CVE-2023-21140

CVE-2023-21140 affects Android’s ManagePermissionsActivity.java. The root cause is a missing permission check in onCreate, allowing a local attacker with physical access to bypass factory reset protections and escalate privileges without any user interaction. Impact is described as local EoP with...

CVE-2023-40094

CVE-2023-40094 is a local-EoP flaw in Android’s System component. The root cause is a missing permission check in keyguardGoingAway() within ActivityTaskManagerService.java, enabling a lock-screen bypass with no user interaction. The vulnerability affects Android 11–14 per the 2023-12 security bu...

CVE-2024-0052

Google Android's HealthConnect component contains an information disclosure vulnerability due to a missing permission check in multiple functions. This flaw can lead to the leakage of exercise route data , allowing an attacker to obtain sensitive information locally without requiring additional e...

CVE-2017-13179

CVE-2017-13179 describes an out-of-bounds write in SoftHEVC caused by a use-after-free in ihevcd_allocate_static_bufs and ihevcd_create. Both ps_codec_obj and ps_create_op->s_ivd_create_op_t.pv_handle reference the same memory, allowing the former to be freed without clearing pv_handle. This c...

CVE-2019-1987

CVE-2019-1987 affects Google Android Framework components (notably a flaw in SkSwizzler.cpp) where a missing bounds check allows an out-of-bounds write, enabling remote code execution in a privileged context. Impact is described as high/severe, requiring user interaction for exploitation, with af...

CVE-2020-0416

CVE-2020-0416 affects the Android System component across Android 8.0–11. The issue is an elevation-of-privilege via tapjacking in multiple settings screens caused by an insecure default value, requiring user interaction to exploit and enabling local escalation of privileges and permissions. Docu...

CVE-2021-0310

CVE-2021-0310 affects Android 11 in the LazyServiceRegistrar component. The connected documents describe a memory corruption issue caused by a use-after-free in LazyServiceRegistrar.cpp, enabling local escalation of privilege with no additional execution privileges required and no user interactio...

CVE-2021-0311

CVE-2021-0311 is a real Android vulnerability describing an out-of-bounds write in ElementaryStreamQueue::dequeueAccessUnitH264() (ESQueue.cpp) that could lead to remote information disclosure. Affects Android 8.0–11; exploitation requires user interaction. The issue is categorized as ID in the A...

CVE-2021-0695

CVE-2021-0695 is a vulnerability in the Android kernel (xt_qtaguid.c: get_sock_stat) caused by a use-after-free that enables an out-of-bounds read leading to local information disclosure. Exploitation is local (no user interaction required) per the description; impact is partial confidentiality. ...

CVE-2022-20470

CVE-2022-20470 affects Android where bindRemoteViewsService in AppWidgetServiceImpl.java can bypass background activity launch due to improper input validation, enabling local elevation of privilege without extra privileges. Affected: Android 10–13 (per README). Connected documents corroborate th...

CVE-2022-20493

CVE-2022-20493 affects Android 10–13 (Android-10 to Android-13) via Condition.java, where improper input validation could grant notification access and cause local elevation of privilege. Exploitation requires user interaction; no additional execution privileges are needed. Patch references point...

CVE-2022-20501

CVE-2022-20501 affects Android by described tapjacking/overlay in EnableAccountPreferenceActivity.onCreate, enabling a malicious phone account and potential local elevation of privilege. Affected: Android 10–13 (Android-10, -11, -12, -12L, -13). No exploit details provided in the supplied documen...

CVE-2023-21289

CVE-2023-21289 affects Google Android and is an information-disclosure issue caused by a confused-deputy bypass of a multi-user security boundary. The description in connected records indicates local information disclosure with no extra privileges and no user interaction required. Public referenc...

CVE-2025-20656

A vulnerability exists in the DA component of MediaTek microprogramming software due to a missing bounds check , which leads to an out-of-bounds write in memory. An attacker with physical access to the device can exploit this flaw to achieve local privilege escalation and potentially expose prote...

CVE-2020-0380

CVE-2020-0380 affects Android: a flaw in allocExcessBits (bitalloc.c) allows a remote out-of-bounds write due to an incorrect bounds check, enabling potential remote code execution without user interaction. Impacted Android versions include 8.0, 8.1, 9, 10, and 11. The issue is categorized under ...

CVE-2021-0519

CVE-2021-0519 is a Android Media Framework vulnerability disclosed in the August 2021 Android bulletin. The issue is described as an Escalation of Privilege and Information Disclosure in the Media Framework (Media Codecs) that could allow a local attacker to bypass OS protections with no user int...

CVE-2022-20349

CVE-2022-20349 affects Android 10–12(12L) and concerns the WifiScanningPreferenceController and BluetoothScanningPreferenceController. The issue is a possible admin restriction bypass caused by a missing permission check, enabling local elevation of privilege with no additional execution privileg...

CVE-2022-20413

The CVE-2022-20413 issue is in Android’s media handling logic, specifically at the start of Threads.cpp, enabling an attacker to record audio during a phone call. The flaw can cause local information disclosure with User privileges and does not require user interaction, with exploitation describe...

CVE-2022-21767

CVE-2022-21767 affects MediaTek Bluetooth on multiple chips. Root cause: out-of-bounds write due to missing boundary checks in Bluetooth, enabling local escalation of privilege with no user interaction. Patch ALPS06784430/ALPS06784430 issued; Android/Mart evidence references list Bluetooth as aff...

CVE-2023-20911

CVE-2023-20911 affects Google's Android platform (Android 11–13) and centers on the addPermission path in PermissionManagerServiceImpl.java. The root cause is a risk of failing to persist permission settings due to resource exhaustion, which could enable local elevation of privilege without requi...

CVE-2023-20948

CVE-2023-20948 affects Android (Android-12/12L/13) with a flaw in AAVCAssembler.cpp: in dropFramesUntilIframe there is a possible out-of-bounds read caused by a heap buffer overflow, leading to remote information disclosure without extra privileges or user interaction. Connections show no publish...

CVE-2023-21135

CVE-2023-21135 affects Google Android: the issue occurs in the onCreate path of NotificationAccessSettings.java, where improper input validation can cause a failure to persist notification settings. The underlying problem is an input validation defect in the code path that manages notification ac...

CVE-2023-21139

CVE-2023-21139 is tied to Android 13 in the SysUI component, where the unsafe Intent in the MediaControlPanel.java function bindPlayer can launch a privileged activity. This creates a local elevation-of-privilege risk with no extra execution privileges and no user interaction required for exploit...

CVE-2023-21245

CVE-2023-21245 affects Google's Android Framework, specifically the showNextSecurityScreenOrFinish path in KeyguardSecurityContainerController.java. A logic error could allow access to the lock screen during device setup, enabling local elevation of privilege without user interaction. Exploitatio...

CVE-2023-40133

CVE-2023-40133: In multiple locations of DialogFillUi.java, a confused deputy vulnerability allows an attacker to perform local information disclosure by viewing another user’s images. This requires no user interaction and can be exploited with local privileges (low attack complexity, low privile...

CVE-2024-20148

A security vulnerability exists in MediaTek chipsets affecting the wlan STA FW module. The issue is caused by improper input validation , which can lead to a possible out-of-bounds write . This flaw could allow an attacker to achieve remote (proximal/adjacent) code execution without requiring add...

CVE-2024-31331

CVE-2024-31331 affects the Android Framework, specifically a logic error in PackageManagerService.java setMimeGroup that can hide the service from Settings. This can enable local elevation of privilege with high impact (confidentiality/integrity/availability). Exploitation requires local access a...

CVE-2025-20645

A security vulnerability exists in MediaTek Chipsets affecting the KeyInstall component. The flaw stems from a missing bounds check , which could lead to an out-of-bounds write . A malicious actor who has already obtained System privilege could exploit this to achieve local escalation of privileg...

CVE-2025-27700

Google Pixel devices are affected by a local elevation of privilege (EoP) vulnerability identified as CVE-2025-27700 . The flaw originates in the oobconfig subcomponent, where an unusual root cause allows for a bypass of carrier restrictions . An attacker can exploit this to gain elevated privile...

CVE-2026-0073

CVE-2026-0073 is a critical authentication bypass vulnerability in the Android Debug Bridge (adbd ) daemon, specifically affecting Wireless Debugging on Android 14, 15, and 16 . The root cause is a logic error in the adbd_tls_verify_cert() function within daemon/auth.cpp. The system uses EVP_PKEY...

CVE-2019-2094

CVE-2019-2094 affects Android media framework (NuPlayerCCDecoder.cpp). The issue is a possible out-of-bounds write in parseMPEGCCData due to missing bounds checks, enabling remote code execution with no extra privileges and requiring user interaction to exploit. Impact is high (RCE, high confiden...

CVE-2019-2103

CVE-2019-2103 affects Android 9 Framework. It describes a permissions bypass that could allow the Google Assistant to screenshot FLAG_SECURE apps, leading to local information disclosure without user interaction. The Android Security Bulletin lists CVE-2019-2103 under Framework with Type ID and H...

CVE-2021-0322

CVE-2021-0322 affects Android, specifically SlicePermissionActivity.java. In onCreate, an input-validation issue could cause a misleading string to be displayed, potentially enabling local information disclosure. The vulnerability requires user interaction for exploitation and affects Android 9–1...

CVE-2021-0336

CVE-2021-0336 (Android) affects Android 8.1–11. Root cause: a vulnerability in onReceive of BluetoothPermissionRequest.java allows a permissions bypass via a mutable PendingIntent, enabling local escalation of privilege by bypassing a permission check. Exploitation is described as requiring only ...

CVE-2021-0516

CVE-2021-0516 affects Android (versions 8.1, 9, 10 and 11) and is caused by a use-after-free in p2p_pd.c (p2p_process_prov_disc_req) leading to an out-of-bounds read/write. The vulnerability can enable remote elevation of privilege with no additional execution privileges and without user interact...

CVE-2021-0640

CVE-2021-0640 affects Android devices; in the StatsdStats.cpp file, the function noteAtomLogged contains a missing bounds check leading to an out-of-bounds write. This could allow local elevation of privilege without user interaction. Affected products/versions: Android 10, Android 11, Android 9....

CVE-2021-0690

CVE-2021-0690 is an Android vulnerability describing an out-of-bounds write (heap buffer overflow) in ih264d_parse_pslice.c that could cause remote information disclosure without extra privileges. Affected Android versions include 8.1, 9, 10, and 11. The issue is exploitable via network-like cond...

CVE-2021-0934

Summary: CVE-2021-0934 is a DoS in Android: in the function findAllDeAccounts of AccountsDb.java, causing resource exhaustion and local denial of service without extra privileges or user interaction. Affected products/versions include Android 10–13. The vulnerability’s impact is DoS; no exploit d...

CVE-2022-20125

Technical details about CVE-2022-20125 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-20166

CVE-2022-20166 refers to a heap-based out-of-bounds write in multiple Android kernel base drivers that can enable local privilege escalation to SYSTEM. The issue requires no user interaction to exploit and is exploited via heap buffer overflow in kernel base drivers, granting local code execution...

CVE-2022-20398

CVE-2022-20398 affects Android 13 via addOrUpdateNetwork in WifiServiceImpl.java. A permissions bypass could let a guest user configure Wi‑Fi, enabling local escalation of privilege with User execution privileges needed and no user interaction required. CVSS: LOCAL, HIGH impact (C/H/I/A). Exploit...

CVE-2022-20426

CVE-2022-20426 affects Android 10–13, with a DoS condition caused by resource exhaustion in multiple functions across many files that can block a user from selecting a phone account. The impact is local denial of service with no privileges or user interaction required. The vulnerability is docume...

CVE-2022-20475

CVE-2022-20475 is an Elevation of Privilege vulnerability in Android (affecting Android-11 through Android-13) tied to ResetTargetTaskHelper.java tests. It enables hijacking of apps that set allowTaskReparenting="true" via a confused deputy, leading to local privilege escalation with no additiona...

CVE-2023-20952

The CVE-2023-20952 issue is in the A2DP_BuildCodecHeaderSbc function of a2dp_sbc.cc, where a missing bounds check allows an out-of-bounds write. This can cause local information disclosure without requiring exploits or user interaction. Affected products/versions are Android 11, 12, 12L, and 13; ...

CVE-2023-21097

CVE-2023-21097 describes a local elevation of privilege in Android caused by a bug in toUriInner within Intent.java, allowing an attacker to launch an arbitrary activity. The vulnerability is classified as high severity (CVSS v3.1: LOCAL, LOW PRIVILEGES, UI:N, C:H/I:H/A:H) and affects Android 11,...

CVE-2023-21132

The CVE-2023-21132 issue originates in Android’s ManagePermissionsActivity.java onCreate, enabling local escalation of privilege when an attacker with physical device access can bypass factory reset protections due to a missing permission check. Affected component is the Android OS userland code ...

CVE-2023-21266

CVE-2023-21266 affects Android’s ActivityManagerService.java, describing a permissions bypass that could enable local escalation of privilege with no additional execution privileges required. Exploitation is stated to require no user interaction. The connected documents consistently frame this as...

CVE-2023-21281

Summary (concrete details from connected docs): CVE-2023-21281 affects the Android Framework, specifically the KeyguardViewMediator.java logic, where a flaw can cause a failure to lock after screen timeout. This enables local elevation of privilege across users with no additional execution privil...

CVE-2024-0051

CVE-2024-0051 : The vulnerability is in onQueueFilled of SoftMPEG4.cpp, causing a possible out-of-bounds write due to a heap buffer overflow. The issue could lead to local elevation of privilege without requiring user interaction, as described across multiple sources (e.g., NVD/Red Hat CNVD/CVE l...

CVE-2024-23707

CVE-2024-23707 is an Android elevation-of-privilege issue caused by improper input validation in multiple locations, enabling a local bypass with no additional execution privileges but requiring user interaction. Public references show the flaw as fixed in Android’s 2024-05 patch cycle, with the ...