CVE-2023-38451

The CVE-2023-38451 entry describes a vulnerability in vowifiservice caused by a missing permission check, enabling local privilege escalation with no additional execution privileges. Reported impact includes high confidentiality/integrity/availability concerns and a CVSS v3.1 base score of 7.8 (L...

CVE-2023-42697

CVE-2023-42697 affects the omacp service. A missing permission check could allow writing an app’s permission usage records, leading to local information disclosure with no additional execution privileges. The connected documents provide the issue and impact but do not specify exploitation status ...

CVE-2023-42700

CVE-2023-42700 affects the firewall service on Unisoc chipsets, where a missing permission check allows an app to write permission usage records, leading to local information disclosure. The NVD report assigns CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (base score 5.5). Exploitation status is...

CVE-2023-42729

CVE-2023-42729 affects the ril service (noted in multiple feeds, including NVD and downstream advisories). The vulnerability is caused by a missing bounds check, leading to an out-of-bounds write. This could enable a local denial of service and may allow system execution privileges to be leverage...

CVE-2023-42745

Technical details (affected product/component/versions/root cause) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-42746

CVE-2023-42746 is described as a local privilege-escalation due to a missing permission check in the power manager. The NVD entry notes local attack vector with low privileges required and no user interaction, and a high impact on confidentiality, integrity, and availability (CVSS 3.1 base score ...

CVE-2025-20766

Summary: CVE-2025-20766 refers to a memory corruption issue caused by improper input validation in MediaTek chipsets. The vulnerability could enable local escalation of privilege to SYSTEM without user interaction, as indicated by a high-severity CVSS v3.1 base score (7.8) with LOCAL attack vecto...

CVE-2025-20795

CVE-2025-20795 describes an out-of-bounds write in the KeyInstall component caused by a missing bounds check, enabling local escalation to System privileges. Exploitation does not require user interaction per the description. Public records reference a patch: ALPS10276761 (MSV-5141). The CVSS met...

CVE-2025-26418

Technical details (affected products, exact component, exploit conditions, remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2025-26419

CVE-2025-26419 affects the Wear OS/Android component SystemSettingsFragment.java (initPhoneSwitch). A logic error enables a Factory Reset Protection (FRP) bypass, potentially allowing local elevation of privilege. Exploitation requires user interaction; no additional execution privileges are need...

CVE-2025-32323

CVE-2025-32323: In Shared.java getCallingAppName, input validation allows deceptive permission-popup text to trick users into granting file access. This enables local elevation of privilege, with no additional execution privileges and no user interaction required. Affected: Android framework code...

CVE-2025-36896

CVE-2025-36896 affects WLAN on Google Pixel devices running Android prior to the 2025-09-05 patch level. The issue is an elevation of privilege in the WLAN component; CVSS 3.1 base score 9.8 (CRITICAL) with network attack vector, no user interaction required. The Pixel security bulletin groups th...

CVE-2025-36906

CVE-2025-36906 involves a heap-buffer overflow in the ConvertReductionOp of darwinn_mlir_converter_aidl.cc, causing an out-of-bounds write that can lead to local privilege escalation. The vulnerability is exploitable with local access and does not require user interaction. The source documents co...

CVE-2025-36922

CVE-2025-36922 is a kernel-side issue in bigo_map() within bigo_iommu.c that enables information disclosure via a use-after-free, enabling local privilege escalation with SYSTEM-level execution privileges. Exploitation is not user-initiated. Affected platform details in public postings point to P...

CVE-2025-48534

CVE-2025-48534 affects Android’s CellBroadcast handling code. In getDefaultCBRPackageName of CellBroadcastHandler.java, a logic error may allow privilege escalation, yielding local denial of service with System execution privileges and no user interaction required. Current connected sources confi...

CVE-2025-48648

Technical details about CVE-2025-48648 are not publicly available in the provided documents. The descriptions only reiterate a potential local DoS in NotificationManagerService.java without specifics on affected versions, root cause, or remediation. Monitor for updates.

CVE-2026-0008

CVE-2026-0008 describes a local privilege escalation due to a confused deputy in multiple locations. Exploitation requires no user interaction and can lead to total privilege gain. Connected sources reference Android/Samsung updates; NCSC notes that Google fixed vulnerabilities in Android (14–16)...

CVE-2026-0035

CVE-2026-0035 affects the Android MediaProvider component. In MediaProvider.java's createRequest, a logic error can allow an app to gain read/write access to non-existent files, enabling local privilege escalation without extra execution privileges or user interaction. This vulnerability is docum...

CVE-2026-0108

The CVE-2026-0108 entry concerns misconfigured register protection on the PowerVR GPU, enabling local information disclosure without privileges or user interaction. The connected documents (Red Hat, ENISA EUVD, NVD, OSV, Android Pixel bulletin) describe the issue consistently but do not provide a...

CVE-2026-28578

CVE-2026-28578 describes a vulnerability in multiple functions of Android’s DevicePolicyManagerService.java where there is a desync from persistence caused by improper input validation. This can lead to a local denial of service without requiring additional privileges or user interaction. Documen...

CVE-2023-30930

CVE-2023-30930 concerns a missing permission check in the telephony service, enabling local information disclosure without extra privileges. Multiple sources (NVD description and Red Hat/CVE pages) describe the impact as local information disclosure with no execution privileges required. Connecte...

CVE-2023-38441

CVE-2023-38441 affects vowifiservice. The root cause is a missing permission check, which could allow local information disclosure without requiring additional privileges. The issue is characterized by LOCAL attack vector, LOW exploit complexity, and MEDIUM base score (C: HIGH confidentiality imp...

CVE-2023-38450

CVE-2023-38450 concerns the vowifiservice with a missing permission check that can allow local escalation of privilege. Vulnerable component: vowifiservice; root cause: inadequate permission validation. Impact per sources: local privilege escalation with high impact; exploitation context: local a...

CVE-2023-42677

The vulnerability CVE-2023-42677 affects imsservice. A missing permission check allows writing permission usage records for apps, exposing local information and impacting confidentiality without requiring additional privileges. Affected details across sources consistently describe information dis...

CVE-2023-42707

Summary of CVE-2023-42707 : A vulnerability in the firewall service of UNISOC chipsets (as described in multiple sources) arises from a missing permission check that can allow a local attacker to write records of an app’s permission usage, causing local information disclosure without extra execut...

CVE-2025-20805

CVE-2025-20805 affects dpe with a memory corruption via use-after-free. The issue can lead to local escalation of privilege if an entity already has System privileges, with no user interaction required. Patch ALPS10114696 mitigates this, under MSV-4480. Connected sources (Red Hat, NVD, CVE record...

CVE-2025-22415

CVE-2025-22415 affects Android Wear OS devices and is described as a local elevation-of-privilege in the android_app component of Android.bp, where there is a path to launch any activity as a system user without user interaction. The root cause is tied to the System component behavior in Wear OS/...

CVE-2025-48542

CVE-2025-48542 is an Android vulnerability affecting AccountManagerService.java, causing a possible permanent denial of service due to resource exhaustion. Exploitation is local, requires no additional privileges, and does not require user interaction. Multiple connected sources corroborate the i...

CVE-2025-48547

CVE-2025-48547 is an Android elevation-of-privilege issue affecting the Permission Controller/Android framework. A logic error allows a one-time permission bypass in multiple locations, enabling local privilege escalation with no extra execution privileges required; exploitation requires user int...

CVE-2025-48564

CVE-2025-48564 affects Android Framework components and is caused by a race-condition that enables an attacker to bypass intent filters, leading to local escalation of privilege with no extra execution privileges or user interaction required. Multiple connected sources describe this as a local Eo...

CVE-2025-48578

CVE-2025-48578 is described across multiple sources as an elevation-of-privilege issue in Android’s MediaProvider.java, where a missing permission check could allow bypassing WRITE_EXTERNAL_STORAGE. The documented impact is local privilege escalation with no extra execution privileges required, a...

CVE-2025-48587

CVE-2025-48587 is linked to Google Android and involves multiple functions in ProfilingService.java where improper input validation can cause a persistent local denial of service without user interaction or extra privileges. The condition is confirmed across CVE/NVD entries and mirrored in relate...

CVE-2025-48611

Summary of CVE-2025-48611 : The vulnerability is in the DeviceId.java code path (DeviceId class) where a missing bounds check can cause a desync in persistence, enabling local elevation of privilege without extra execution privileges or user interaction. This is consistently described across mult...

CVE-2025-48635

CVE-2025-48635 affects Google Android, with a logic error in multiple paths of TaskFragmentOrganizerController.java that leaks an activity token. The vulnerability can enable local elevation of privilege without additional execution privileges and without user interaction. The issue is described ...

CVE-2026-0007

Consolidated sources describe CVE-2026-0007 as a vulnerability in WindowInfo.cpp, writeToParcel, enabling a tapjacking/overlay attack that could grant permissions and allow local elevation of privilege without additional execution privileges. Exploitation details are not provided in the Initial d...

CVE-2026-0011

CVE-2026-0011 is described across multiple sources as a logic error in enableSystemPackageLPw() within Settings.java that can prevent location access from functioning, enabling local privilege elevation without requiring additional execution privileges and without user interaction. This vulnerabi...

CVE-2026-0060

Technical details about CVE-2026-0060 are not publicly available in the provided documents. No affected products, vectors, or mitigations are specified here. Monitor for updates as new information becomes available.

CVE-2026-0094

Technical details for CVE-2026-0094 are not publicly available in the provided documents; monitor for updates.

CVE-2026-0107

The CVE-2026-0107 issue lies in the function gmc_ddr_handle_mba_mr_req within gmc_mba_ddr.c, causing a possible local privilege escalation due to a confused deputy. No user interaction is required, and the vulnerability can be exploited locally with no additional privileges. The description is co...

CVE-2026-0126

In WC-Radio, there is a confirmed vulnerability causing an out-of-bounds write due to a missing bounds check. This can lead to remote code execution with no privileges and no user interaction required. The issue is detailed across multiple feeds (NVD entry CVE-2026-0126, EUVD-2026-, and related O...

CVE-2026-28576

In Android, the Contacts Provider is affected by CVE-2026-28576, caused by a SQL injection in the contacts database access path. This allows local information disclosure without extra execution privileges and without user interaction. The issue is described across CVE entries and ENISA/Android re...

CVE-2023-38438

CVE-2023-38438 affects vowifiservice. The issue is a missing permission check in vowifiservice that can lead to local information disclosure without additional execution privileges. According to NVD metrics, the attack is local with low privileges required, and can disclose high-confidentiality d...

CVE-2023-38452

Technical details (affected components, versions, exploit scenarios, patches) are not publicly provided in the connected documents. Monitor sources for updates.

CVE-2023-42680

The CVE-2023-42680 entry concerns a vulnerability in the GPU driver where a missing bounds check enables an out-of-bounds read, potentially causing local denial of service with SYSTEM privileges. The available documents consistently describe the issue as a GPU driver boundary-check failure and it...

CVE-2023-42688

The CVE-2023-42688 issue is described across connected sources as a missing permission check in the wifi service, enabling local privilege escalation with no extra privileges. This aligns with the Red Hat/NVD/CNNVD entries and the UNISOC/CNNVD narratives, showing a local-privilege-elevation impac...

CVE-2025-22426

CVE-2025-22426 involves a logic error in ComputerEngine.java that can allow cross-user access to URIs, enabling local privilege escalation without user interaction. Exploitation details and affected product/version specifics are not provided in the documents; remediation/patch details are not exp...

CVE-2025-32327

CVE-2025-32327 affects Google Android via SQL injection in multiple functions of PickerDbFacade.java, enabling unauthorized data access and local elevation of privilege with no user interaction. Impact and exploit details are stated in multiple sources (NVD, Red Hat, CNVD, OSV). Root cause is an ...

CVE-2025-32331

CVE-2025-32331 involves a logic error in showDismissibleKeyguard within KeyguardService.java that could allow bypassing app pinning, enabling local escalation of privilege without user interaction. The connected sources consistently describe a local-privilege-elevation scenario tied to KeyguardSe...

CVE-2025-32345

The CVE-2025-32345 issue affects Android’s ContentProtectionTogglePreferenceController.java (updateState), where a logic error allows a secondary user to disable the primary user’s deceptive app scanning setting. This enables local privilege escalation with no additional privileges or user intera...

CVE-2025-32347

CVE-2025-32347 affects the Android BiometricEnrollIntroduction.java onStart path, where an unsafe PendingIntent can disclose the device’s location, enabling local privilege elevation with no extra privileges. Exploitation requires user interaction. Root cause: unsafe PendingIntent leading to info...