CVE-2023-21281

Summary (concrete details from connected docs): CVE-2023-21281 affects the Android Framework, specifically the KeyguardViewMediator.java logic, where a flaw can cause a failure to lock after screen timeout. This enables local elevation of privilege across users with no additional execution privil...

CVE-2024-0051

CVE-2024-0051 : The vulnerability is in onQueueFilled of SoftMPEG4.cpp, causing a possible out-of-bounds write due to a heap buffer overflow. The issue could lead to local elevation of privilege without requiring user interaction, as described across multiple sources (e.g., NVD/Red Hat CNVD/CVE l...

CVE-2024-23707

CVE-2024-23707 is an Android elevation-of-privilege issue caused by improper input validation in multiple locations, enabling a local bypass with no additional execution privileges but requiring user interaction. Public references show the flaw as fixed in Android’s 2024-05 patch cycle, with the ...

CVE-2024-23712

CVE-2024-23712 affects Android’s AppOpsService.java. It describes a potential DoS by saturating /data/system/appops_accesses.xml due to resource exhaustion. Exploitation is local with no privileges and no user interaction required. Android bulletin context indicates fixes in patch levels 2024-04-...

CVE-2024-31313

CVE-2024-31313 is an Android/MessageQueueBase.h issue involving an incorrect bounds check in the function availableToWriteBytes, which can cause an out-of-bounds write. The vulnerability enables local escalation of privilege with no additional execution privileges required and does not require us...

CVE-2026-0049

A critical vulnerability exists in the Android Framework (specifically libdng_sdk.so) caused by an unsigned integer overflow in dng_opcode_MapTable::ProcessArea within dng_misc_opcodes.cpp:388. This occurs when calculating fAreaSpec.Plane() + fAreaSpec.Planes(). The overflow triggers an abort() c...

CVE-2021-0509

CVE-2021-0509 : A race condition causes a use-after-free in CryptoPlugin.cpp, leading to local privilege escalation with no additional privileges or user interaction required. Affected products/versions in the provided data include Android 8.1, 9, 10, and 11. The documents do not specify a public...

CVE-2021-0643

CVE-2021-0643 describes an information disclosure vulnerability in Android where getAllSubInfoList in SubscriptionController.java could allow retrieval of a long-term identifier without proper permission checks. Affected products are Android 10–12. The issue is described across multiple sources (...

CVE-2021-0931

CVE-2021-0931 – Android BluetoothDevice.getAlias information disclosure . The issue is reported in BluetoothDevice.java: missing data filtering can cause misleading permission dialogs, enabling local information disclosure with user interaction required. Affected products/versions include Android...

CVE-2022-20025

CVE-2022-20025 concerns a Bluetooth out-of-bounds write due to a missing bounds check, enabling local elevation of privilege without user interaction. The issue is associated with MediaTek/MALPS06126832 and is listed in Android/MobileRuntime advisories as affecting Bluetooth components (notably M...

CVE-2022-20084

The CVE-2022-20084 entry affects MediaTek telephony, where a missing permission check could allow local privilege escalation to disable emergency broadcast reception. The issue is documented with a patch reference (ALPS06498874/ALPS06498874) and is associated with MediaTek’s devices, containing n...

CVE-2022-20117

Mode C: CVE-2022-20117 affects Pixel devices with Titan M (per Pixel Update Bulletin). The Titan M ID vulnerability indicates an information-disclosure issue where local data encrypted by the GSC can be decrypted due to improper crypto usage. Impact is local information disclosure without extra e...

CVE-2022-20351

The CVE-2022-20351 issue affects Android via the CallLogProvider.java queryInternal path, where SQL injection could grant local access to voicemail information and cause information disclosure without extra privileges or user interaction. Multiple connected sources confirm the vulnerability is in...

CVE-2022-20445

CVE-2022-20445 affects Google Android (Android 10–13 per sources) and is tied to an out-of-bounds read in process_service_search_rsp within sdp_discovery.cc caused by improper input validation. Impact is information disclosure without additional execution privileges and no user interaction requir...

CVE-2022-20476

CVE-2022-20476 describes a vulnerability in Android where, in PackageManager.setEnabledSetting, a path could cause the device to enter an infinite reboot loop due to resource exhaustion. This leads to local denial of service with no additional privileges required. Affected are Android 10, 11, 12,...

CVE-2022-20478

CVE-2022-20478 affects the Android NotificationChannel implementation (NotificationChannel.java) with a likely resource-exhaustion related failure to persist permissions, enabling local elevation of privilege without extra execution privileges. Affected products/versions include Android-10 throug...

CVE-2022-20491

CVE-2022-20491 affects Android devices via the NotificationChannel.java component. The issue is a resource exhaustion bug that can cause a failure to persist permission settings, enabling local elevation of privilege without user interaction. Affected: Android 10–13 (Android-10/11/12/12L/13). Imp...

CVE-2023-20935

CVE-2023-20935 affects Android 11–13. It describes an out-of-bounds read caused by a missing bounds check during deserialization of multiple files, leading to local information disclosure without needing user interaction. Root cause: bounds-check omission in the deserialize path of the multiple f...

CVE-2023-21112

CVE-2023-21112 relates to a missing bounds check in AnalyzeMfcResp of NxpMfcReader.cc, causing a possible out-of-bounds read that could disclose local information. Affected software includes Android 11–13 (Android devices relying on this component). The vulnerability enables information disclosur...

CVE-2023-21131

CVE-2023-21131 concerns a logic error in ActivityManagerService.checkKeyIntentParceledCorrectly() that can bypass Parcel Mismatch mitigations, enabling local escalation of privilege to launch arbitrary activities in settings without extra privileges. Affected: Android 11–13 (Android-11, Android-1...

CVE-2023-35680

Technical details about CVE-2023-35680 are not publicly disclosed in the provided documents. Monitor for updates from the cited sources (Android security bulletin, NVD/CVE entries) for affected components, versions, and fixes.

CVE-2020-0068

CVE-2020-0068 affects the Android kernel audio driver (msm-cirrus-playback.c) via crus_afe_get_param, causing an out-of-bounds read due to an integer overflow. This can lead to local information disclosure with System privileges required; exploitation does not require user interaction. Documented...

CVE-2020-0080

CVE-2020-0080: In Android 10 Framework, a flaw in AppOpsControllerImpl.java (onOpActiveChanged and related methods) could allow an app to display an overlay over other apps without the overlay notification icon, enabling local elevation of privilege with user interaction required. Affected compon...

CVE-2021-0306

CVE-2021-0306 describes a vulnerability in Android’s PermissionManagerService.addAllPermissions that enables a local elevation of privilege by bypassing permission checks to obtain the android.permission.ACTIVITY_RECOGNITION without user confirmation. Affected products include Android versions 8....

CVE-2021-0315

CVE-2021-0315 is an Android elevation-of-privilege issue described as a tapjacking/overlay-based flaw in GrantCredentialsPermissionActivity.java. Affected products/versions include Android 8.0, 8.1, 9, 10, and 11. The root cause is user interaction via a deceptive overlay, enabling local privileg...

CVE-2021-0593

Technical details about CVE-2021-0593 are not publicly provided in the connected documents. Available references confirm the issue and affected Android versions, but no specific exploit vectors, affected builds, or mitigations are included here. Monitor for updates.

CVE-2021-0642

CVE-2021-0642 affects Android where, in VoicemailSettingsFragment.onResume, an attacker could retrieve a trackable identifier without required permissions due to a missing permission check, leading to local information disclosure. Exploitation requires user interaction; no privileges or remote ac...

CVE-2021-0924

CVE-2021-0924 affects the Android kernel USB stack, specifically the xhci driver. In xhci_vendor_get_ops of xhci.c, a missing bounds check enables an out-of-bounds read. This could allow local escalation of privilege with no additional execution privileges required and without user interaction. P...

CVE-2021-39715

The CVE refers to an information disclosure in the Android kernel: in __show_regs of process.c, log information disclosure could leak kernel memory/addresses, enabling local information leakage with SYSTEM privileges. Affected software: Android kernel components; vulnerable item: the show_regs pa...

CVE-2022-20081

CVE-2022-20081 affects the A-GPS component and is caused by improper certificate validation, enabling a remote attacker to perform a man-in-the-middle attack that could disclose information without user interaction. Multiple connected sources (RH, CNVD, NVD/NVD list, and related security bulletin...

CVE-2022-20492

CVE-2022-20492 concerns Android where, in several functions of AutomaticZenRule.java , there is a potential failure to persist permissions settings due to resource exhaustion. This can lead to local elevation of privilege with no additional execution privileges required. Exploitation details are ...

CVE-2023-20953

CVE-2023-20953 affects Android 13, targeting ClipboardListener.java via onPrimaryClipChanged. The issue may bypass factory‑reset protection, enabling local elevation of privilege with no extra execution privileges; exploitation requires user interaction. No public patch/version details are provid...

CVE-2023-21133

CVE-2023-21133 affects Android’s ManagePermissionsActivity.java. The onCreate path contains a missing permission check, which could bypass factory reset protections and enable local elevation of privilege with physical access and no extra execution privileges required. Exploitation details are no...

CVE-2023-21136

CVE-2023-21136 affects Android (Android-11 to Android-13) with a vulnerability in JobStore.java. The issue arises from improper input validation in multiple functions, which can cause a crash on startup and lead to local denial of service without requiring additional privileges. The connected Nes...

CVE-2023-21288

The CVE-2023-21288 entry affects Android via the Notification.java component, where in the visitUris method a missing permission check could allow information disclosure across users. Impact: local information disclosure with User privileges required; exploitation does not require user interactio...

CVE-2024-0047

CVE-2024-0047 corresponds to a DoS in Android (Android Open Source Project) caused by a logic error in UserManagerService.java: writeUserLP serializes a device policy with an incorrect tag, enabling local denial of service when policies are deserialized on reboot. Exploitation requires local acce...

CVE-2019-2009

CVE-2019-2009 affects Android’s Bluetooth stack, specifically l2c_lcc_proc_pdu in l2c_fcr.cc. The issue is an out-of-bounds write due to a missing bounds check, enabling remote code execution over Bluetooth with no user interaction. Affected products/versions include Android 7.0 through 9 (Androi...

CVE-2020-0075

CVE-2020-0075 affects the FPC Iris TZ App within Android (FPC component). Description: out-of-bounds read due to a missing bounds check in set_shared_key, enabling local information disclosure with System privileges required; no user interaction needed. Mode: Normal (concrete details provided). C...

CVE-2021-0397

CVE-2021-0397 : A double-free in Android’s sdp_copy_raw_data (sdp_discovery.cc) can cause remote code execution with no privileges and no user interaction. Affected: Android 8.1, 9, 10, 11 (per public advisories). Root cause: memory management flaw (double free) in SDP discovery path. Impact: rem...

CVE-2021-0506

CVE-2021-0506 corresponds to a tapjacking/overlay bypass in ActivityPicker.java that can bypass required user interaction during intent resolution, enabling local elevation of privilege with User execution privileges needed. Affected products/versions include Android 8.1, 9, 10, and 11. The vulne...

CVE-2021-0641

CVE-2021-0641: A missing permission check in getAvailableSubscriptionInfoList() of SubscriptionController.java allows disclosure of unique identifiers and local information disclosure without extra execution privileges on Android 8.1–11. The NVD entry rates the base CVSSv3 as 5.5 (LOCAL, LOW comp...

CVE-2021-0935

The CVE-2021-0935 entry concerns the Linux kernel IPv6 path: in ip6_xmit() within ip6_output.c, an out-of-bounds write can occur due to a use-after-free, enabling locally escalated privileges with SYSTEM/root rights. Exploitation details are not provided in the supplied documents. Some connected ...

CVE-2022-20467

The CVE-2022-20467 issue affects Android 11–13 where the function isBluetoothShareUri in BluetoothOppUtility.java can read files incorrectly due to a confused deputy, causing local information disclosure with no extra execution privileges. Exploitation requires user interaction, with local attack...

CVE-2022-20486

CVE-2022-20486 affects Android (Android-10, -11, -12, -12L, -13) where NotificationChannel.java may fail to persist permissions due to resource exhaustion, enabling local elevation of privilege with no extra execution privileges required. The issue is described as a resource-exhaustion vulnerabil...

CVE-2022-20568

CVE-2022-20568 describes a use-after-free in the Android kernel that could corrupt kernel memory and enable local escalation of privileges without user interaction; exploitation is reported as local, with no additional privileges or interaction required. The connected security bulletins (EulerOS/...

CVE-2023-20913

CVE-2023-20913 affects Android 10–13; a tapjacking/overlay issue in PhoneAccountSettingsActivity could enable local elevation of privilege by tricking the user into enabling a malicious phone account. The Android Security Bulletin lists this issue under the 2023-01-01 and 2023-01-05 patch levels;...

CVE-2023-20936

CVE-2023-20936 affecting Android 11–13: In bta_av_rc_disc_done of bta_av_act.cc, an out-of-bounds write is caused by a missing bounds check, enabling local elevation of privilege with no extra user interaction beyond local access. Multiple sources (NVD, CVE records, and Android security bulletins...

CVE-2023-20967

CVE-2023-20967 is an Android elevation-of-privilege vulnerability in the function avdt_scb_hdl_pkt_no_frag within avdt_scb_act.cc. A faulty bounds check allows an out-of-bounds write, enabling local privilege escalation with no additional execution privileges required and no user interaction. Aff...

CVE-2023-21057

CVE-2023-21057 affects the Android kernel component RohcPacketCommon, specifically the function path in ProfSixDecomTcpSACKoption. The issue is an out-of-bounds write caused by a missing bounds check, which could allow remote code execution without any privileges or user interaction. The vulnerab...

CVE-2023-21143

CVE-2023-21143 is a local DoS in Android 11–13 due to improper input validation across multiple functions/files. The issue can render a device unusable without extra privileges or user interaction. The Android Security Bulletin lists this CVE under the System/DoS category for Android 11–13 and no...