CVE-2025-48555

The CVE-2025-48555 entry concerns a vulnerability in the Android code path involving NotificationStation.java, where cross-profile information disclosure can occur due to a confused deputy. The impact is local privilege escalation without requiring additional execution privileges or user interact...

CVE-2025-48589

CVE-2025-48589 affects Google Android components, with the vulnerability located in multiple functions of HeaderPrivacyIconsController.kt. The underlying issue is a logic error that can grant permissions across users, enabling local elevation of privilege without extra execution privileges and wi...

CVE-2025-48597

CVE-2025-48597 is an Android Framework–level tapjacking/overlay vulnerability that could enable local privilege escalation without user interaction. Reported details indicate the issue affects Android Framework components and is addressed via Android security patches at patch levels 2025-12-01 / ...

CVE-2025-48607

Technical details about CVE-2025-48607 are not publicly available in the provided documents. Sources reiterate a local DoS due to a logic error but do not specify affected products/versions or remediation. Monitor for updates.

CVE-2025-48611

Summary of CVE-2025-48611 : The vulnerability is in the DeviceId.java code path (DeviceId class) where a missing bounds check can cause a desync in persistence, enabling local elevation of privilege without extra execution privileges or user interaction. This is consistently described across mult...

CVE-2025-48620

CVE-2025-48620 affects Android's VoiceInteractionManagerService.java (onSomePackagesChanged). Description indicates a logic error could allow a third-party component name to persist after uninstall, enabling local privilege escalation with no extra privileges and no user interaction required. Con...

CVE-2025-48635

CVE-2025-48635 affects Google Android, with a logic error in multiple paths of TaskFragmentOrganizerController.java that leaks an activity token. The vulnerability can enable local elevation of privilege without additional execution privileges and without user interaction. The issue is described ...

CVE-2025-48637

CVE-2025-48637 affects the Android/Linux kernel code path mem_protect.c, where an integer overflow can cause an out-of-bounds write. This leads to local escalation of privilege with no additional execution privileges required and no user interaction needed. Multiple connected sources (Red Hat CVE...

CVE-2025-48642

The CVE-2025-48642 issue is described as a logic error in the Android payload.rs file’s jump_to_payload function that enables local information disclosure without requiring user interaction. Documented impact is information disclosure with local access; confidentiality is affected while no integr...

CVE-2025-48649

Technical details for CVE-2025-48649 are not publicly available in the provided Connected and Initial documents. No product/vendor/version mappings or exploit information are specified. Monitor for updates from official advisories to obtain affected scope and remediation.

CVE-2026-0017

CVE-2026-0017 is tied to a logic error in BiometricService.java on the Android platform that could allow enabling fingerprint unlock and cause local elevation of privilege without additional execution privileges or user interaction. The vulnerability appears in the onChange path of BiometricServi...

CVE-2026-0082

CVE-2026-0082 affects the Android framework: in NfcDispatcher.java’s tryStartActivity there is an insecure default value that can automatically assign a special app access permission. This leads to local elevation of privilege with no extra execution privileges required and no user interaction ne...

CVE-2026-0125

CVE-2026-0125 is a local elevation-of-privilege issue caused by a use-after-free in vpu_ioctl.c across multiple functions, triggered by a race condition. The vulnerability allows a local attacker to escalate privileges without additional execution privileges or user interaction, as described in s...

CVE-2026-0130

CVE-2026-0130 affects the RtcpChunk::decodeRtcpChunk path, where a heap buffer overflow can cause an out-of-bounds read. This may lead to remote information disclosure without extra execution privileges. Exploitation requires user interaction. The provided documents do not specify affected produc...

CVE-2026-20414

CVE-2026-20414 affects the imgsys component. The issue is a use-after-free vulnerability that can enable local privilege escalation if an attacker already holds System privileges. Exploitation reportedly requires no user interaction. The advisory notes a patch: ALPS10362999 (Issue MSV-5625). Conn...

CVE-2023-38452

Technical details (affected components, versions, exploit scenarios, patches) are not publicly provided in the connected documents. Monitor sources for updates.

CVE-2023-42703

The CVE-2023-42703 entry describes a vulnerability in the firewall service where a missing permission check allows writing permission usage records for an app, enabling local information disclosure without additional execution privileges. Affected context is the firewall service component; underl...

CVE-2023-42720

CVE-2023-42720 affects the video service in UNISOC chipsets. The root cause is a missing bounds check leading to an out-of-bounds read, which could enable local denial of service with no additional privileges. The CVSS 3.1 base score is 5.5 (Medium) with local attack vector and no user interactio...

CVE-2025-20802

In geniezone, a memory corruption vulnerability exists due to a use-after-free condition that could lead to local elevation of privilege if an attacker already has System privileges. No user interaction is required. A patch is available: ALPS10238968 (MSV-4914). This CVE references multiple sourc...

CVE-2025-36890

CVE-2025-36890 is a WLAN Elevation of Privilege issue affecting Google Pixel devices. The public details indicate a root cause in the BCM WiFi driver: an out‑of‑bounds/write issue when handling firmware messages, specifically when wl_notify_scan_status is invoked in response to the WLC_E_SCAN_COM...

CVE-2025-36898

CVE-2025-36898 is a local elevation-of-privilege vulnerability affecting Google Pixel devices, tied to a logic error in the Pixel Sim Lock component. Exploitation requires local access; no user interaction is needed. The CVSS v3.1 score is 7.8 (High) with exploitation described as LOCAL, LOW comp...

CVE-2025-36921

CVE-2025-36921 affects Google Pixel devices via ProtocolPsUnthrottleApn() in protocolpsadapter.cpp, where a missing bounds check enables an out-of-bounds read that can lead to local information disclosure and requires baseband firmware compromise. The exploitation is reported as possible without ...

CVE-2025-36937

CVE-2025-36937 affects the AudioDecoder::HandleProduceRequest path in audio_decoder.cc. The issue is an out-of-bounds write caused by an incorrect bounds check, which could enable remote code execution over the network without user interaction or extra privileges. Multiple connected sources (incl...

CVE-2025-48523

CVE-2025-48523 targets Android: the issue occurs in onCreate of SelectAccountActivity.java and allows adding contacts without the required permission due to a logic error. This enables local escalation of privilege with no additional execution privileges and without user interaction. Impact is de...

CVE-2025-48560

CVE-2025-48560 describes a vulnerability in Android/Wear OS where an app could monitor motion events via AndroidManifest.xml due to a confused deputy, enabling local information disclosure without extra privileges or user interaction. Connected sources (Wear OS security bulletin and related advis...

CVE-2025-48576

CVE-2025-48576 affects Android’s framework component NotificationManagerService.java, specifically the function updateNotificationChannelGroupFromPrivilegedListener. The issue is a possible permanent denial of service caused by resource exhaustion, leading to local DoS with no additional executio...

CVE-2025-48579

CVE-2025-48579 involves a local elevation-of-privilege in Android’s MediaProvider.java where a proxy/Confused Deputy behavior could bypass the external storage write permission. The issue can allow a local attacker to gain elevated privileges without additional execution privileges or user intera...

CVE-2025-48643

CVE-2025-48643 is an Android system-level issue described across multiple sources as a provisioning bypass caused by improper input validation, enabling local privilege escalation with no user interaction. The Android 17 security release notes classify it under System, with type EoP and a High se...

CVE-2025-48646

CVE-2025-48646 affects Google Android via the executeRequest path in ActivityStarter.java, enabling a possible elevation of privilege through a confused deputy. The issue is described as a local escalation of privilege requiring user interaction for exploitation. Affected context in public record...

CVE-2025-61614

CVE-2025-61614 affects the nr modem. The issue is a system crash caused by improper input validation, leading to remote denial of service with no privileges required. CVSS 3.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a base score of 7.5 (HIGH). Exploitation details are not provided in the doc...

CVE-2026-0026

CVE-2026-0026 describes a logic error in Android’s PermissionManagerServiceImpl.java removePermission path that could allow overriding any system permission, enabling local privilege escalation. Exploitation requires user interaction, and no additional execution privileges are stated. The connect...

CVE-2026-0120

CVE-2026-0120 affects the modem (baseband) and is caused by an incorrect bounds check leading to an out-of-bounds write. This could enable remote code execution without privileges and without user interaction. Public details across sources confirm the issue and its critical impact, but do not pro...

CVE-2026-0127

The CVE-2026-0127 entry describes an out-of-bounds read caused by memory corruption in NrmmMsgCodec::DecodeUPUTransparentContext (cn_NrmmDecoder.cpp). This vulnerability allows a remote denial of service (communication processor crash) with no user interaction and requires network access (per CVS...

CVE-2023-42705

CVE-2023-42705 concerns IMS service (imsservice) where a missing permission check allows writing permission usage records for an app, enabling local information disclosure without extra execution privileges. Multiple sources corroborate a local-privacy impact tied to imsservice, with CVSSv3.1/AV:...

CVE-2023-42733

CVE-2023-42733 involves a missing permission check in the telephony service of UNISOC chipsets, enabling local information disclosure without extra privileges. Documented impact: confidentiality loss (high); exploitation is local with low complexity and requires low privileges. Connected sources ...

CVE-2023-42737

CVE-2023-42737 affects telecom service in Unisoc chipsets, where a missing permission check allows writing permission usage records, exposing local information without extra execution privileges. CVSSv3.1 base score 5.5 (Medium); attack vector LOCAL, privileges LOW, user interaction NONE, confide...

CVE-2025-20706

CVE-2025-20706 affects the mbrain component, where a use-after-free memory corruption issue could enable local privilege escalation if an attacker has System privileges. The vulnerability requires no user interaction. A patch is referenced (ALPS09924624; MSV-3826). Connected sources confirm the i...

CVE-2025-20707

CVE-2025-20707 : In geniezone, a memory corruption due to use-after-free is reported. This could enable local escalation of privilege for an attacker already with System privileges; exploitation does not require user interaction. Patch ID: ALPS09924201; Issue ID: MSV-3820.

CVE-2025-32321

CVE-2025-32321 : isSafeIntent in AccountTypePreferenceLoader.java may bypass an intent type check due to a confused deputy, enabling local elevation of privilege with no extra privileges and no user interaction required. Connected sources confirm this is a local-privilege-elevation issue; no patc...

CVE-2025-36894

CVE-2025-36894 is a DoS issue affecting Google Pixel devices, categorized under the Modem component in the Pixel update bulletin. The vulnerability stems from a missing null check, enabling remote denial of service without additional privileges or user interaction. The Android Pixel bulletin assi...

CVE-2025-36908

The CVE-2025-36908 entry describes an out-of-bounds write in lwis_top_register_io within lwis_device_top.c that could enable local privilege escalation with System execution privileges required. The description and related entries confirm the vulnerable component is the lwis top logic. No exploit...

CVE-2025-48571

CVE-2025-48571 affects the btm_sec.cc code path and enables possible interception of SMS messages due to a logic error, leading to remote information disclosure with no extra privileges, requiring user interaction. The connected ENISA and NVD/NVD-derived entries corroborate this CVE as of Android...

CVE-2025-48588

Technical details about CVE-2025-48588 are not publicly provided in the supplied documents. Monitor for updates from Android and vendor advisories to obtain affected products, root cause specifics, impact, and fixes.

CVE-2025-48610

CVE-2025-48610 stems from a logic error in mem_protect.c __pkvm_guest_relinquish_to_host, enabling a local information disclosure without required privileges or user interaction. Affected component: Android/Linux kernel KVM (pkvm) code path. Impact: potential leakage of configuration data. Exploi...

CVE-2025-48622

CVE-2025-48622 affects the Android/OpenCV-related code path in the dng_misc_opcodes.cpp file, within the ProcessArea, where a buffer overflow can cause an out-of-bounds read. This leads to local information disclosure without requiring user interaction or elevated privileges. The available connec...

CVE-2026-0064

CVE-2026-0064 is identified as a DoS vulnerability affecting Android Framework in Android 17 release notes. The issue describes a persistent denial of service due to resource exhaustion that can lead to local denial of service without user interaction. The NVD entry lists a base score of 5.5 (MED...

CVE-2026-0119

Summary: CVE-2026-0119 involves an out-of-bounds write caused by memory corruption in the function usim_SendMCCMNCIndMsg within usim_Registration.c. The vulnerability can enable a physical escalation of privilege with no additional execution privileges required and no user interaction needed. The...

CVE-2026-0144

The CVE-2026-0144 issue is described as a memory safety flaw in writeAocCommand of AocAudioCodec.cpp caused by a missing bounds check, potentially enabling remote denial of service without user interaction. Exploitation details, affected products/versions, and remediation are not provided in the ...

CVE-2026-0153

CVE-2026-0153: Out-of-bounds write in Write of msg_to_host_buffer.cc due to an incorrect bounds check; could enable local escalation of privilege with no user interaction. Pixel bulletin lists EdgeTPU as the affected subcomponent; initial materials do not publish a patch version or mitigation ste...

CVE-2026-0154

CVE-2026-0154 affects the Modem component and describes a memory corruption issue triggered by a SIP REFER request that could enable remote code execution with no additional privileges and without user interaction. The connected documents consistently state this is a Modem/SIP REFER memory corrup...