CVE-2025-20746

The CVE-2025-20746 entry concerns GNSS service software (as referenced across multiple sources) with an out-of-bounds write caused by an incorrect bounds check. This condition can enable local privilege escalation to System if already present, with no user interaction required. The vulnerability ...

CVE-2025-20747

CVE-2025-20747 describes an out-of-bounds write in the gnss service caused by an incorrect bounds check. The issue could allow a local attacker with System privileges to escalate privileges, with no user interaction required. A patch is available (Patch ID: ALPS10010443; MSV-3966). Documented ref...

CVE-2025-20778

The CVE-2025-20778 entry describes an out-of-bounds write in the display component that could enable local privilege escalation if the attacker already has System privileges; exploitation does not require user interaction. The issue is tied to a missing bounds check and is documented across multi...

CVE-2025-22426

CVE-2025-22426 involves a logic error in ComputerEngine.java that can allow cross-user access to URIs, enabling local privilege escalation without user interaction. Exploitation details and affected product/version specifics are not provided in the documents; remediation/patch details are not exp...

CVE-2025-32329

CVE-2025-32329 affects Android Framework (Session.java). The described issue is a logic error in multiple Session.java functions that can permit viewing images belonging to another user on the device. This leads to local escalation of privilege with no additional execution privileges required and...

CVE-2025-36900

CVE-2025-36900 refers to an out-of-bounds write caused by an integer overflow in the function lwis_test_register_io within lwis_device_test.c. The impact described across multiple sources is local elevation of privilege requiring system execution privileges, with no user interaction needed. Affec...

CVE-2025-48583

CVE-2025-48583 involves a logic error in BaseBundle.java across multiple Android components, enabling potential arbitrary code execution and local privilege escalation without user interaction. The issue is described consistently across NVD/Red Hat/OSV and related sources as an Elevation of Privi...

CVE-2025-48609

CVE-2025-48609 involves a path traversal issue in MmsProvider.java across Google Android components that can allow arbitrary file deletion and impact telephony, SMS, and MMS features. The vulnerability can cause a local denial of service without extra privileges or user interaction, as reported b...

CVE-2025-48619

CVE-2025-48619 affects Android’s ContentProvider.java (ContentProvider) where a logic error can let an app with read-only access truncate files, causing local elevation of privilege without extra privileges or user interaction. Public sources (NVD/NVDCNVD) describe the issue and note Android secu...

CVE-2025-48622

CVE-2025-48622 affects the Android/OpenCV-related code path in the dng_misc_opcodes.cpp file, within the ProcessArea, where a buffer overflow can cause an out-of-bounds read. This leads to local information disclosure without requiring user interaction or elevated privileges. The available connec...

CVE-2025-48639

CVE-2025-48639 affects the Android Framework, specifically DefaultTransitionHandler.java, where a tapjacking/overlay flaw can unknowingly grant permissions to an app. This enables local elevation of privilege with user interaction required for exploitation. Public references indicate patch levels...

CVE-2025-48644

CVE-2025-48644 is described across multiple sources as a DoS issue caused by improper input validation in various locations, enabling a local denial-of-service with no user interaction or additional privileges required. The linked documents consistently frame the impact as a persistent DoS affect...

CVE-2025-48653

CVE-2025-48653 affects Google Android, with a logic error in loadDataAndPostValue across multiple files that may obscure permission usage and enable local privilege escalation without extra privileges or user interaction. Affects Android components as described in multiple feeds; CVSS vectors ind...

CVE-2025-61609

CVE-2025-61609 affects Unisoc modem components. The connected documents describe a vulnerability caused by improper input validation in the modem, which can cause a system crash and remote denial of service without requiring privileges. The impact is a DoS condition via network access, with no ex...

CVE-2025-61614

CVE-2025-61614 affects the nr modem. The issue is a system crash caused by improper input validation, leading to remote denial of service with no privileges required. CVSS 3.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a base score of 7.5 (HIGH). Exploitation details are not provided in the doc...

CVE-2026-0116

CVE-2026-0116 targets the __mfc_handle_released_buf function in mfc_core_isr.c, where a missing bounds check allows an out-of-bounds write. This can enable remote code execution with no privileges or user interaction required. Multiple sources (NVD, Red Hat, EUVD, vuln enrichment, and OSV entries...

CVE-2026-0148

The connected sources confirm a concrete issue in VideoRtpPayloadDecoderNode.cpp: an integer overflow can cause an out-of-bounds write, enabling remote code execution without extra privileges or user interaction. Affected component is VideoRtpPayloadDecoderNode.cpp (multiple functions). The CVE e...

CVE-2025-21024

Samsung Smart View before Android 16 is affected by CVE-2025-21024 due to the use of implicit intents for sensitive communication, enabling local attackers to access sensitive information through the affected component. The issue is described across multiple sources as a vulnerability in Smart Vi...

CVE-2025-26431

CVE-2025-26431 affects Android Wear OS (and related Android framework components) through a logic error in setupAccessibilityServices inside AccessibilityFragment.java that can cause an enabled accessibility service to be hidden. This enables local privilege escalation with no extra privileges an...

CVE-2025-36891

CVE-2025-36891 is an Elevation of Privilege affecting the Pixel WLAN subsystem (Android). The Pixel Update Bulletin classifies it as WLAN-related EoP with High severity and CVSSv3.1: 8.8 (Network attack vector, low attack complexity, low privileges required, no user interaction, scopes unchanged;...

CVE-2025-36892

CVE-2025-36892 is a Denial of Service vulnerability documented across multiple feeds, with confirmed impact on Google Pixel WLAN components. The NVD/Red Hat/NVD entries describe DoS as the issue’s outcome, rated CVSSv3.1 base score 7.5 (Network, Low attack complexity, No privileges, No user inter...

CVE-2025-48571

CVE-2025-48571 affects the btm_sec.cc code path and enables possible interception of SMS messages due to a logic error, leading to remote information disclosure with no extra privileges, requiring user interaction. The connected ENISA and NVD/NVD-derived entries corroborate this CVE as of Android...

CVE-2025-48575

Technical details (affected product, versions, root cause, fix) are not publicly provided in the supplied documents. Monitor updates from Android security bulletins and vendor advisories for concrete remediation guidance.

CVE-2025-48585

CVE-2025-48585 concerns multiple functions in ProfilingService.java, where improper input validation can cause a persistent local denial of service. The issue is described as a local impact with no privileges and no user interaction required for exploitation. The available sources (NVD, Red Hat, ...

CVE-2025-48611

Summary of CVE-2025-48611 : The vulnerability is in the DeviceId.java code path (DeviceId class) where a missing bounds check can cause a desync in persistence, enabling local elevation of privilege without extra execution privileges or user interaction. This is consistently described across mult...

CVE-2025-48638

CVE-2025-48638 affects Google Android’s pKVM (protected Kernel-based Virtual Machine) in the kernel, specifically in __pkvm_load_tracing within trace.c. The flaw is an out-of-bounds write caused by improper input validation, enabling local escalation of privilege with no additional execution priv...

CVE-2025-48642

The CVE-2025-48642 issue is described as a logic error in the Android payload.rs file’s jump_to_payload function that enables local information disclosure without requiring user interaction. Documented impact is information disclosure with local access; confidentiality is affected while no integr...

CVE-2026-0042

CVE-2026-0042 describes a persistent denial-of-service risk in multiple functions of ubsan_throwing_runtime.cpp due to resource exhaustion. The issue enables local denial of service without elevation of privileges and does not require user interaction. The affected context is the UBSan throwing r...

CVE-2026-0083

Summary: CVE-2026-0083 describes a possible use-after-free in Nfc::eventCallback() within Nfc.h caused by a race condition, enabling local privilege escalation with no additional privileges and no user interaction required. Connected sources (NVD, EUVD, CIRCL, CVE lists) reproduce the same descri...

CVE-2026-0109

CVE-2026-0109 affects the function dhd_tcpdata_info_get in dhd_ip.c, enabling a remote Denial of Service due to a precondition check failure. Exploitation requires no user interaction and can be remote (network vector). The strongest public context comes from Android Pixel bulletin entries, which...

CVE-2026-0134

CVE-2026-0134 describes a data persistence issue in PostWipeData within recovery_ui.cpp, exposing local information after a factory reset due to a logic error. Impact is information disclosure with no additional privileges required and no user interaction needed. The available documents do not sp...

CVE-2026-0136

CVE-2026-0136 affects the Modem component, where a missing bounds check allows an out-of-bounds read. This can lead to remote denial of service without user interaction and with no additional execution privileges required. Public references consistently describe it as a DoS condition impacting Mo...

CVE-2026-0141

CVE-2026-0141 describes a likely out-of-bounds read in decodeAppPacket of RtcpAppPacket.cpp caused by a missing bounds check. The vulnerability enables a remote information disclosure without requiring additional execution privileges and without user interaction. Public references in the provided...

CVE-2026-0145

CVE-2026-0145 affects Keymint; a logic error allows a permission bypass leading to local information disclosure without extra privileges or user interaction. Exploitation status and fix details are not provided in the supplied documents; several sources list the issue but no patch information is ...

CVE-2026-0151

CVE-2026-0151 describes an out-of-bounds write in the function IntfGraphCreate() (intfgraph.c) caused by an integer overflow. The vulnerability could enable remote code execution with no required privileges and no user interaction. All connected sources consistently cite this exact issue and its ...

CVE-2026-28581

Technical details for CVE-2026-28581 are not publicly available in the provided documents; monitor for updates.

CVE-2025-20705

CVE-2025-20705 concerns a memory corruption issue (use-after-free) in the MediaTek Modem’s monitor_hang path that could enable local privilege escalation if an attacker already has System privileges. Exploitation is described as not requiring user interaction. The vulnerability is tied to a patch...

CVE-2025-20768

CVE-2025-20768: A memory bounds-checking fault causes an out-of-bounds read, enabling local privilege escalation if an attacker already has SYSTEM privileges. No user interaction required. Patch ALPS10196993 (MSV-4805) is available; impact is described with HIGH confidentiality/integrity/availabi...

CVE-2025-20779

Summary: CVE-2025-20779 describes a use-after-free vulnerability in display handling caused by a race condition, leading to local escalation of privilege if an attacker already has System privileges. The issue is exploitable without user interaction and is categorized with a local attack vector. ...

CVE-2025-20784

CVE-2025-20784 affects MediaTek chipsets in the display component, where a memory corruption due to uninitialized data could allow local escalation to System privileges. Exploitation does not require user interaction. The issue is mitigated by patch ALPS10182882 (MSV-4683). The available connecte...

CVE-2025-48580

Technical details about CVE-2025-48580 are not publicly provided in the supplied documents. Monitor for updates from Android bulletin and vendor advisories for complete root-cause, affected products, and fixes.

CVE-2025-48599

The CVE-2025-48599 entry concerns the WifiScanModeActivity.java code path, where a missing permission check could allow local escalation of privilege. Multiple connected sources (Red Hat CVE page, ENISA EUVD entry, CNNVD, NVD, and OSV/CVE lists) describe the issue as a local privilege elevation w...

CVE-2025-48601

Technical details (affected products, exact root cause, and fixes) are not publicly disclosed in the provided documents. Monitor for updates from the listed sources.

CVE-2025-48612

CVE-2025-48612 affects Android work-profile contexts where an app can alter the main user's NFC payment default due to improper input validation at multiple locations. The root cause is input validation issues that enable a local escalation of privilege without additional execution privileges or ...

CVE-2025-48618

CVE-2025-48618 is an Android framework elevation-of-privilege vulnerability. In CommandParamsFactory.java, processLaunchBrowser could allow a browser interaction from the lockscreen due to improper locking, enabling physical escalation of privilege without user interaction. Impact is described as...

CVE-2025-48625

CVE-2025-48625 is a local privilege-escalation issue affecting Android (noted in the Android 16 QPR2 bulletin). The vulnerability arises from race conditions in UsbDataAdvancedProtectionHook.java, allowing access to USB data when the screen is off, with no user interaction required. Impact is des...

CVE-2025-48643

CVE-2025-48643 is an Android system-level issue described across multiple sources as a provisioning bypass caused by improper input validation, enabling local privilege escalation with no user interaction. The Android 17 security release notes classify it under System, with type EoP and a High se...

CVE-2026-0005

Technical details about CVE-2026-0005 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-0030

CVE-2026-0030 affects Android kernel code, specifically the function __host_check_page_state_range in mem_protect.c. The issue is an out-of-bounds write caused by an incorrect bounds check, enabling local privilege escalation without user interaction. Public descriptions across NVD, Red Hat, NCSC...

CVE-2026-0039

CVE-2026-0039 describes a persistent DoS via an integer overflow in multiple functions of ubsan_throwing_runtime.cpp. Affected: GrapheneOS (prior to 2026030200) and likely other components cited in NVD/NVD-derived feeds. Exploitation would be remote, with no user interaction required, and could i...