CVE-2026-0119

Summary: CVE-2026-0119 involves an out-of-bounds write caused by memory corruption in the function usim_SendMCCMNCIndMsg within usim_Registration.c. The vulnerability can enable a physical escalation of privilege with no additional execution privileges required and no user interaction needed. The...

CVE-2026-0144

The CVE-2026-0144 issue is described as a memory safety flaw in writeAocCommand of AocAudioCodec.cpp caused by a missing bounds check, potentially enabling remote denial of service without user interaction. Exploitation details, affected products/versions, and remediation are not provided in the ...

CVE-2026-0154

CVE-2026-0154 affects the Modem component and describes a memory corruption issue triggered by a SIP REFER request that could enable remote code execution with no additional privileges and without user interaction. The connected documents consistently state this is a Modem/SIP REFER memory corrup...

CVE-2025-48575

Technical details (affected product, versions, root cause, fix) are not publicly provided in the supplied documents. Monitor updates from Android security bulletins and vendor advisories for concrete remediation guidance.

CVE-2025-48582

CVE-2025-48582 describes a local elevation-of-privilege in Android where media files can be deleted without MANAGE_EXTERNAL_STORAGE due to an intent redirect. The issue affects media-related components (MediaProvider/Media codecs) and can be exploited with local access and no user interaction. Th...

CVE-2025-48592

CVE-2025-48592 describes a vulnerability in the C2SoftDav1dDec.cpp decoder where in initDecoder there is an out-of-bounds read caused by a heap buffer overflow. This can lead to remote information disclosure without extra privileges or user interaction. The available connected sources (Red Hat, E...

CVE-2025-48632

In setDisplayName of AssociationRequest.java, there is a potential vulnerability where CDM associations can persist after user disassociation due to improper input validation. This could enable local privilege escalation with no additional privileges and without user interaction. The CVE-2025-486...

CVE-2025-48653

CVE-2025-48653 affects Google Android, with a logic error in loadDataAndPostValue across multiple files that may obscure permission usage and enable local privilege escalation without extra privileges or user interaction. Affects Android components as described in multiple feeds; CVSS vectors ind...

CVE-2026-0064

CVE-2026-0064 is identified as a DoS vulnerability affecting Android Framework in Android 17 release notes. The issue describes a persistent denial of service due to resource exhaustion that can lead to local denial of service without user interaction. The NVD entry lists a base score of 5.5 (MED...

CVE-2026-0136

CVE-2026-0136 affects the Modem component, where a missing bounds check allows an out-of-bounds read. This can lead to remote denial of service without user interaction and with no additional execution privileges required. Public references consistently describe it as a DoS condition impacting Mo...

CVE-2026-0151

CVE-2026-0151 describes an out-of-bounds write in the function IntfGraphCreate() (intfgraph.c) caused by an integer overflow. The vulnerability could enable remote code execution with no required privileges and no user interaction. All connected sources consistently cite this exact issue and its ...

CVE-2026-0153

CVE-2026-0153: Out-of-bounds write in Write of msg_to_host_buffer.cc due to an incorrect bounds check; could enable local escalation of privilege with no user interaction. Pixel bulletin lists EdgeTPU as the affected subcomponent; initial materials do not publish a patch version or mitigation ste...

CVE-2026-20425

CVE-2026-20425 describes a local escalation-of-privilege due to a missing bounds check that allows an out-of-bounds write in display logic. Exploitation requires no user interaction and would grant System-level privileges to a sufficiently privileged attacker. The reports consistently cite the sa...

CVE-2026-28615

CVE-2026-28615 affects Telecomm and is described as a permissions bypass that could allow initiating an unauthorized phone call, leading to local elevation of privilege without any additional execution privileges or user interaction. Technical details across sources confirm the vulnerability is l...

CVE-2025-32332

CVE-2025-32332 describes a use-after-free memory corruption in multiple locations, enabling local escalation of privilege with no additional execution privileges or user interaction. CVSSv3.1 base score 7.8 (LOCAL, HIGH). Exploitation is described as local; no exploit details are provided in the ...

CVE-2025-32333

CVE-2025-32333 concerns a logic error in the Android SpaActivity implementation (SpaActivity.kt) that can enable a cross-user permission bypass, leading to local privilege escalation with no user interaction and no additional execution privileges required. The Connected documents (PT-2025-36043 a...

CVE-2025-48556

CVE-2025-48556 affects NotificationChannel.java with a desynchronization-from-persistence issue caused by improper input validation. This can enable local privilege escalation and requires user interaction to exploit. The connected PT-2025-36076 entry notes the affected file and the local-privile...

CVE-2025-48577

CVE-2025-48577 affects KeyguardViewMediator.java in Android, describing a race-condition that could allow a lockscreen bypass and local elevation of privilege without user interaction. Connected sources (NVD/RH/CNVD) corroborate the lockscreen bypass and local-privilege impact (I/H, C/H/A/H in CV...

CVE-2025-48583

CVE-2025-48583 involves a logic error in BaseBundle.java across multiple Android components, enabling potential arbitrary code execution and local privilege escalation without user interaction. The issue is described consistently across NVD/Red Hat/OSV and related sources as an Elevation of Privi...

CVE-2025-48624

CVE-2025-48624 is a local privilege-escalation vulnerability in the Linux kernel's ARM SMMU v3 driver (arm-smmu-v3.c) caused by improper input validation, leading to an out-of-bounds write in multiple functions. The issue could allow local escalation with no extra privileges and does not require ...

CVE-2026-0021

CVE-2026-0021 describes a cross-user permission bypass in AppInfoBase.java (hasInteractAcrossUsersFullPermission). The flaw enables local escalation of privilege with no extra execution privileges required and no user interaction needed to exploit. Android ecosystem sources (NVD/NCSC/CIRCL/CVELIS...

CVE-2026-0111

CVE-2026-0111 affects the function ns_GetUserData in ns_SmscbUtilities.c, where an incorrect bounds check can cause an out-of-bounds write. This vulnerability could enable remote escalation of privilege without user interaction. Connected documents (Red Hat CVE entry, NVD/NVD-based summaries, EUV...

CVE-2026-0165

CVE-2026-0165 is described across multiple sources as a vulnerability in the RTCP packet decoder where several functions perform an out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure with no execution privileges gained. Exploitation requires user in...

CVE-2026-28575

CVE-2026-28575 affects the Android framework in PackageInstaller.Session.transfer (frameworks/base/services/core/java/com/android/server/pm/PackageInstallerSession.java). The issue is described as a logic error causing memory exhaustion that can lead to a local denial of service without requiring...

CVE-2025-20698

CVE-2025-20698 affects Power HAL and describes an out-of-bounds write caused by a missing bounds check. The impact is local escalation of privilege to System level without user interaction. The vulnerability details indicate the presence of a patch (ALPS09915400) and a tracked Issue ID (MSV-3793)...

CVE-2025-20721

Inimgsensor, there is a confirmed out-of-bounds write due to a missing bounds check that can enable local escalation of privilege when System privileges are present. No user interaction is required. The issue is tracked with Patch ID ALPS10089545 and Issue ID MSV-4279. Affected component is imgse...

CVE-2025-48584

CVE-2025-48584 affects the Android Framework via NotificationManagerService.java, where a method can bypass per-package channel limits, enabling local DoS through resource exhaustion without user interaction. The issue is documented across multiple feeds (NVD/Red Hat/ENISA/OSV) and is categorized...

CVE-2025-48600

CVE-2025-48600 is described across connected sources as an information-disclosure issue caused by a missing permission check that could reveal data across users with local access (no user interaction). The public references point to Android security bulletins and related Android source changes, s...

CVE-2025-48609

CVE-2025-48609 involves a path traversal issue in MmsProvider.java across Google Android components that can allow arbitrary file deletion and impact telephony, SMS, and MMS features. The vulnerability can cause a local denial of service without extra privileges or user interaction, as reported b...

CVE-2025-48615

Technical details (affected product/version, root cause, exploitability, impact, patch) for CVE-2025-48615 are not publicly provided in the supplied documents. The CVE is referenced in patch previews but no specifics are available here.

CVE-2025-61610

CVE-2025-61610 affects UNISOC nr modem. The issue is improper input validation in the modem’s processing, which can cause a system crash and remote denial of service without extra privileges. CVSS v3.1 vector indicates network attack, low attack complexity, no user interaction, and availability i...

CVE-2026-0042

CVE-2026-0042 describes a persistent denial-of-service risk in multiple functions of ubsan_throwing_runtime.cpp due to resource exhaustion. The issue enables local denial of service without elevation of privileges and does not require user interaction. The affected context is the UBSan throwing r...

CVE-2026-0132

CVE-2026-0132 concerns the Modem component. The connected documents describe a vulnerability where an out-of-bounds write occurs due to a heap buffer overflow, enabling remote code execution with no additional privileges and no user interaction required. The CVSS metrics indicate network attack v...

CVE-2026-0134

CVE-2026-0134 describes a data persistence issue in PostWipeData within recovery_ui.cpp, exposing local information after a factory reset due to a logic error. Impact is information disclosure with no additional privileges required and no user interaction needed. The available documents do not sp...

CVE-2026-0155

CVE-2026-0155 describes an OOB read in ImsMediaBitReader::ReadByteBuffer caused by a missing bounds check. This leads to remote information disclosure without additional execution privileges and requires no user interaction. The CVSS 3.1 vector indicates Network access with low attack complexity ...

CVE-2026-28581

Technical details for CVE-2026-28581 are not publicly available in the provided documents; monitor for updates.

CVE-2025-20746

The CVE-2025-20746 entry concerns GNSS service software (as referenced across multiple sources) with an out-of-bounds write caused by an incorrect bounds check. This condition can enable local privilege escalation to System if already present, with no user interaction required. The vulnerability ...

CVE-2025-36889

CVE-2025-36889 is a local information-disclosure vulnerability affecting Google Pixel devices in the Camera2 path. The issue arises in onCreateTasks of CameraActivity.java where a permission bypass due to a confused deputy could allow information disclosure without requiring additional execution ...

CVE-2025-36904

CVE-2025-36904 maps to a WLAN elevation-of-privilege issue on Google Pixel devices. Connected OSV data describes a Broadcom Wi‑Fi driver vulnerability in wl_android_get_best_channels, an out-of-bounds write caused by unvalidated list->count. The Pixel bulletin indicates updating to 2025-09-05 ...

CVE-2025-36930

CVE-2025-36930 involves a potential out-of-bounds write in GetHostAddress of gxp_buffer.h, caused by a missing bounds check. This can lead to local elevation of privilege with no extra execution privileges or user interaction required. Multiple feeds (NVD, Red Hat, ENISA, CVE lists, and Android P...

CVE-2025-48601

Technical details (affected products, exact root cause, and fixes) are not publicly disclosed in the provided documents. Monitor for updates from the listed sources.

CVE-2025-48619

CVE-2025-48619 affects Android’s ContentProvider.java (ContentProvider) where a logic error can let an app with read-only access truncate files, causing local elevation of privilege without extra privileges or user interaction. Public sources (NVD/NVDCNVD) describe the issue and note Android secu...

CVE-2025-48627

CVE-2025-48627 affects the Android Framework, specifically the startNextMatchingActivity path in ActivityTaskManagerService.java. The issue is a logic error that can allow launching an activity from the background, resulting in local escalation of privilege without additional execution privileges...

CVE-2025-48638

CVE-2025-48638 affects Google Android’s pKVM (protected Kernel-based Virtual Machine) in the kernel, specifically in __pkvm_load_tracing within trace.c. The flaw is an out-of-bounds write caused by improper input validation, enabling local escalation of privilege with no additional execution priv...

CVE-2026-0039

CVE-2026-0039 describes a persistent DoS via an integer overflow in multiple functions of ubsan_throwing_runtime.cpp. Affected: GrapheneOS (prior to 2026030200) and likely other components cited in NVD/NVD-derived feeds. Exploitation would be remote, with no user interaction required, and could i...

CVE-2026-0083

Summary: CVE-2026-0083 describes a possible use-after-free in Nfc::eventCallback() within Nfc.h caused by a race condition, enabling local privilege escalation with no additional privileges and no user interaction required. Connected sources (NVD, EUVD, CIRCL, CVE lists) reproduce the same descri...

CVE-2026-20426

CVE-2026-20426 describes a local privilege escalation via an out-of-bounds write caused by a missing bounds check in display handling. The vulnerability could allow a user with System privileges to escalate, with exploitation not requiring user interaction (local access). A patch is available: AL...

CVE-2026-20441

CVE-2026-20441 affects MediaTek MAE and describes a possible out-of-bounds write caused by a missing bounds check, potentially enabling local privilege escalation without user interaction once System privileges are obtained. The vulnerability details are consistently reported across multiple sour...

CVE-2026-20444

CVE-2026-20444 affects MediaTek chipsets. The issue is a memory corruption caused by a missing bounds check in display, enabling local escalation of privilege from System with no user interaction required. Patch: ALPS10436995; Issue ID: MSV-5721. Connected sources (Red Hat, NVD, CVE list, etc.) c...

CVE-2025-20730

CVE-2025-20730 concerns MediaTek’s MediaTek ALPS preloader with an insecure default value that can enable local elevation of privilege. The vulnerability allows a scenario where a user with System privileges could escalate further without user interaction. The CVE is documented across multiple fe...