CVE-2026-0136

CVE-2026-0136 is an out-of-bounds read in the Modem component of Google Pixel devices, caused by a missing bounds check . An attacker can trigger a remote denial of service over the network with low complexity , requiring no privileges and no user interaction . The vulnerability is classified as ...

CVE-2026-20441

CVE-2026-20441 affects MediaTek MAE and describes a possible out-of-bounds write caused by a missing bounds check, potentially enabling local privilege escalation without user interaction once System privileges are obtained. The vulnerability details are consistently reported across multiple sour...

CVE-2026-28581

Technical details for CVE-2026-28581 are not publicly available in the provided documents; monitor for updates.

CVE-2026-28612

CVE-2026-28612 is a local escalation of privilege vulnerability in Android's ActivityStarter.java (specifically the resolveActivity method), caused by a logic error that enables Intent Redirection attacks. No additional execution privileges or user interaction are required to exploit it, yielding...

CVE-2026-28642

CVE-2026-28642 is a high-severity (CVSS 7.8) local privilege escalation vulnerability in Android's ActivityStarter.java (method executeRequest), caused by a logic error that permits an unauthorized background activity launch. Exploitation requires low privileges and no user interaction , with hig...

CVE-2025-20707

CVE-2025-20707 : In geniezone, a memory corruption due to use-after-free is reported. This could enable local escalation of privilege for an attacker already with System privileges; exploitation does not require user interaction. Patch ID: ALPS09924201; Issue ID: MSV-3820.

CVE-2025-20782

The CVE-2025-20782 issue affects MediaTek chipsets, involving an out-of-bounds write caused by a missing bounds check. The vulnerability could allow local escalation of privilege to System if an attacker already holds System privileges, with no user interaction required. A patch is identified as ...

CVE-2025-48556

CVE-2025-48556 affects NotificationChannel.java with a desynchronization-from-persistence issue caused by improper input validation. This can enable local privilege escalation and requires user interaction to exploit. The connected PT-2025-36076 entry notes the affected file and the local-privile...

CVE-2025-48599

The CVE-2025-48599 entry concerns the WifiScanModeActivity.java code path, where a missing permission check could allow local escalation of privilege. Multiple connected sources (Red Hat CVE page, ENISA EUVD entry, CNNVD, NVD, and OSV/CVE lists) describe the issue as a local privilege elevation w...

CVE-2025-48601

Technical details (affected products, exact root cause, and fixes) are not publicly disclosed in the provided documents. Monitor for updates from the listed sources.

CVE-2025-61609

CVE-2025-61609 affects Unisoc modem components. The connected documents describe a vulnerability caused by improper input validation in the modem, which can cause a system crash and remote denial of service without requiring privileges. The impact is a DoS condition via network access, with no ex...

CVE-2026-0030

CVE-2026-0030 affects Android kernel code, specifically the function __host_check_page_state_range in mem_protect.c. The issue is an out-of-bounds write caused by an incorrect bounds check, enabling local privilege escalation without user interaction. Public descriptions across NVD, Red Hat, NCSC...

CVE-2026-0042

CVE-2026-0042 describes a persistent denial-of-service risk in multiple functions of ubsan_throwing_runtime.cpp due to resource exhaustion. The issue enables local denial of service without elevation of privileges and does not require user interaction. The affected context is the UBSan throwing r...

CVE-2026-0116

CVE-2026-0116 targets the __mfc_handle_released_buf function in mfc_core_isr.c, where a missing bounds check allows an out-of-bounds write. This can enable remote code execution with no privileges or user interaction required. Multiple sources (NVD, Red Hat, EUVD, vuln enrichment, and OSV entries...

CVE-2026-0119

Summary: CVE-2026-0119 involves an out-of-bounds write caused by memory corruption in the function usim_SendMCCMNCIndMsg within usim_Registration.c. The vulnerability can enable a physical escalation of privilege with no additional execution privileges required and no user interaction needed. The...

CVE-2026-0127

The CVE-2026-0127 entry describes an out-of-bounds read caused by memory corruption in NrmmMsgCodec::DecodeUPUTransparentContext (cn_NrmmDecoder.cpp). This vulnerability allows a remote denial of service (communication processor crash) with no user interaction and requires network access (per CVS...

CVE-2026-20426

CVE-2026-20426 describes a local privilege escalation via an out-of-bounds write caused by a missing bounds check in display handling. The vulnerability could allow a user with System privileges to escalate, with exploitation not requiring user interaction (local access). A patch is available: AL...

CVE-2026-28584

CVE-2026-28584 is a local denial-of-service vulnerability in the Android Framework component, specifically in createSessionInternal of PackageInstallerService.java, caused by a logic error that can permanently DoS the device. Exploitation requires only low privileges and no user interaction. The ...

CVE-2025-11133

CVE-2025-11133 affects the Unisoc nr modem. The issue stems from improper input validation in the modem software, enabling a remote attacker to cause a system crash and remote denial of service without extra privileges. Affected products are Unisoc chipsets that include the nr modem component; Re...

CVE-2025-20746

The CVE-2025-20746 entry concerns GNSS service software (as referenced across multiple sources) with an out-of-bounds write caused by an incorrect bounds check. This condition can enable local privilege escalation to System if already present, with no user interaction required. The vulnerability ...

CVE-2025-32328

CVE-2025-32328 is an Android logic-error vulnerability in multiple Session.java functions that lets an attacker view images from another user, causing local privilege elevation with no extra execution privileges or user interaction required. Affected: Android Framework code path involving Session...

CVE-2025-36925

CVE-2025-36925 affects WAVES_send_data_to_dsp in libaoc_waves.c, where a missing bounds check can cause an out-of-bounds write. This leads to local escalation of privilege with no additional execution privileges required, and no user interaction is needed for exploitation. The connected Red Hat a...

CVE-2025-48634

The CVE-2025-48634 entry involves Android’s WindowManagerService relayoutWindow where a missing permission check enables a local elevation-of-privilege (EoP) attack. The vulnerability can be exploited with no user interaction and does not require additional execution privileges. Connected documen...

CVE-2026-0117

CVE-2026-0117 affects the MFC decoder path in mfc_dec_v4l2.c, where an incorrect bounds check enables an out-of-bounds write. This could lead to local escalation of privileges with no extra execution privileges required and no user interaction needed. The vulnerability is documented across multip...

CVE-2026-0151

CVE-2026-0151 describes an out-of-bounds write in the function IntfGraphCreate() (intfgraph.c) caused by an integer overflow. The vulnerability could enable remote code execution with no required privileges and no user interaction. All connected sources consistently cite this exact issue and its ...

CVE-2026-20410

In imgsys, a vulnerability CVE-2026-20410 is described as an out-of-bounds write caused by a missing bounds check in a component of imgsys. The impact is local escalation of privilege to System with confidentiality, integrity, and availability impact rated high in the CVSS vector (LOCAL, HIGH imp...

CVE-2026-20415

CVE-2026-20415 affects imgsys with memory corruption due to improper locking. The issue can lead to a local denial of service if an attacker already has System privileges; exploitation requires no user interaction. The publicly cited information does not specify exploit vectors beyond the local a...

CVE-2026-20417

CVE-2026-20417 concerns the PCIe subsystem where a missing bounds check enables an out-of-bounds write, potentially allowing local escalation of privilege if the attacker already has System privileges. Exploitation is described as local with no user interaction required; CVSS v3.1 vector shows lo...

CVE-2025-20747

CVE-2025-20747 describes an out-of-bounds write in the gnss service caused by an incorrect bounds check. The issue could allow a local attacker with System privileges to escalate privileges, with no user interaction required. A patch is available (Patch ID: ALPS10010443; MSV-3966). Documented ref...

CVE-2025-20767

CVE-2025-20767 affects MediaTek chipsets. The issue is an out-of-bounds write caused by an integer overflow in display handling, enabling local escalation of privilege if the attacker already has System-level privileges. Exploitation details are not provided in the documents; no user interaction ...

CVE-2025-20772

CVE-2025-20772 is a memory corruption vulnerability disclosed across multiple feeds tied to MediaTek chipsets, described as a use-after-free in the display path that can lead to local privilege escalation to SYSTEM level. Exploitation is possible without user interaction, and the CVE lists a patc...

CVE-2025-21024

Samsung Smart View before Android 16 is affected by CVE-2025-21024 due to the use of implicit intents for sensitive communication, enabling local attackers to access sensitive information through the affected component. The issue is described across multiple sources as a vulnerability in Smart Vi...

CVE-2025-32332

CVE-2025-32332 describes a use-after-free memory corruption in multiple locations, enabling local escalation of privilege with no additional execution privileges or user interaction. CVSSv3.1 base score 7.8 (LOCAL, HIGH). Exploitation is described as local; no exploit details are provided in the ...

CVE-2025-36900

CVE-2025-36900 refers to an out-of-bounds write caused by an integer overflow in the function lwis_test_register_io within lwis_device_test.c. The impact described across multiple sources is local elevation of privilege requiring system execution privileges, with no user interaction needed. Affec...

CVE-2025-36923

CVE-2025-36923 affects the NrmmDecoder::DecodeSORTransparentContext function in cn_NrmmDecoder.cpp, where a heap buffer overflow can cause an out-of-bounds write. This could enable remote (proximal/adjacent) escalation of privilege with no user interaction required. Exploitation details, affected...

CVE-2025-36932

In the Google tracepoint IPC component, specifically in tracepoint_msg_handler of cpm/google/lib/tracepoint/tracepoint_ipc.c, a memory overwrite can occur due to improper input validation. This has the potential for local elevation of privilege without requiring additional execution privileges or...

CVE-2025-36938

CVE-2025-36938 concerns a fault injection vulnerability in U-Boot function append_uint32_le() caused by a logic error in the code. The issue enables physical elevation of privilege with no additional execution privileges required and no user interaction needed. Multiple sources (NVD/Red Hat/OSVed...

CVE-2025-48580

Technical details about CVE-2025-48580 are not publicly provided in the supplied documents. Monitor for updates from Android bulletin and vendor advisories for complete root-cause, affected products, and fixes.

CVE-2025-48582

CVE-2025-48582 describes a local elevation-of-privilege in Android where media files can be deleted without MANAGE_EXTERNAL_STORAGE due to an intent redirect. The issue affects media-related components (MediaProvider/Media codecs) and can be exploited with local access and no user interaction. Th...

CVE-2025-48585

CVE-2025-48585 concerns multiple functions in ProfilingService.java, where improper input validation can cause a persistent local denial of service. The issue is described as a local impact with no privileges and no user interaction required for exploitation. The available sources (NVD, Red Hat, ...

CVE-2025-48625

CVE-2025-48625 is a local privilege-escalation issue affecting Android (noted in the Android 16 QPR2 bulletin). The vulnerability arises from race conditions in UsbDataAdvancedProtectionHook.java, allowing access to USB data when the screen is off, with no user interaction required. Impact is des...

CVE-2026-0005

Technical details about CVE-2026-0005 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-0135

CVE-2026-0135 affects the Modem component, where a missing bounds check can enable an out-of-bounds read. This can lead to remote code execution with no additional privileges required and no user interaction. Several connected sources (NVD, EUVD-ENISA, CVE listings, OSV and PT-Security entries) c...

CVE-2026-0145

CVE-2026-0145 affects the keymint component on Android (Pixel devices). A logic error enables a permission bypass , allowing local information disclosure without requiring additional execution privileges or user interaction. The CVSS 3.1 score is 4.0 (Medium) with a local attack vector, low compl...

CVE-2026-20427

CVE-2026-20427 represents a local privilege escalation caused by a missing bounds check in the display path. The issue could allow a malicious actor who has already obtained System privileges to elevate further without user interaction. The description does not specify affected products or compon...

CVE-2025-11132

CVE-2025-11132 affects the Unisoc nr modem. The issue is a flaw from improper input validation in the modem stack, which can cause a system crash and remote denial of service without requiring privileges. In the available connected documents, concrete exploit details for this CVE are not provided...

CVE-2025-20765

CVE-2025-20765 affects the MediaTek/MediaTek-derived environment where the race condition in the aee daemon can cause a system crash leading to local denial of service. Exploitation is described as possible without user interaction, but requires the attacker to already have System privileges. The...

CVE-2025-20774

CVE-2025-20774 describes an out-of-bounds write due to a missing bounds check in the display path, potentially enabling local privilege escalation if the attacker already has System privileges. Exploitation reportedly does not require user interaction. Multiple sources (Red Hat, NVD, CVE listing,...

CVE-2025-20778

The CVE-2025-20778 entry describes an out-of-bounds write in the display component that could enable local privilege escalation if the attacker already has System privileges; exploitation does not require user interaction. The issue is tied to a missing bounds check and is documented across multi...

CVE-2025-20779

Summary: CVE-2025-20779 describes a use-after-free vulnerability in display handling caused by a race condition, leading to local escalation of privilege if an attacker already has System privileges. The issue is exploitable without user interaction and is categorized with a local attack vector. ...