CVE-2020-0070

CVE-2020-0070 is a Android System out-of-bounds write in rw_t2t_update_lock_attributes of rw_t2t_ndef.cc caused by a missing bounds check, enabling remote code execution over NFC without extra privileges. Affected: Android 8.0–10 (Android 8.0, 8.1, 9, 10). MITRE/ATT&CK not explicitly stated in pr...

CVE-2021-39629

CVE-2021-39629 is a race condition in phTmlNfc_Init/phTmlNfc_CleanUp that can cause a use-after-free, enabling local elevation of privilege without extra execution privileges or user interaction. Affected product: Android devices using phTmlNfc (component phTmlNfc.cc). Reported impact in the init...

CVE-2021-39726

CVE-2021-39726 affects the Android kernel component cd_ParseMsg in cd_codec.c. Root cause: an out-of-bounds read caused by an incorrect bounds check, leading to remote information disclosure without user interaction. Severity/impact are stated as high in the Pixel bulletin context; exploitation s...

CVE-2022-20235

CVE-2022-20235 describes a memory corruption risk in the PowerVR GPU kernel driver for Android SoCs caused by a flaw in the Information Page of the driver’s cache subsystem. Prior to DDK 1.18, a user-space process could write arbitrary data to that page (the page is normally writable only by the ...

CVE-2022-21768

The CVE-2022-21768 entry corresponds to a Bluetooth buffer overflow (out-of-bounds write) caused by a missing bounds check, enabling local elevation of privilege with no user interaction. Public documents reference a patch ID ALPS06784351/ALPS06784351 and indicate this affects MediaTek Bluetooth ...

CVE-2022-23431

CVE-2022-23431 involves an improper boundary check in the RPMB ldfw component prior to SMR Feb-2022 Release 1, as described across multiple sources. The vulnerability allows arbitrary memory write and code execution. Relevant entries from NVD/Red Hat/NCSC-style advisories consistently reference t...

CVE-2023-21124

CVE-2023-21124 affects the Android System component. It describes an elevation of privilege via unsafe deserialization in the execution of multiple files, with local exploitability and no user interaction. The vulnerability is listed for Android 11–Android 13 (AOSP updated versions 11, 12, 12L, 1...

CVE-2023-21138

CVE-2023-21138 affects Android 11–13; in CallRedirectionProcessor.java onNullBinding, improper input validation enables a long‑lived connection, allowing local escalation of privilege with user‑level execution and background activity launches. No user interaction required. Exploitation details ar...

CVE-2024-43763

Google Android is affected by a denial of service vulnerability originating from a logic error in the build_read_multi_rsp function of the gatt_sr.cc file. An attacker can exploit this flaw to cause a remote (proximal/adjacent) denial of service without requiring additional execution privileges o...

CVE-2019-2179

CVE-2019-2179 affects Android 7.1.1–9, with the flaw in NDEF_MsgValidate of ndef_utils that causes an out-of-bounds read due to an integer overflow. This may lead to local information disclosure without execution privileges; exploitation requires user interaction. The issue is documented across m...

CVE-2020-0082

The CVE-2020-0082 issue affects Android 10, located in ExternalVibration.java under ExternalVibration, where unsafe deserialization can trigger activation of an arbitrary intent. This enables local escalation of privilege to system_server with no additional execution privileges needed and does no...

CVE-2022-20026

CVE-2022-20026 concerns a Bluetooth out-of-bounds write caused by a missing bounds check. Exploitation would enable local escalation of privilege with no user interaction required, per the provided entries (NVD/Red Hat/PRION variants). The issue is linked to a MediaTek ALPS06126827 patch/ID and i...

CVE-2022-20410

The CVE-2022-20410 entry concerns Android: In avrc_ctrl_pars_vendor_rsp in avrc_pars_ct.cc, an out-of-bounds read caused by an integer overflow could enable remote information disclosure without extra privileges or user interaction. Affected: Android 10–13 (Android-10, -11, -12, -12L, -13). Impac...

CVE-2022-20457

CVE-2022-20457 affects Android 13 and is caused by improper input validation in StorageManagerService.getMountModeInternal, which can prevent package installation and enable local privilege escalation without additional privileges. Exploitation details are not provided in the sources; the vulnera...

CVE-2022-20551

CVE-2022-20551 affects Android, specifically AudioFlinger.cpp createTrack in Android 12–13. Root cause is a logic error that can allow recording audio without a privacy indicator, enabling local elevation of privilege with System privileges required and no user interaction. Documents consistently...

CVE-2023-20958

CVE-2023-20958 affects the Qt5 QtBase package (qt5-qtbase) used on Android 13. The issue arises in read_paint of ttcolr.c, where a heap buffer overflow can cause an out-of-bounds read, enabling local information disclosure without user interaction. The CVE is referenced in Android’s March 2023 bu...

CVE-2023-21089

CVE-2023-21089 affects Android 11–13 and arises from a flaw in ActivityManagerService.startInstrumentation that could keep a foreground service alive when the app is in the background. This enables local escalation of privilege without additional execution privileges, with no user interaction req...

CVE-2023-21126

CVE-2023-21126 affects Android 13. The issue arises in MediaControlPanel.java’s bindOutputSwitcherAndBroadcastButton, where an Unsafe Intent can launch an arbitrary activity under SysUI. This enables local elevation of privilege with no required user interaction. The vulnerability is supported by...

CVE-2023-21277

CVE-2023-21277: The vulnerability is in Android’s RemoteViews.java visitUris method, where a missing permission check can allow an attacker to disclose images across users. The impact is local information disclosure with User privileges, and exploitation does not require user interaction. Public ...

CVE-2015-3864

CVE-2015-3864 is a remote-code-execution vulnerability in Android’s mediaserver (libstagefright). It arises from an integer underflow when parsing the MPEG-4 tx3g chunk in the Stagefright parser, enabling crafted MPEG-4 data to corrupt memory. The issue is tied to an incomplete fix for CVE-2015-3...

CVE-2017-13177

The CVE-2017-13177 entry concerns a vulnerability in the Android Media Framework where several libhevc functions fail to preserve NEON registers. This can enable remote code execution (RCE) in a privileged process with no required user interaction, affecting Android versions 5.1.1, 6.0, 6.0.1, 7....

CVE-2019-2124

CVE-2019-2124 affects Android 7.1.1–9 in ComposeActivityEmailExternal.py (ComposeActivityEmailExternal.java). A confused deputy could silently attach files to an email, enabling local information disclosure. Affected: Android 7.1.1, 7.1.2, 8.0, 8.1, 9. Exploitation: local. Remediation: apply patc...

CVE-2020-0071

CVE-2020-0071 affects Android System component on Android 8.0–10. The vulnerability occurs in rw_t2t_extract_default_locks_info (rw_t2t_ndef.cc), where a missing bounds check can cause an out-of-bounds write, enabling remote code execution over NFC without user interaction. Affected products/vers...

CVE-2020-0078

CVE-2020-0078 : In the Android Media framework, the function releaseSecureStops in DrmPlugin.cpp contains an out-of-bounds write due to a missing bounds check. This leads to local escalation of privilege with no additional execution privileges or user interaction required. Affected: Android 9 and...

CVE-2020-0079

CVE-2020-0079 affects the Android Media framework (Android 9 and 10). The vulnerability is a local elevation of privilege in CryptoPlugin.cpp, via an out-of-bounds write caused by a stale pointer in the decrypt_1_2 path. Exploitation requires local access (no user interaction) and could allow a p...

CVE-2021-0313

CVE-2021-0313 affects Android’s Framework component (isWordBreakAfter in LayoutUtils.cpp). The issue describes a vulnerability where improper input validation can slow or crash a TextView, potentially enabling remote denial of service without user interaction. Affected Android versions include 8....

CVE-2021-0396

CVE-2021-0396: In Android, a bounds-check bug in Builtins::Generate_ArgumentsAdaptorTrampoline (builtins-arm.cc and related files) allows an out-of-bounds write, potentially enabling remote code execution in an unprivileged process with no privileges required and no user interaction. Affected: An...

CVE-2021-0515

CVE-2021-0515 : In Android, there is an out-of-bounds write due to an incorrect bounds check in Factory::CreateStrictFunctionMap (factory.cc). This can cause remote code execution in an unprivileged process with no additional privileges and without user interaction. Affected: Android versions 8.1...

CVE-2021-0930

CVE-2021-0930 : An out-of-bounds write in phNxpNciHal_ext.cc (function phNxpNciHal_process_ext_rsp) with a missing bounds check allows remote code execution over NFC on Android, requiring no user interaction and no additional privileges. Affected: Android 9–12 (per the CVE description). The vulne...

CVE-2022-20082

CVE-2022-20082 : In MediaTek GPU software, a race condition can cause a use-after-free, enabling local elevation of privilege with no extra execution privileges or user interaction required. Multiple connected sources (including NVD and RH Red Hat advisories) confirm the issue as a GPU component ...

CVE-2022-20110

CVE-2022-20110 affects the MediaTek ion component, where a race-condition triggers a use-after-free, enabling local elevation of privilege with no user interaction. Patch ALPS06399915/ALPS06399901 is referenced; Android bulletin materials indicate related SPL updates. Exploit code/details are not...

CVE-2022-20238

CVE-2022-20238 describes a kernel memory mapping flaw in Android where remap_pfn_range can map memory outside the intended region because vma->vm_page_prot is user-controllable. The result is a potential writable mapping of kernel memory, enabling exploitation per several sources (Android kern...

CVE-2022-20239

CVE-2022-20239 is an Android kernel vulnerability inherited from a memory-mapping flaw in remap_pfn_range that can let userspace map the kernel area as writable. Documents consistently describe the issue as kernel memory mapping in remap_pfn_range, with potential for local/remote-like impact depe...

CVE-2022-20354

CVE-2022-20354 affects Android 11, 12 and 12L. The issue is in the VPN subsystem (onDefaultNetworkChanged in Vpn.java) and arises from a logic error that can allow disabling VPN, enabling local elevation of privilege with no extra execution privileges required. The impact is described as local Eo...

CVE-2022-20448

The CVE-2022-20448 issue affects Android (10–13) via the buzzBeepBlinkLocked path in NotificationManagerService.java, enabling data sharing across users due to a permissions bypass and resulting in local privilege escalation without extra execution privileges. The exposed component is Android’s N...

CVE-2022-20469

CVE-2022-20469 affects Android Bluetooth stack. The vulnerability is an out-of-bounds write in avct_lcb_msg_asmbl (avct_lcb_act.cc), caused by a missing bounds check, enabling local privilege escalation over Bluetooth without user interaction. Affected versions include Android-10, Android-11, And...

CVE-2022-20495

CVE-2022-20495 affects Android 10–13 in Android’s AccessibilityManager.getEnabledAccessibilityServiceList due to a logic error that can hide an accessibility service, enabling local privilege escalation without extra privileges or user interaction. PT-Security documentation (PT-2022-14708) provid...

CVE-2022-20611

CVE-2022-20611 affects Android 10–13, arising from a permissions bypass in DeletePackageHelper.java: deletePackageVersionedInternal can bypass carrier restrictions, enabling local privilege escalation without additional execution privileges. Exploitation is local and does not require user interac...

CVE-2023-21286

CVE-2023-21286 affects Android’s RemoteViews.java, specifically the visitUris path. The issue is described as a missing permission check that could allow a local attacker to reveal images across users, resulting in local escalation of privilege without requiring extra execution privileges. The ex...

CVE-2023-40131

CVE-2023-40131 affects the GpuService component in Android (GpuService.cpp). The issue is a use-after-free caused by a race condition, enabling local elevation of privilege with no additional execution privileges required, and no user interaction needed for exploitation. The available connected d...

CVE-2023-45777

CVE-2023-45777 affects Android’s AccountManagerService (checkKeyIntentParceledCorrectly) where a Parcel Mismatch could let an attacker launch arbitrary activities with system privileges, causing local elevation of privilege. Public details consistently describe this as a local, no-auth vulnerabil...

CVE-2024-40674

The Google Android mobile operating system is affected by a denial of service vulnerability in the WifiConfigurationUtil.java component. A logic error within the validateSsid function can lead to an overflow of a system configuration file , resulting in a local denial of service . This vulnerabil...

CVE-2015-5524

CVE-2015-5524 affects Samsung mobile devices running KK (Android 4.4) and later up to 2015-05-13, due to a buffer overflow in datablock_write caused by unvalidated received data. The Samsung internal ID is SVE-2015-4018. The CVSS indicates high severity (CRITICAL in CVSS‑3.1; High in CVSS‑2). Ava...

CVE-2019-2056

CVE-2019-2056 describes a local information disclosure in Android 10 caused by improper crypto usage that can leak RAM via a shared crypto key. The impact is local information disclosure with no user interaction required. The CVE is listed under Android Framework in the 2020-04 Android security b...

CVE-2021-0475

CVE-2021-0475 is documented across multiple sources as a remote code execution (RCE) vulnerability in the Android System component, impacting Android 10 and 11 with fixes delivered for patch levels 10 and 11. The NVD entry describes a use-after-free memory corruption in Bluetooth (btif_sock_l2cap...

CVE-2022-20131

CVE-2022-20131 affects Android (10–12/12L) with a root cause in nci_proc_rf_management_ntf of nci_hrcv.cc, causing an out-of-bounds read that can disclose information remotely without user interaction. The issue is linked to the Android RF management notification path and is mapped to a System/ID...

CVE-2023-20910

CVE-2023-20910 is an Android vulnerability in the WifiNetworkSuggestionsManager (Wifi) that allows a local DoS via resource exhaustion. Exploitation requires local access; no user interaction is needed. The issue is documented across multiple sources (NVD, OSV, Nessus/NCSC) with CVSSv3.1 metrics ...

CVE-2023-20920

CVE-2023-20920 describes a memory corruption vulnerability in the UsbRequest.java queue of Android, caused by a use-after-free. Affects Android 10–13 according to the Android security bulletin references. Impact is local escalation of privilege with high severity (CVSS: LO-CI). The vulnerability ...

CVE-2023-21092

Summary: CVE-2023-21092 affects Android 11–13. The issue arises in retrieveServiceLocked in ActiveServices.java, where input validation allows dynamically registering a BroadcastReceiver with system-app privileges. This enables local elevation of privilege with no extra execution privileges and n...

CVE-2023-21121

CVE-2023-21121 affects Android 11–12 and concerns an input validation issue in the onResume method of AppManagementFragment.java. The underlying problem could allow local elevation of privilege without additional execution privileges or user interaction. Exploitation is described as local (attack...