CVE-2024-20040

A security vulnerability exists in the wlan firmware of MediaTek chips (specifically MT6XXX and MT79XX chipsets) due to improper input validation . This flaw allows for a possible out-of-bounds write , which could lead to remote escalation of privilege without requiring additional execution privi...

CVE-2024-34731

CVE-2024-34731 affects Android components (TranscodingResourcePolicy.cpp) with a race-condition leading to memory corruption and local privilege escalation. The description across sources (NVD/Red Hat/CNVD/Vuln enrichment) consistently notes memory corruption as the root cause and local EoP risk ...

CVE-2019-2108

CVE-2019-2108 affects Android 10 in the Media framework component. The issue is an out-of-bounds write in ihevcd_ref_list.c caused by a missing bounds check, enabling remote code execution with the attacker needing user interaction. The Android 2019-09-05 patch level (and later) addressing this i...

CVE-2019-2173

CVE-2019-2173 involves the Android Framework component where in startActivityMayWait of ActivityStarter.java an incorrect permission check can launch an Activity improperly. This creates a local elevation of privilege risk on affected Android versions: 7.1.1, 7.1.2, 8.0, 8.1, and 9. The issue doe...

CVE-2019-9254

CVE-2019-9254 affects Android 10 in zygote.java (readArgumentList). Describes a command injection due to improper input validation that could enable local privilege escalation without user interaction. Impact is defined as local EoP with high severity (C/C/I/A). Mitigation: patch levels 2019-09-0...

CVE-2020-0259

CVE-2020-0259 affects the Android kernel AMLogic dm-verity component (dm-android-verity.c). The vulnerability arises from improper crypto usage in android_verity_ctr, allowing a local attacker to modify a dm-verity protected filesystem and gain elevation of privilege with no additional execution ...

CVE-2021-0303

The CVE-2021-0303 issue is a use-after-free race in dispatchGraphTerminationMessage() within StreamSetObserver.cpp used by Android 11. It enables local privilege escalation with user privileges and does not require user interaction. Red Hat and OSV entries corroborate the same file path and impac...

CVE-2021-0514

CVE-2021-0514 affects the Android platform through a race condition in several functions of the V8 library, causing a use-after-free that can enable remote code execution in an unprivileged process. Exploitation is possible with network access (no user interaction required) and affects Android ve...

CVE-2021-0706

CVE-2021-0706 affects Android (versions 10 and 11) via a missing permission check in startListening() of PluginManagerImpl.java, allowing an attacker to disable arbitrary app components and potentially cause local denial of service with no additional privileges or user interaction required. The v...

CVE-2021-0968

CVE-2021-0968 affects Android 9–12. The issue is an out-of-bounds write caused by an integer overflow in allocator.cc (osi_malloc/osi_calloc), potentially enabling remote code execution with no user interaction. Public details indicate patch levels for 2021-12-01/2021-12-05 Android Bulletins addr...

CVE-2022-20226

CVE-2022-20226 affects Android 12 / 12L. Root cause: in finishDrawingWindow of WindowManagerService.java, improper input validation enables tapjacking. This could allow local escalation of privilege with User privileges required; exploitation requires user interaction. Affected component is the W...

CVE-2023-20926

CVE-2023-20926 : The issue is a missing permission check in onParentVisible of HeaderPrivacyIconsController.kt that could bypass factory reset protections on Android 12–13, enabling local escalation of privilege with physical device access and no extra execution privileges or user interaction req...

CVE-2023-20962

CVE-2023-20962 affects Android 13, specifically the MediaVolumePreferenceController.java function getSliceEndItem, where an unsafe PendingIntent could start a foreground activity from the background. This enables local information disclosure without extra privileges and without user interaction. ...

CVE-2023-20964

The CVE-2023-20964 entry affects Android (Android-12/12L/13) via MediaSessionRecord.java, where an Intent rebroadcast in multiple functions can cause local denial of service or privilege escalation without extra execution privileges and with no user interaction required. The vulnerability is clas...

CVE-2023-21090

CVE-2023-21090 affects Android 13 with a vulnerability in parseUsesPermission of ParsingPackageUtils.java that can cause a boot loop from resource exhaustion, leading to local denial of service. Exploitation requires user interaction and is local in scope; no remote/external vector is described i...

CVE-2023-21117

CVE-2023-21117 affects Android 13, specifically the ActivityManagerService.registerReceiverWithFeature path. The issue enables a permissions bypass that could let isolated processes register a broadcast receiver, causing local elevation of privilege with no extra execution privileges and no user ...

CVE-2023-21262

Consolidated evidence across CVE-2023-21262 entries shows a race condition in the startInput function of AudioPolicyInterfaceImpl.cpp that can cause the microphone privacy indicator to be displayed incorrectly. This could mislead users about mic activity and state. Exploitation, if any, is noted ...

CVE-2023-21394

The CVE relates to TelecomServiceImpl.java (registerPhoneAccount) on Android. A missing permission check could allow an attacker to disclose images from another user via local access, with no extra execution privileges or user interaction required. The issue is described consistently across multi...

CVE-2023-40137

CVE-2023-40137 affects Android’s DialogFillUi.java and enables local information disclosure of other users’ images due to a confused deputy, with no extra privileges or user interaction required. The vulnerability is documented across multiple sources (NVD entry, CVE list, OSV/ARMS-like records) ...

CVE-2024-0046

CVE-2024-0046 involves a logic error in InstallPackageHelper.java (installExistingPackageAsUser) that can bypass carrier restrictions, enabling local privilege escalation without additional execution privileges or user interaction. The vulnerability affects Android framework code and is rated hig...

CVE-2024-34740

CVE-2024-34740 affects Android frameworks where BinaryXmlSerializer.java writes byte arrays in attributeBytesBase64/attributeBytesHex. The root cause is an integer overflow when serializing a length (e.g., 65536) via writeShort, causing the length to wrap to zero and the bytes to be misinterprete...

CVE-2021-0320

CVE-2021-0320 affects Android 10/11, describing a race condition in keystore_keymaster_enforcement.h (is_device_locked and set_device_locked) that could bypass lockscreen requirements for keyguard-bound keys. This may lead to local information disclosure without additional privileges, and exploit...

CVE-2021-0683

CVE-2021-0683 (Android) : In runTraceIpcStop of ActivityManagerShellCommand.java, a confused deputy can trigger deletion of system files, causing local escalation of privilege without additional execution privileges. Affected: Android 8.1, 9, 10, 11. CVSSv3.1 base score 7.8 (HIGH). Exploitation r...

CVE-2021-39631

CVE-2021-39631 affects Android (Android-10 to Android-12). The issue lies in clear_data_dlg_text in strings.xml, where the messaging around the lear storageunctionality can mislead about security/privacy, enabling local information disclosure. Exploitation is local, requires no user interaction...

CVE-2022-20399

CVE-2022-20399 concerns the SEPolicy configuration in Android system apps, where an insecure default value allows access to the non-setuid ip utility. The resulting impact is local information disclosure of network data without extra privileges or user interaction. Documents consistently tie this...

CVE-2022-20499

CVE-2022-20499 is a vulnerability in Android’s PasspointConfiguration.java where uncaught errors during parsing of stored configs in function validateForCommonR1andR2 can cause a local persistent DoS without extra privileges. Affected are Android 12, 12L, and 13 releases; exploitation is reported...

CVE-2023-20842

CVE-2023-20842 affects MediaTek devices via the core component described as /imgs y s_cmdq/ . The vulnerability is an out-of-bounds write caused by missing valid range checking in imgsys_cmdq, which can enable local privilege escalation with System execution privileges after user interaction. No ...

CVE-2023-20946

CVE-2023-20946 affects Android 11–13 (Android 11, 12, 12L, 13). Root cause is a permission bypass in onStart of BluetoothSwitchPreferenceController.java (confused deputy), enabling remote elevation of privilege in Bluetooth settings with no user interaction. The NVD metrics show a critical CVSS v...

CVE-2023-35683

CVE-2023-35683 affects Android’s DatabaseUtils.java (bindSelection) within the MediaProvider component, enabling SQL injection that can allow local information disclosure by accessing files from other apps. Exploitation requires local access with no user interaction, and no explicit exploit detai...

CVE-2023-40096

Summary: CVE-2023-40096 affects Android’s audio recording flow. A missing flag in OpRecordAudioMonitor::onFirstRef within AudioRecordClient.cpp may allow background audio recording, enabling local elevation of privilege with User privileges. Exploitation does not require user interaction. The vul...

CVE-2024-0025

CVE-2024-0025 concerns a logic error in the Android framework (ActivityManagerService.sendIntentSender) that can enable a local elevation of privilege through a background activity launch. Affected component is Android’s system services (ActivityManagerService); no specific product/version is dis...

CVE-2024-20105

A security vulnerability exists in the m4u module within MediaTek Chipsets due to a missing bounds check, which can lead to an out-of-bounds write . If a malicious actor has already obtained System privilege , they could exploit this flaw to achieve local escalation of privilege without user inte...

CVE-2024-31327

CVE-2024-31327 affects Android/libfmq: multiple functions in MessageQueueBase.h may cause an out-of-bounds write due to a race, enabling local escalation of privilege with no user interaction. Exploitation specifics are not provided in the supplied documents. Android security references acknowled...

CVE-2021-0581

CVE-2021-0581 affects the Android Wi-Fi driver (Android SoC) and is described as an out-of-bounds read caused by a missing bounds check, enabling remote information disclosure to a proximal attacker without extra privileges or user interaction. The issue is documented across multiple feeds (NVD, ...

CVE-2022-20120

CVE-2022-20120 is a bootloader remote code execution vulnerability affecting Android Pixel devices. The Pixel Update Bulletin Groups this CVE under Bootloader with a Critical severity and indicates that security patch levels of 2022-05-05 or later address the issue. The available documents provid...

CVE-2022-20122

The CVE-2022-20122 entry concerns the PowerVR GPU driver in Android devices. The vulnerability allows unprivileged apps to allocate pinned memory, unpin it to free it, and continue using the page in GPU calls without any privileges, leading to kernel memory corruption. Reported impact is high (CV...

CVE-2022-20395

The CVE-2022-20395 entry concerns Android 11–13, where a path traversal in MediaProvider.java (checkAccess) can delete files, enabling local elevation of privilege with no extra execution privileges. Affected component: MediaProvider.java; root cause: path traversal leading to local file deletion...

CVE-2022-20418

CVE-2022-20418 → In Android 12/12L/13, a vulnerability in pickStartSeq() of AAVCAssembler.cpp allows an out-of-bounds read, leading to remote information disclosure without privileges or user interaction. Affected component: Android Media framework. Base CVSSv3.1 score: 7.5 (High). Remediation: p...

CVE-2022-20488

Technical details about CVE-2022-20488 are not publicly provided in the supplied documents. Monitor for updates from Android advisories and related sources for patch status and affected versions.

CVE-2023-21080

CVE-2023-21080 affects Android 11–13 and is tied to register_notification_rsp in btif_rc.cc, where a missing bounds check enables a local out-of-bounds read. This can cause information disclosure without requiring privileges or user interaction. The available sources (NVD/NVDC/CNVD/OsV/PRION mirr...

CVE-2023-40098

The CVE-2023-40098 issue affects Android and stems from a logic error in mOnDone() within NotificationConversationInfo.java, enabling local information disclosure of another user’s app notification data. Exploitation requires local access with no user interaction specified, and the confidentialit...

CVE-2024-0024

The CVE-2024-0024 issue affects Android’s UserManagerService.java, where improper input validation can cause a failure to persist or enforce user restrictions. This can enable local privilege escalation, requiring user interaction to exploit. Public references in the provided documents (Android/O...

CVE-2024-20022

CVE-2024-20022 describes a missing bounds check in the lk module that could allow local escalation of privilege to SYSTEM-level execution. The issue is triggered locally (no user interaction required) and is corroborated across multiple connected sources (e.g., Red Hat advisory and other feeds) w...

CVE-2024-20056

A vulnerability in the preloader component of MediaTek hardware allows for a local elevation of privilege due to an insecure default value. Successful exploitation can lead to the execution of code with System privileges and does not require user interaction. This issue was addressed in the 2024-...

CVE-2015-6644

CVE-2015-6644 : The vulnerability concerns Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01. A crafted application can cause the library to leak sensitive information, enabling an attacker who can force a user to run a malicious app to obtain private data. The connected docu...

CVE-2021-0584

CVE-2021-0584 relates to an out-of-bounds read in Android’s Parcel.cpp (verifyBufferObject), caused by improper input validation. The issue can enable local information disclosure without additional privileges or user interaction. Affected Android versions include 8.1, 9, 10, and 11. The descript...

CVE-2021-0591

CVE-2021-0591 (Android) affects Android 8.1, 9, 10, 11. In BluetoothPermissionActivity.java, sendReplyIntentToReceiver can enable invoking privileged broadcast receivers due to a confusing deputy, enabling local elevation of privilege with User execution privileges needed. Exploitation requires u...

CVE-2021-39628

CVE-2021-39628 affects Android (StatusBar.java): a logic error can disclose notification content on the lockscreen, causing local information disclosure without user interaction. The vulnerability is described for Android 10 and 11, with a local attack vector and partial confidentiality impact. T...

CVE-2022-20414

Summary: CVE-2022-20414 describes a local DoS in Android via an uncaught exception in AlarmManagerService.setImpl that can push a device into a boot loop without extra privileges or user interaction. Affected products/versions (per sources): Android 10–13 (Android 10, 11, 12, 12L, 13). Root cause...

CVE-2023-20694

CVE-2023-20694 affects MediaTek preloader for MT6880/MT6890. The issue is an out-of-bounds write caused by a missing bounds check in the preloader, enabling local escalation of privilege with System execution privileges required; no user interaction is needed. A patch is available (ALPS07733998 /...