CVE-2023-42701

CVE-2023-42701 affects UNISOC firewall service in UNISOC chipsets. The root cause is a missing permission check that can allow an attacker to write permission usage records for an app, resulting in local information disclosure without requiring additional execution privileges. The NVD entry lists...

CVE-2023-42694

CVE-2023-42694 concerns the wifi service on UNISOC chipsets, with a reported missing permission check in the wifi service. The cited impact is local escalation of privilege requiring no additional execution privileges, and the CVSSv3.1 base metrics indicate a HIGH severity (AV:L/AC:L/PR:L/UI:N/S:...

CVE-2023-42704

CVE-2023-42704 affects imsservice in certain UNISOC-based environments. The root cause is a missing permission check that can allow an app to write permission usage records, enabling local information disclosure without requiring additional execution privileges. Reported impact aligns with NVD CV...

CVE-2023-42708

CVE-2023-42708 affects the firewall service, where a missing permission check could allow writing an app’s permission usage records, leading to local information disclosure without extra execution privileges. The issue is documented across multiple sources (NVD/Red Hat/PRion/CVE lists) and is ass...

CVE-2023-42718

CVE-2023-42718 concerns the dialer module, where a missing permission check can allow an app to write permission usage records. The exposed root cause is inadequate access control in the dialer’s permission handling, enabling local information disclosure without additional execution privileges. T...

CVE-2023-42732

Technical details about CVE-2023-42732 are not publicly available in the provided connected documents; monitor for updates from vendors and security advisories.

CVE-2023-42748

CVE-2023-42748 refers to a missing permission check in the telecom service that can enable local privilege escalation without additional execution privileges. The vulnerability is characterized by local access (attack vector LOCAL), low privilege required, and no user interaction, with high confi...

CVE-2024-49714

CVE-2024-49714 is an elevation-of-privilege vulnerability in the AVRCP vendor message path: in avrc_vendor_msg within avrc_opt.cc, a heap-buffer overflow can cause an out-of-bounds write. This enables local escalation on a paired device without extra privileges or user interaction. Exploitation i...

CVE-2025-20766

Summary: CVE-2025-20766 refers to a memory corruption issue caused by improper input validation in MediaTek chipsets. The vulnerability could enable local escalation of privilege to SYSTEM without user interaction, as indicated by a high-severity CVSS v3.1 base score (7.8) with LOCAL attack vecto...

CVE-2025-26418

Technical details (affected products, exact component, exploit conditions, remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2025-32346

CVE-2025-32346 pertains to VoicemailSettingsActivity.java in Android, where a confused deputy allows disclosure of work profile contact numbers, enabling local escalation of privilege with no additional privileges and no user interaction required. The connected documents reiterate the same root c...

CVE-2025-36903

CVE-2025-36903 affects the lwis_io_buffer_write path (lwis) with an out-of-bounds read/write caused by insufficient input validation. The issue enables local elevation of privilege without extra execution privileges or user interaction (per the CVE description and corroborating sources). Public r...

CVE-2025-36907

CVE-2025-36907 affects the Android Pixel stack: a heap buffer overflow in the draw_surface_image() function of abl/android/lib/draw/draw.c allows an out-of-bounds write. This can lead to local elevation of privilege via USB fastboot after a bootloader unlock, with no additional execution privileg...

CVE-2025-48550

CVE-2025-48550 is a path traversal vulnerability in testGrantSlicePermission of SliceManagerTest.java that could cause a permanent Denial of Service locally, without user interaction. Exploitation is local and requires no additional privileges. The connected documents confirm the issue but do not...

CVE-2025-48551

CVE-2025-48551 involves an information-disclosure flaw in Android where an image can leak across the User isolation boundary due to a confused deputy. The vulnerability is local (AV:L/AC:L/PR:L/UI:R), requires user interaction, and could expose confidential data (C:H/I:N/A:N) without executing co...

CVE-2025-48563

CVE-2025-48563 covers an elevation-of-privilege flaw in Android caused by an insecure default value in onNullBinding of RemoteFillService.java. The issue can trigger a background activity launch without extra privileges or user interaction, enabling local privilege escalation. Public references c...

CVE-2025-48587

CVE-2025-48587 is linked to Google Android and involves multiple functions in ProfilingService.java where improper input validation can cause a persistent local denial of service without user interaction or extra privileges. The condition is confirmed across CVE/NVD entries and mirrored in relate...

CVE-2025-48637

CVE-2025-48637 affects the Android/Linux kernel code path mem_protect.c, where an integer overflow can cause an out-of-bounds write. This leads to local escalation of privilege with no additional execution privileges required and no user interaction needed. Multiple connected sources (Red Hat CVE...

CVE-2025-48640

CVE-2025-48640 is described across multiple connected sources as a remote elevation of privilege in Android components caused by a missing permission check during 3rd‑party passkey entry pairing approval. The impact is high (CVE notes adjacent/remote escalation with no user interaction) with a lo...

CVE-2025-48641

CVE-2025-48641 describes a use-after-free in multiple functions of Nfc.h caused by a race condition, enabling local elevation of privilege with no extra execution privileges and without user interaction. The issue is documented across multiple feeds (NVD, Red Hat, RH/CVE, OSV) and is referenced i...

CVE-2025-48648

Technical details about CVE-2025-48648 are not publicly available in the provided documents. The descriptions only reiterate a potential local DoS in NotificationManagerService.java without specifics on affected versions, root cause, or remediation. Monitor for updates.

CVE-2026-0146

CVE-2026-0146 affects the Exynos MFC component referenced in Pixel security bulletins. The issue is a possible out-of-bounds write in mfc_core_get_dec_metadata_sei_nal (within mfc_core_reg_api.c) caused by a missing bounds check, which could allow remote code execution with no privileges and no u...

CVE-2026-20411

CVE-2026-20411 affects the cameraisp component, with a use-after-free condition that enables escalation of privileges and could cause local denial of service when the attacker already has System privileges. Exploitation is reported as not requiring user interaction. The vulnerability is accompani...

CVE-2026-20414

CVE-2026-20414 affects the imgsys component. The issue is a use-after-free vulnerability that can enable local privilege escalation if an attacker already holds System privileges. Exploitation reportedly requires no user interaction. The advisory notes a patch: ALPS10362999 (Issue MSV-5625). Conn...

CVE-2018-11893

CVE-2018-11893 is a vulnerability in CAF-based Android WLAN code (Linux kernel) where processing a vendor scan request can overflow a buffer when the input length of request IEs exceeds the maximum. The issue is documented across multiple Android CAF releases (Android for MSM, Firefox OS for MSM,...

CVE-2018-5908

CVE-2018-5908 affects CAF Android builds using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The root cause is a missing buffer length validation in a display function, enabling a potential buffer overflow. CVSS indicates a local, low-complexity attack with HIGH impact acro...

CVE-2019-2171

CVE-2019-2171 affects Android 10, specifically the libxaac library, due to uninitialized data leading to information disclosure. The issue allows an attacker to disclose information without extra execution privileges; exploitation requires user interaction. Documents confirm impact on Android-10 ...

CVE-2022-47350

CVE-2022-47350 concerns a weakness in the UNISOC camera driver (chipsets) where a missing bounds check allows an out-of-bounds read. The effect described across sources is local denial of service with system-level privileges required for exploitation. The vulnerability is tied to the camera drive...

CVE-2023-30930

CVE-2023-30930 concerns a missing permission check in the telephony service, enabling local information disclosure without extra privileges. Multiple sources (NVD description and Red Hat/CVE pages) describe the impact as local information disclosure with no execution privileges required. Connecte...

CVE-2023-38450

CVE-2023-38450 concerns the vowifiservice with a missing permission check that can allow local escalation of privilege. Vulnerable component: vowifiservice; root cause: inadequate permission validation. Impact per sources: local privilege escalation with high impact; exploitation context: local a...

CVE-2023-42676

CVE-2023-42676 affects the imsservice in UNISOC chipsets, where a missing permission check enables local information disclosure by writing permission usage records. The vulnerability is described with LOCAL attack vector, low privileges required, and high confidentiality impact (CVSS v3.1: 5.5, M...

CVE-2023-42677

The vulnerability CVE-2023-42677 affects imsservice. A missing permission check allows writing permission usage records for apps, exposing local information and impacting confidentiality without requiring additional privileges. Affected details across sources consistently describe information dis...

CVE-2023-42719

CVE-2023-42719 affects a component described as a video service, where an incorrect bounds check can cause an out-of-bounds read leading to local denial of service. The primary sources consistently state the issue as a local condition with no explicit remote vector or exploitation details provide...

CVE-2023-42730

CVE-2023-42730 describes a vulnerability in the IMS service where a missing permission check allows writing permission usage records, enabling local information disclosure without extra privileges. The NVD entry lists a CVSS 3.1 base score of 5.5 (Medium) with Local attack vector, Low attack comp...

CVE-2023-42734

The CVE-2023-42734 entry describes a vulnerability in the telephony service where a missing permission check can lead to local information disclosure without requiring additional execution privileges. Affected component: telephony service (platform-level). Root cause: insufficient access control ...

CVE-2023-42742

CVE-2023-42742 affects the sysui component (UNISOC chipsets). The root cause is a missing permission check, enabling a local denial‑of‑service with no additional execution privileges required. The documented impact is local DoS with high availability impact; exploitation status is not provided in...

CVE-2023-42744

CVE-2023-42744 concerns a missing permission check in a telecom service, enabling local denial of service without additional privileges. From NVD, the CVSSv3.1 base score is 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Exploitation details are not provided in the supplied documents, and no explicit...

CVE-2025-20805

CVE-2025-20805 affects dpe with a memory corruption via use-after-free. The issue can lead to local escalation of privilege if an entity already has System privileges, with no user interaction required. Patch ALPS10114696 mitigates this, under MSV-4480. Connected sources (Red Hat, NVD, CVE record...

CVE-2025-32330

CVE-2025-32330 : The issue is in generateRandomPassword of LocalBluetoothLeBroadcast.java, where an insecure default value can allow a nearby attacker to intercept the Auracast audio stream, causing remote information disclosure without extra privileges or user interaction. The connected document...

CVE-2025-32345

The CVE-2025-32345 issue affects Android’s ContentProtectionTogglePreferenceController.java (updateState), where a logic error allows a secondary user to disable the primary user’s deceptive app scanning setting. This enables local privilege escalation with no additional privileges or user intera...

CVE-2025-32349

CVE-2025-32349 is a local elevation-of-privilege issue in Google Android, arising from a tapjacking/overlay scenario. The vulnerability allows local escalation without additional execution privileges and requires no user interaction. Public references indicate it affects Android platform componen...

CVE-2025-36906

CVE-2025-36906 involves a heap-buffer overflow in the ConvertReductionOp of darwinn_mlir_converter_aidl.cc, causing an out-of-bounds write that can lead to local privilege escalation. The vulnerability is exploitable with local access and does not require user interaction. The source documents co...

CVE-2025-48547

CVE-2025-48547 is an Android elevation-of-privilege issue affecting the Permission Controller/Android framework. A logic error allows a one-time permission bypass in multiple locations, enabling local privilege escalation with no extra execution privileges required; exploitation requires user int...

CVE-2025-48554

CVE-2025-48554 affects Google Android (DevicePolicyManagerService.java). A logic error in handlePackagesChanged can cause a persistent DoS, with local impact and user interaction required for exploitation. No PoC details are provided in the documents. Remediation: apply the Android security patch...

CVE-2025-48575

Technical details (affected product, versions, root cause, fix) are not publicly provided in the supplied documents. Monitor updates from Android security bulletins and vendor advisories for concrete remediation guidance.

CVE-2025-48589

CVE-2025-48589 affects Google Android components, with the vulnerability located in multiple functions of HeaderPrivacyIconsController.kt. The underlying issue is a logic error that can grant permissions across users, enabling local elevation of privilege without extra execution privileges and wi...

CVE-2025-48622

CVE-2025-48622 affects the Android/OpenCV-related code path in the dng_misc_opcodes.cpp file, within the ProcessArea, where a buffer overflow can cause an out-of-bounds read. This leads to local information disclosure without requiring user interaction or elevated privileges. The available connec...

CVE-2025-48649

Technical details for CVE-2025-48649 are not publicly available in the provided Connected and Initial documents. No product/vendor/version mappings or exploit information are specified. Monitor for updates from official advisories to obtain affected scope and remediation.

CVE-2026-0026

CVE-2026-0026 describes a logic error in Android’s PermissionManagerServiceImpl.java removePermission path that could allow overriding any system permission, enabling local privilege escalation. Exploitation requires user interaction, and no additional execution privileges are stated. The connect...

CVE-2026-0082

CVE-2026-0082 affects the Android framework: in NfcDispatcher.java’s tryStartActivity there is an insecure default value that can automatically assign a special app access permission. This leads to local elevation of privilege with no extra execution privileges required and no user interaction ne...