CVE-2025-20806

Impactful but constrained: CVE-2025-20806 is a memory corruption via use-after-free in dpe that could enable local escalation of privilege to System level. Exploitation requires local access; no user interaction is needed. Root cause is use-after-free vulnerability in dpe; no explicit affected pr...

CVE-2025-48608

CVE-2025-48608 affects the Android SettingsProvider.java isValidMediaUri path, enabling cross-user media read due to a missing permission check. The issue permits local information disclosure without user interaction (ATT&CK: T1552-like, per the description), with CVSS 3.1 base score 5.5 (AV:L/AC...

CVE-2026-0110

CVE-2026-0110 describes a memory corruption issue in MM_DATA_IND of cn_NrSmMsgHdlrFromMM.cpp that can lead to a remote elevation of privilege with no additional execution privileges or user interaction required. The vulnerability is referenced across multiple sources (NVD, Red Hat, EUVD, CVE reco...