CVE-2016-6754

CVE-2016-6754: A remote code execution vulnerability in Android WebView affects WebView on Android 5.0.x (before 5.0.2), 5.1.x (before 5.1.1), and 6.x (before 2016-11-05). Exploitation could occur while a user navigates to a website, with the issue exploitable in an unprivileged process. Remediat...

CVE-2017-13230

CVE-2017-13230 affects the Android Media framework, specifically an out-of-bounds write in the HEVC (H.265) codec caused by an incorrect bounds check on i2_pic_width_in_luma_samples. This can enable remote escalation of privilege with no additional execution privileges required, though exploitati...

CVE-2019-2098

CVE-2019-2098 affects Android 7.0–9 and is tied to a missing permissions check in NotificationManagerService.java areNotificationsEnabledForPackage, enabling local elevation of privilege with no additional privileges and no user interaction required. The issue impacts Android’s System/notificatio...

CVE-2019-2173

CVE-2019-2173 involves the Android Framework component where in startActivityMayWait of ActivityStarter.java an incorrect permission check can launch an Activity improperly. This creates a local elevation of privilege risk on affected Android versions: 7.1.1, 7.1.2, 8.0, 8.1, and 9. The issue doe...

CVE-2019-2175

CVE-2019-2175 affects Android 9; in SliceManagerService.java, checkAccess has an incorrect argument order that can bypass permissions and enable local privilege escalation with user interaction required. Affected component is the Android Framework (SliceManagerService) on Android 9. The issue is ...

CVE-2020-0077

CVE-2020-0077 affects the FPC Iris TZ App (TrustZone) on Android. Description: an out-of-bounds read in authorize_enroll due to a missing bounds check, enabling local information disclosure with System privileges needed; exploitation does not require user interaction. Connected sources corroborat...

CVE-2021-0303

The CVE-2021-0303 issue is a use-after-free race in dispatchGraphTerminationMessage() within StreamSetObserver.cpp used by Android 11. It enables local privilege escalation with user privileges and does not require user interaction. Red Hat and OSV entries corroborate the same file path and impac...

CVE-2021-39631

CVE-2021-39631 affects Android (Android-10 to Android-12). The issue lies in clear_data_dlg_text in strings.xml, where the messaging around the lear storageunctionality can mislead about security/privacy, enabling local information disclosure. Exploitation is local, requires no user interaction...

CVE-2022-20467

The CVE-2022-20467 issue affects Android 11–13 where the function isBluetoothShareUri in BluetoothOppUtility.java can read files incorrectly due to a confused deputy, causing local information disclosure with no extra execution privileges. Exploitation requires user interaction, with local attack...

CVE-2023-20930

CVE-2023-20930 affects Android 11–13 where the pushDynamicShortcut function in ShortcutPackage.java can exhaust resources and cause the device to boot loop, yielding local DoS without extra privileges or user interaction. The issue is documented in the Android May 2023 security bulletin with patc...

CVE-2023-20945

CVE-2023-20945 affects Android 10 and is due to an out-of-bounds write in phNciNfc_MfCreateXchgDataHdr within phNxpExtns_MifareStd.cpp, caused by a missing bounds check. This leads to local elevation of privilege with no extra execution privileges required and no user interaction. Remediation is ...

CVE-2023-20962

CVE-2023-20962 affects Android 13, specifically the MediaVolumePreferenceController.java function getSliceEndItem, where an unsafe PendingIntent could start a foreground activity from the background. This enables local information disclosure without extra privileges and without user interaction. ...

CVE-2023-20964

The CVE-2023-20964 entry affects Android (Android-12/12L/13) via MediaSessionRecord.java, where an Intent rebroadcast in multiple functions can cause local denial of service or privilege escalation without extra execution privileges and with no user interaction required. The vulnerability is clas...

CVE-2023-21131

CVE-2023-21131 concerns a logic error in ActivityManagerService.checkKeyIntentParceledCorrectly() that can bypass Parcel Mismatch mitigations, enabling local escalation of privilege to launch arbitrary activities in settings without extra privileges. Affected: Android 11–13 (Android-11, Android-1...

CVE-2023-21278

CVE-2023-21278 affects Google Android, appearing in the Android 2023-08-01/08-01 bulletin under the Framework/EoP category. The issue is a logic error in multiple locations that can obscure the microphone privacy indicator, enabling local elevation of privilege without additional execution privil...

CVE-2023-21288

The CVE-2023-21288 entry affects Android via the Notification.java component, where in the visitUris method a missing permission check could allow information disclosure across users. Impact: local information disclosure with User privileges required; exploitation does not require user interactio...

CVE-2023-40133

CVE-2023-40133: In multiple locations of DialogFillUi.java, a confused deputy vulnerability allows an attacker to perform local information disclosure by viewing another user’s images. This requires no user interaction and can be exploited with local privileges (low attack complexity, low privile...

CVE-2024-43095

CVE-2024-43095 is an elevation-of-privilege vulnerability in Google Android System (Permission Controller) caused by a logic error. It enables local privilege escalation and is listed as a High-severity EoP issue affecting Android 12–15. The Android security bulletin (January 2025) notes updated ...

CVE-2015-8546

Concrete details: CVE-2015-8546 affects Samsung mobile devices with Shannon333 baseband (Galaxy S6/S6 Edge/S6 Edge+/Note5) and firmware up to 2015-11-12. Vulnerability is a stack-based buffer overflow in the baseband process, enabling remote code execution via a fake base station. Exploitation st...

CVE-2019-9254

CVE-2019-9254 affects Android 10 in zygote.java (readArgumentList). Describes a command injection due to improper input validation that could enable local privilege escalation without user interaction. Impact is defined as local EoP with high severity (C/C/I/A). Mitigation: patch levels 2019-09-0...

CVE-2020-0379

CVE-2020-0379 affects the Bluetooth service in Android 8.0–11, where a logic error enables spoofing and potential remote information disclosure without extra execution privileges. Exploitation requires user interaction. The issue is categorized as an Information Disclosure/ID within multiple Andr...

CVE-2021-0319

CVE-2021-0319 affects Android versions 8.0 through 11. It concerns CompanionDeviceManagerService.checkCallerIsSystemOr, where a permissions bypass may allow a local attacker to obtain a nearby Bluetooth device’s MAC address without proper permissions, enabling local privilege escalation to access...

CVE-2021-0478

Technical details beyond the initial description are not provided in the connected documents. Monitor for updates from Android/vendor advisories to confirm affected components, root cause, and fixes.

CVE-2021-0645

CVE-2021-0645 is an elevation-of-privilege issue in Android 11 involving shouldBlockFromTree in ExternalStorageProvider.java. The root cause is a permissions bypass that could let a local attacker read private app directories in external storage, with exploitation reportedly requiring user intera...

CVE-2022-20120

CVE-2022-20120 is a bootloader remote code execution vulnerability affecting Android Pixel devices. The Pixel Update Bulletin Groups this CVE under Bootloader with a Critical severity and indicates that security patch levels of 2022-05-05 or later address the issue. The available documents provid...

CVE-2022-20226

CVE-2022-20226 affects Android 12 / 12L. Root cause: in finishDrawingWindow of WindowManagerService.java, improper input validation enables tapjacking. This could allow local escalation of privilege with User privileges required; exploitation requires user interaction. Affected component is the W...

CVE-2022-20338

Summary: CVE-2022-20338 affects Android (Android-11, Android-12, Android-12L, Android-13) due to a vulnerability in HierarchicalUri.readFrom in Uri.java that allows crafting a malformed URI because of improper input validation, enabling local escalation of privilege without extra execution privil...

CVE-2022-20484

CVE-2022-20484 affects Android 10–13 where NotificationChannel.java’s permission persistence can fail due to resource exhaustion, enabling local elevation of privilege with no user interaction needed. CVSSv3.1 metrics indicate LOCAL access, LOW privileges, UI None, and HIGH impact on confidential...

CVE-2022-20499

CVE-2022-20499 is a vulnerability in Android’s PasspointConfiguration.java where uncaught errors during parsing of stored configs in function validateForCommonR1andR2 can cause a local persistent DoS without extra privileges. Affected are Android 12, 12L, and 13 releases; exploitation is reported...

CVE-2023-20936

CVE-2023-20936 affecting Android 11–13: In bta_av_rc_disc_done of bta_av_act.cc, an out-of-bounds write is caused by a missing bounds check, enabling local elevation of privilege with no extra user interaction beyond local access. Multiple sources (NVD, CVE records, and Android security bulletins...

CVE-2023-20946

CVE-2023-20946 affects Android 11–13 (Android 11, 12, 12L, 13). Root cause is a permission bypass in onStart of BluetoothSwitchPreferenceController.java (confused deputy), enabling remote elevation of privilege in Bluetooth settings with no user interaction. The NVD metrics show a critical CVSS v...

CVE-2023-20967

CVE-2023-20967 is an Android elevation-of-privilege vulnerability in the function avdt_scb_hdl_pkt_no_frag within avdt_scb_act.cc. A faulty bounds check allows an out-of-bounds write, enabling local privilege escalation with no additional execution privileges required and no user interaction. Aff...

CVE-2023-21137

CVE-2023-21137 affects Android platforms (Android 11, 12, 12L, 13). Root cause: uncaught exceptions in JobStore.java during job map parsing, leading to a local persistent denial of service. Impact is DoS without requiring user interaction or elevated privileges; exploitation is local. Public refe...

CVE-2024-43091

Summary: CVE-2024-43091 is a Google Android/Skia vulnerability in the SkEmbossMaskFilter.cpp function filterMask. The issue is a possible out-of-bounds write caused by an integer overflow, which could allow remote code execution with no extra privileges and no user interaction, as described in th...

CVE-2025-27700

CVE-2025-27700 is an elevation-of-privilege issue described for Google Pixel devices. The vulnerability enables a local escalation of privilege via bypassing carrier restrictions with no extra execution privileges or user interaction required; exploitation is local. The NVD entry lists CVSSv3.1: ...

CVE-2019-2009

CVE-2019-2009 affects Android’s Bluetooth stack, specifically l2c_lcc_proc_pdu in l2c_fcr.cc. The issue is an out-of-bounds write due to a missing bounds check, enabling remote code execution over Bluetooth with no user interaction. Affected products/versions include Android 7.0 through 9 (Androi...

CVE-2019-2108

CVE-2019-2108 affects Android 10 in the Media framework component. The issue is an out-of-bounds write in ihevcd_ref_list.c caused by a missing bounds check, enabling remote code execution with the attacker needing user interaction. The Android 2019-09-05 patch level (and later) addressing this i...

CVE-2021-0309

CVE-2021-0309 affects Android (versions 8.0–11) with a flaw in grantCredentialsPermissionActivity during onCreate that enables a confused deputy to disclose local information and gain account access without extra execution privileges. Exploitation requires user interaction, and impact is describe...

CVE-2021-0337

CVE-2021-0337 affects Android (8.1–11) via moveInMediaStore in FileSystemProvider.java. A stale-metadata file exposure could enable local escalation of privilege with User execution privileges; exploitation does not require user interaction. Public technical details are limited in the provided do...

CVE-2021-0506

CVE-2021-0506 corresponds to a tapjacking/overlay bypass in ActivityPicker.java that can bypass required user interaction during intent resolution, enabling local elevation of privilege with User execution privileges needed. Affected products/versions include Android 8.1, 9, 10, and 11. The vulne...

CVE-2022-20197

CVE-2022-20197 affects the Android Framework (notably in Android 12L) where a Parcel.java recycle bug could allow starting a foreground activity from the background, enabling local elevation of privilege with no user interaction. The issue is categorized as EoP with a moderate to high risk depend...

CVE-2022-20395

The CVE-2022-20395 entry concerns Android 11–13, where a path traversal in MediaProvider.java (checkAccess) can delete files, enabling local elevation of privilege with no extra execution privileges. Affected component: MediaProvider.java; root cause: path traversal leading to local file deletion...

CVE-2022-20418

CVE-2022-20418 → In Android 12/12L/13, a vulnerability in pickStartSeq() of AAVCAssembler.cpp allows an out-of-bounds read, leading to remote information disclosure without privileges or user interaction. Affected component: Android Media framework. Base CVSSv3.1 score: 7.5 (High). Remediation: p...

CVE-2022-20488

Technical details about CVE-2022-20488 are not publicly provided in the supplied documents. Monitor for updates from Android advisories and related sources for patch status and affected versions.

CVE-2023-21104

CVE-2023-21104 affects Android (Android-12L/Android-13) via a missing permission check in WindowOrganizer.java (applySyncTransaction), enabling local information disclosure without extra execution privileges. Impact is information leakage; exploitation requires no user interaction and is locally ...

CVE-2023-21394

The CVE relates to TelecomServiceImpl.java (registerPhoneAccount) on Android. A missing permission check could allow an attacker to disclose images from another user via local access, with no extra execution privileges or user interaction required. The issue is described consistently across multi...

CVE-2023-35681

CVE-2023-35681 affects Android’s Bluetooth stack (eatt_impl.h: eatt_l2cap_reconfig_completed). Public sources describe a possible out-of-bounds write caused by an integer overflow, which could allow remote code execution with no additional privileges and without user interaction. The available co...

CVE-2023-40096

Summary: CVE-2023-40096 affects Android’s audio recording flow. A missing flag in OpRecordAudioMonitor::onFirstRef within AudioRecordClient.cpp may allow background audio recording, enabling local elevation of privilege with User privileges. Exploitation does not require user interaction. The vul...

CVE-2015-6644

CVE-2015-6644 : The vulnerability concerns Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01. A crafted application can cause the library to leak sensitive information, enabling an attacker who can force a user to run a malicious app to obtain private data. The connected docu...

CVE-2019-1987

CVE-2019-1987 affects Google Android Framework components (notably a flaw in SkSwizzler.cpp) where a missing bounds check allows an out-of-bounds write, enabling remote code execution in a privileged context. Impact is described as high/severe, requiring user interaction for exploitation, with af...