–14 per the 2023-12 security bu...

CVE-2019-2025

CVE-2019-2025 affects the Android kernel via the binder.c function, in which the binder_thread_read path can trigger a use-after-free caused by improper locking. This potential defect could permit local escalation of privilege with no additional execution privileges required and without user inte...

CVE-2019-2056

CVE-2019-2056 describes a local information disclosure in Android 10 caused by improper crypto usage that can leak RAM via a shared crypto key. The impact is local information disclosure with no user interaction required. The CVE is listed under Android Framework in the 2020-04 Android security b...

CVE-2019-2115

CVE-2019-2115 affects Google Android GateKeeper:MintAuthToken in gatekeeper.cpp across Android 7.1.1–9. The issue is memory corruption due to a double free, enabling local privilege escalation to the System level without user interaction. Affected component: GateKeeper/auth token generation path....

CVE-2019-2180

The CVE-2019-2180 entry refers to an out-of-bounds read in ippSetValueTag of ipp.c on Android 8.0/8.1/9, caused by improper input validation. This can lead to local information disclosure from the printer service without extra privileges and without user interaction. The connected documents confi...

CVE-2021-0307

CVE-2021-0307 is an Android elevation-of-privilege issue in updatePermissionSourcePackage within PermissionManagerService.java. A careless deputy flaw could allow a malicious app on Android 10–11 to gain a dangerous permission automatically, without user interaction, leading to local privilege es...

CVE-2021-0933

CVE-2021-0933 relates to Android Bluetooth pairing flow, where HTML tags could disrupt the consent dialog due to improper input validation in CompanionDeviceActivity.java or DeviceChooserActivity.java. The issue enables remote elevation of privilege by coercing a user into pairing a malicious Blu...

CVE-2021-39799

CVE-2021-39799 affects Android (Android-12, Android-12L) in the AttributionSource.java AttributionSource component. The issue is a local elevation of privilege due to improper input validation, enabling a potential permission bypass without extra execution privileges and without user interaction....

CVE-2023-20726

The CVE-2023-20726 entry describes a GPS location information disclosure in the MediaTek mnld module caused by a missing permission check. Impact is local information disclosure with no privileges or user interaction required (CVSS v3.1 base score 3.3, LOW). Affected component: mnld in MediaTek S...

CVE-2023-20912

CVE-2023-20912 affects Android 13 where AvatarPickerActivity.java’s onActivityResult lacks a permission check, enabling local privilege escalation by letting an app access other users’ images. Exploitation reportedly requires no user interaction; CVSS shows HIGH severity (LOCAL, LOW PRIVILEGES, N...

CVE-2023-20960

CVE-2023-20960 affects Google Android 12L–13, involving the function launchDeepLinkIntentToRight in SettingsHomepageActivity.java . The root cause is improper input validation that can allow launching arbitrary activities, enabling a local elevation of privilege with user privileges and no user i...

CVE-2023-21083

CVE-2023-21083 affects Android, specifically the onNullBinding path in CallScreeningServiceHelper.java. The root cause is a permissions bypass that can enable recording audio without a privacy indicator, allowing local elevation of privilege with user privileges and no user interaction required. ...

CVE-2023-21089

CVE-2023-21089 affects Android 11–13 and arises from a flaw in ActivityManagerService.startInstrumentation that could keep a foreground service alive when the app is in the background. This enables local escalation of privilege without additional execution privileges, with no user interaction req...

CVE-2023-21100

CVE-2023-21100 affects Android’s inflate.c with a heap-buffer overflow causing an out-of-bounds write. This leads to local escalation of privilege without extra execution privileges or user interaction. Affected Android versions include 12, 12L, and 13. The vulnerability is rooted in the inflate ...

CVE-2023-21277

CVE-2023-21277: The vulnerability is in Android’s RemoteViews.java visitUris method, where a missing permission check can allow an attacker to disclose images across users. The impact is local information disclosure with User privileges, and exploitation does not require user interaction. Public ...

CVE-2023-40131

CVE-2023-40131 affects the GpuService component in Android (GpuService.cpp). The issue is a use-after-free caused by a race condition, enabling local elevation of privilege with no additional execution privileges required, and no user interaction needed for exploitation. The available connected d...

CVE-2025-20658

CVE-2025-20658 is a MediaTek DA component vulnerability caused by a logic error that enables a local elevation of privilege with physical access and no user interaction. The issue affects DA and can be exploited without additional execution privileges; CVSS 3.1 metrics indicate physical access re...

CVE-2019-2124

CVE-2019-2124 affects Android 7.1.1–9 in ComposeActivityEmailExternal.py (ComposeActivityEmailExternal.java). A confused deputy could silently attach files to an email, enabling local information disclosure. Affected: Android 7.1.1, 7.1.2, 8.0, 8.1, 9. Exploitation: local. Remediation: apply patc...

CVE-2019-2179

CVE-2019-2179 affects Android 7.1.1–9, with the flaw in NDEF_MsgValidate of ndef_utils that causes an out-of-bounds read due to an integer overflow. This may lead to local information disclosure without execution privileges; exploitation requires user interaction. The issue is documented across m...

CVE-2020-0082

The CVE-2020-0082 issue affects Android 10, located in ExternalVibration.java under ExternalVibration, where unsafe deserialization can trigger activation of an arbitrary intent. This enables local escalation of privilege to system_server with no additional execution privileges needed and does no...

CVE-2021-0474

CVE-2021-0474: Out-of-bounds memory write (heap buffer overflow) in avrc_msg_cback of avrc_api.cc could allow remote code execution without user interaction. Affected Android versions include Android-8.1, Android-9, Android-10, and Android-11. The issue is described as a remote code execution vul...

CVE-2022-20454

CVE-2022-20454 affects Google Android. A vulnerability in the fdt_next_tag function of fdt.c can cause an out-of-bounds write due to an integer overflow, potentially enabling local elevation of privilege with SYSTEM rights and no user interaction. Affected Android versions include 10–13. The Andr...

CVE-2022-20611

CVE-2022-20611 affects Android 10–13, arising from a permissions bypass in DeletePackageHelper.java: deletePackageVersionedInternal can bypass carrier restrictions, enabling local privilege escalation without additional execution privileges. Exploitation is local and does not require user interac...

CVE-2023-20905

CVE-2023-20905 affects Android 10 via Mfc_Transceive in phNxpExtns_MifareStd.cpp, with a possible out-of-bounds write due to a missing bounds check. The impact is local escalation of privilege with high confidentiality/integrity/availability concerns, and no user interaction is required. Exploita...

CVE-2023-21113

CVE-2023-21113 is an Android System elevation-of-privilege vulnerability caused by a confused deputy, enabling local escalation with no user interaction. Affected: Android devices; payload in multiple locations. Evidence in Android Security Bulletin shows updated AOSP versions (12, 12L, 13) and p...

CVE-2023-21138

CVE-2023-21138 affects Android 11–13; in CallRedirectionProcessor.java onNullBinding, improper input validation enables a long‑lived connection, allowing local escalation of privilege with user‑level execution and background activity launches. No user interaction required. Exploitation details ar...

CVE-2023-21284

The CVE-2023-21284 issue affects Google Android and is described across multiple sources as a denial-of-service due to incorrect input validation in multiple functions of DevicePolicyManager.java. The vulnerability is local (attack vector: local) with execution privileges and does not require use...

CVE-2021-0954

CVE-2021-0954 is an Elevation of Privilege issue affecting Android’s ResolverActivity. A tapjacking/overlay attack could bypass user interaction and enable local privilege elevation with user interaction required. Affected versions include Android 10 and 11. Public references in the 2021-12 Andro...

CVE-2021-39634

CVE-2021-39634 affects the Android/Linux kernel: the use-after-free in fs/eventpoll.c can enable local privilege escalation with no additional execution privileges or user interaction required. The vulnerability is described across the public CVE entry and Nessus advisories (e.g., UTSA-2026 varia...

CVE-2022-20410

The CVE-2022-20410 entry concerns Android: In avrc_ctrl_pars_vendor_rsp in avrc_pars_ct.cc, an out-of-bounds read caused by an integer overflow could enable remote information disclosure without extra privileges or user interaction. Affected: Android 10–13 (Android-10, -11, -12, -12L, -13). Impac...

CVE-2022-20455

CVE-2022-20455 affects Android 10–13 (Android-10, Android-11, Android-12, Android-12L, Android-13). In ZenModeHelper.addAutomaticZenRule, a resource-exhaustion path can cause a persistent local DoS with no user interaction and no additional privileges required. Technical details consistently desc...

CVE-2022-23431

CVE-2022-23431 involves an improper boundary check in the RPMB ldfw component prior to SMR Feb-2022 Release 1, as described across multiple sources. The vulnerability allows arbitrary memory write and code execution. Relevant entries from NVD/Red Hat/NCSC-style advisories consistently reference t...

CVE-2023-20911

CVE-2023-20911 affects Google's Android platform (Android 11–13) and centers on the addPermission path in PermissionManagerServiceImpl.java. The root cause is a risk of failing to persist permission settings due to resource exhaustion, which could enable local elevation of privilege without requi...

CVE-2023-20948

CVE-2023-20948 affects Android (Android-12/12L/13) with a flaw in AAVCAssembler.cpp: in dropFramesUntilIframe there is a possible out-of-bounds read caused by a heap buffer overflow, leading to remote information disclosure without extra privileges or user interaction. Connections show no publish...

CVE-2023-21122

CVE-2023-21122 is an Android local-EoP flaw: bypass of DISALLOW_DEBUGGING_FEATURES due to a missing permission check in various files/functions, enabling escalation with no extra privileges and no user interaction. Affected: Android 11–13. Exploitation is local and relies on access to the device....

CVE-2023-21289

CVE-2023-21289 affects Google Android and is an information-disclosure issue caused by a confused-deputy bypass of a multi-user security boundary. The description in connected records indicates local information disclosure with no extra privileges and no user interaction required. Public referenc...

CVE-2023-35669

CVE-2023-35669 affects the Android Framework (AccountManagerService.java). The issue stems from unsafe deserialization in checkKeyIntentParceledCorrectly, enabling local elevation of privilege by an attacker with local access and no user interaction. The NVD entry lists local access, low attack c...

CVE-2023-45777

CVE-2023-45777 affects Android’s AccountManagerService (checkKeyIntentParceledCorrectly) where a Parcel Mismatch could let an attacker launch arbitrary activities with system privileges, causing local elevation of privilege. Public details consistently describe this as a local, no-auth vulnerabil...

CVE-2017-13177

The CVE-2017-13177 entry concerns a vulnerability in the Android Media Framework where several libhevc functions fail to preserve NEON registers. This can enable remote code execution (RCE) in a privileged process with no required user interaction, affecting Android versions 5.1.1, 6.0, 6.0.1, 7....

CVE-2017-13179

CVE-2017-13179 describes an out-of-bounds write in SoftHEVC caused by a use-after-free in ihevcd_allocate_static_bufs and ihevcd_create. Both ps_codec_obj and ps_create_op->s_ivd_create_op_t.pv_handle reference the same memory, allowing the former to be freed without clearing pv_handle. This c...

CVE-2020-0076

CVE-2020-0076 affects the FPC Iris TZ App in Android. Description: an out-of-bounds write in get_auth_result due to a missing bounds check, enabling local elevation of privilege to System if exploited; exploitation does not require user interaction. Affected product/area: Android kernel component...

CVE-2020-0078

CVE-2020-0078 : In the Android Media framework, the function releaseSecureStops in DrmPlugin.cpp contains an out-of-bounds write due to a missing bounds check. This leads to local escalation of privilege with no additional execution privileges or user interaction required. Affected: Android 9 and...

CVE-2020-0500

CVE-2020-0500 affects Android 11 via InputMethodManager.startInputUncheckedLocked, where an unsafe PendingIntent enables a local information-disclosure permission bypass with no user interaction required. Root cause: unsafe PendingIntent in InputMethodManager.java. Impact is local (not remote) an...

CVE-2021-0313

CVE-2021-0313 affects Android’s Framework component (isWordBreakAfter in LayoutUtils.cpp). The issue describes a vulnerability where improper input validation can slow or crash a TextView, potentially enabling remote denial of service without user interaction. Affected Android versions include 8....

CVE-2022-20026

CVE-2022-20026 concerns a Bluetooth out-of-bounds write caused by a missing bounds check. Exploitation would enable local escalation of privilege with no user interaction required, per the provided entries (NVD/Red Hat/PRION variants). The issue is linked to a MediaTek ALPS06126827 patch/ID and i...

CVE-2022-20131

CVE-2022-20131 affects Android (10–12/12L) with a root cause in nci_proc_rf_management_ntf of nci_hrcv.cc, causing an out-of-bounds read that can disclose information remotely without user interaction. The issue is linked to the Android RF management notification path and is mapped to a System/ID...

CVE-2022-20166

CVE-2022-20166 refers to a heap-based out-of-bounds write in multiple Android kernel base drivers that can enable local privilege escalation to SYSTEM. The issue requires no user interaction to exploit and is exploited via heap buffer overflow in kernel base drivers, granting local code execution...

CVE-2022-20446

CVE-2022-20446 affects Android Framework (AlwaysOnHotwordDetector). The issue is a missing permission check that allows background microphone access, enabling local privilege escalation with no user interaction. Public docs in the Android bulletin assign this as a Framework EoP issue at patch lev...

CVE-2022-20469

CVE-2022-20469 affects Android Bluetooth stack. The vulnerability is an out-of-bounds write in avct_lcb_msg_asmbl (avct_lcb_act.cc), caused by a missing bounds check, enabling local privilege escalation over Bluetooth without user interaction. Affected versions include Android-10, Android-11, And...

CVE-2022-20471

CVE-2022-20471 involves an out-of-bounds read in SendIncDecRestoreCmdPart2 of NxpMfcReader.cc due to a missing bounds check. This can lead to local information disclosure on affected Android versions (Android 11–13). The issue does not require user interaction and does not grant remote code execu...