CVE-2025-48564

CVE-2025-48564 affects Android Framework components and is caused by a race-condition that enables an attacker to bypass intent filters, leading to local escalation of privilege with no extra execution privileges or user interaction required. Multiple connected sources describe this as a local Eo...

CVE-2025-48589

CVE-2025-48589 affects Google Android components, with the vulnerability located in multiple functions of HeaderPrivacyIconsController.kt. The underlying issue is a logic error that can grant permissions across users, enabling local elevation of privilege without extra execution privileges and wi...

CVE-2025-48607

Technical details about CVE-2025-48607 are not publicly available in the provided documents. Sources reiterate a local DoS due to a logic error but do not specify affected products/versions or remediation. Monitor for updates.

CVE-2025-48654

CVE-2025-48654 concerns the Android CompanionDeviceManagerService.java, where a logic error in onStart can cause a confused deputy leading to local elevation of privilege. Exploitation does not require user interaction. Affected component: CompanionDeviceManagerService (Android). Reported impact:...

CVE-2026-0015

CVE-2026-0015 affects Android components, notably multiple locations in AppOpsService.java where improper input validation can cause a persistent, local Denial of Service . Exploitation requires no user interaction and does not grant additional privileges. The Red Hat/NCSC/NVD entries corroborate...

CVE-2026-0037

CVE-2026-0037 corresponds to a memory corruption issue in multiple functions of ffa.c, caused by a logic error. The CVE affects Google Android components and is described as enabling local escalation of privilege with no extra execution privileges and no user interaction required. The impact is n...

CVE-2026-0045

CVE-2026-0045 concerns a logic error in the Bluetooth stack: in bta_jv_rfcomm_connect of bta_jv_act.cc , there is a possible bypass of bonding for a secure connection. This could allow local escalation of privilege with no additional execution privileges needed, and requires no user interaction t...

CVE-2026-0061

CVE-2026-0061 involves multiple functions of WindowState.java where a tapjacking/overlay condition could trick a user into accepting a permission. The issue allows local privilege escalation with no additional execution privileges and does not require user interaction for exploitation, per the pr...

CVE-2026-0075

The CVE-2026-0075 entry describes a SQL injection that could permit access to the contacts database, enabling local escalation of privilege with no additional privileges required and no user interaction needed. Connected documents (including RH/CVE, EUVD, NVD, CNNVD, and others) reiterate the sam...

CVE-2026-20411

CVE-2026-20411 affects the cameraisp component, with a use-after-free condition that enables escalation of privileges and could cause local denial of service when the attacker already has System privileges. Exploitation is reported as not requiring user interaction. The vulnerability is accompani...

CVE-2023-42703

The CVE-2023-42703 entry describes a vulnerability in the firewall service where a missing permission check allows writing permission usage records for an app, enabling local information disclosure without additional execution privileges. Affected context is the firewall service component; underl...

CVE-2023-42705

CVE-2023-42705 concerns IMS service (imsservice) where a missing permission check allows writing permission usage records for an app, enabling local information disclosure without extra execution privileges. Multiple sources corroborate a local-privacy impact tied to imsservice, with CVSSv3.1/AV:...

CVE-2025-20707

CVE-2025-20707 : In geniezone, a memory corruption due to use-after-free is reported. This could enable local escalation of privilege for an attacker already with System privileges; exploitation does not require user interaction. Patch ID: ALPS09924201; Issue ID: MSV-3820.

CVE-2025-26418

Technical details (affected products, exact component, exploit conditions, remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2025-32317

CVE-2025-32317 affects the Android App Widget, where a confused deputy leads to a local information disclosure without extra privileges or user interaction. The issue is categorized as Information Disclosure (CVE type) with a CVSSv3.1 base score of 5.5 (Medium) and a Local attack vector with Conf...

CVE-2025-36890

CVE-2025-36890 is a WLAN Elevation of Privilege issue affecting Google Pixel devices. The public details indicate a root cause in the BCM WiFi driver: an out‑of‑bounds/write issue when handling firmware messages, specifically when wl_notify_scan_status is invoked in response to the WLC_E_SCAN_COM...

CVE-2025-36898

CVE-2025-36898 is a local elevation-of-privilege vulnerability affecting Google Pixel devices, tied to a logic error in the Pixel Sim Lock component. Exploitation requires local access; no user interaction is needed. The CVSS v3.1 score is 7.8 (High) with exploitation described as LOCAL, LOW comp...

CVE-2025-48588

Technical details about CVE-2025-48588 are not publicly provided in the supplied documents. Monitor for updates from Android and vendor advisories to obtain affected products, root cause specifics, impact, and fixes.

CVE-2025-48605

CVE-2025-48605 concerns Android’s KeyguardViewMediator.java, where a logic error in multiple functions enables a potential lockscreen bypass. The vulnerability allows local escalation of privilege without extra execution privileges and without user interaction, as described in multiple sources (N...

CVE-2025-48640

CVE-2025-48640 is described across multiple connected sources as a remote elevation of privilege in Android components caused by a missing permission check during 3rd‑party passkey entry pairing approval. The impact is high (CVE notes adjacent/remote escalation with no user interaction) with a lo...

CVE-2025-48648

Technical details about CVE-2025-48648 are not publicly available in the provided documents. The descriptions only reiterate a potential local DoS in NotificationManagerService.java without specifics on affected versions, root cause, or remediation. Monitor for updates.

CVE-2026-0040

CVE-2026-0040 affects code in ubsan_throwing_runtime.cpp where an integer overflow can crash the process, enabling remote denial of service with no user interaction. CVSSv3.1 metrics indicate NETWORK access, LOW privileges, LOW attack complexity, and HIGH availability impact. No remediation or ex...

CVE-2026-0081

CVE-2026-0081 concerns the Android NFC stack. The connected documents indicate a missing permission check in NFC that could allow spoofing an NFC event, enabling local escalation of privilege without any additional execution privileges and without user interaction. The exploitation details are no...

CVE-2026-0096

Technical details are not publicly available in the provided documents. Monitor for updates for potential affected products, impacted components, root cause, and remediation.

CVE-2026-0161

CVE-2026-0161 affects Google Android (Pixel bulletin context) with an out-of-bounds write in RtpSession.cpp due to an integer overflow in numberOfReportBlocks, enabling remote privilege escalation without user interaction. Connected sources (Android Pixel bulletin) flag this as an Elevation of Pr...

CVE-2026-28578

CVE-2026-28578 describes a vulnerability in multiple functions of Android’s DevicePolicyManagerService.java where there is a desync from persistence caused by improper input validation. This can lead to a local denial of service without requiring additional privileges or user interaction. Documen...

CVE-2025-20785

CVE-2025-20785 affects MediaTek chipsets (display component). The issue is a memory corruption via a use-after-free in display paths, leading to local privilege escalation if an attacker already has System privileges. Exploitation details or in-the-wild status are not provided in the documents. A...

CVE-2025-26461

CVE-2025-26461 affects Android's Permission Manager: a logic error allows the microphone privacy indicator to remain active after the app is closed, enabling local privilege escalation without additional privileges or user interaction. Reported as a low-severity issue (CVSS v3.1 base score 3.3) w...

CVE-2025-36906

CVE-2025-36906 involves a heap-buffer overflow in the ConvertReductionOp of darwinn_mlir_converter_aidl.cc, causing an out-of-bounds write that can lead to local privilege escalation. The vulnerability is exploitable with local access and does not require user interaction. The source documents co...

CVE-2025-36908

The CVE-2025-36908 entry describes an out-of-bounds write in lwis_top_register_io within lwis_device_top.c that could enable local privilege escalation with System execution privileges required. The description and related entries confirm the vulnerable component is the lwis top logic. No exploit...

CVE-2025-48524

CVE-2025-48524 is a local denial-of-service vulnerability in Android related to WifiPermissionsUtil.java isSystem, caused by a missing permission check. The issue enables a local attacker to trigger DoS without extra privileges and without user interaction. Exploitation details are not provided i...

CVE-2025-48535

Summary of CVE-2025-48535 (Android): A flaw in assertSafeToStartCustomActivity within AppRestrictionsFragment.java allows a parcel mismatch to trigger a launch-anywhere vulnerability via unsafe deserialization, enabling local elevation of privilege without additional execution privileges or user ...

CVE-2025-48538

CVE-2025-48538 affects the Android Framework, specifically the PackageManagerService.setApplicationHiddenSettingAsUser function. The root cause is improper input validation when hiding system-critical packages, which can allow local denial of service without requiring exploits or user interaction...

CVE-2025-48560

CVE-2025-48560 describes a vulnerability in Android/Wear OS where an app could monitor motion events via AndroidManifest.xml due to a confused deputy, enabling local information disclosure without extra privileges or user interaction. Connected sources (Wear OS security bulletin and related advis...

CVE-2025-48570

CVE-2025-48570 involves PipTaskOrganizer.java in Android, where a confused deputy allows launching an activity from the background, enabling local elevation of privilege without extra execution privileges. The CVE is described as a local, high-severity issue (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:...

CVE-2025-48578

CVE-2025-48578 is described across multiple sources as an elevation-of-privilege issue in Android’s MediaProvider.java, where a missing permission check could allow bypassing WRITE_EXTERNAL_STORAGE. The documented impact is local privilege escalation with no extra execution privileges required, a...

CVE-2025-48597

CVE-2025-48597 is an Android Framework–level tapjacking/overlay vulnerability that could enable local privilege escalation without user interaction. Reported details indicate the issue affects Android Framework components and is addressed via Android security patches at patch levels 2025-12-01 / ...

CVE-2025-48646

CVE-2025-48646 affects Google Android via the executeRequest path in ActivityStarter.java, enabling a possible elevation of privilege through a confused deputy. The issue is described as a local escalation of privilege requiring user interaction for exploitation. Affected context in public record...

CVE-2025-48649

Technical details for CVE-2025-48649 are not publicly available in the provided Connected and Initial documents. No product/vendor/version mappings or exploit information are specified. Monitor for updates from official advisories to obtain affected scope and remediation.

CVE-2026-0017

CVE-2026-0017 is tied to a logic error in BiometricService.java on the Android platform that could allow enabling fingerprint unlock and cause local elevation of privilege without additional execution privileges or user interaction. The vulnerability appears in the onChange path of BiometricServi...

CVE-2026-0026

CVE-2026-0026 describes a logic error in Android’s PermissionManagerServiceImpl.java removePermission path that could allow overriding any system permission, enabling local privilege escalation. Exploitation requires user interaction, and no additional execution privileges are stated. The connect...

CVE-2026-0035

CVE-2026-0035 affects the Android MediaProvider component. In MediaProvider.java's createRequest, a logic error can allow an app to gain read/write access to non-existent files, enabling local privilege escalation without extra execution privileges or user interaction. This vulnerability is docum...

CVE-2026-0067

Technical details, affected products, and remediation are not publicly provided in the supplied documents. Monitor for updates from the listed sources; no concrete exploit or affected versions can be confirmed from the material available.

CVE-2026-0120

CVE-2026-0120 affects the modem (baseband) and is caused by an incorrect bounds check leading to an out-of-bounds write. This could enable remote code execution without privileges and without user interaction. Public details across sources confirm the issue and its critical impact, but do not pro...

CVE-2026-0124

CVE-2026-0124 is described in connected sources as an out-of-bounds write due to a missing bounds check that enables local Elevation of Privilege without user interaction. In the Pixel security bulletin, it is listed under Pixel vulnerabilities as a Bootloader issue (EoP, Critical). The Red Hat a...

CVE-2026-0146

CVE-2026-0146 affects the Exynos MFC component referenced in Pixel security bulletins. The issue is a possible out-of-bounds write in mfc_core_get_dec_metadata_sei_nal (within mfc_core_reg_api.c) caused by a missing bounds check, which could allow remote code execution with no privileges and no u...

CVE-2026-0157

Summary of findings (CVE-2026-0157): The available documents consistently describe an out-of-bounds read in RtcpHeader::decodeRtcpHeader, caused by a missing bounds check. This leads to remote information disclosure without requiring user interaction; exploitation can occur over the network. The ...

CVE-2025-20695

The CVE-2025-20695 involves Bluetooth firmware where an uncaught exception can cause a system crash, leading to remote denial of service without extra privileges or user interaction. Affected component is Bluetooth firmware (MediaTek-based). The vulnerability’s impact is a high availability denia...

CVE-2025-20766

Summary: CVE-2025-20766 refers to a memory corruption issue caused by improper input validation in MediaTek chipsets. The vulnerability could enable local escalation of privilege to SYSTEM without user interaction, as indicated by a high-severity CVSS v3.1 base score (7.8) with LOCAL attack vecto...

CVE-2025-20802

In geniezone, a memory corruption vulnerability exists due to a use-after-free condition that could lead to local elevation of privilege if an attacker already has System privileges. No user interaction is required. A patch is available: ALPS10238968 (MSV-4914). This CVE references multiple sourc...