CVE-2021-0652

Technical details for CVE-2021-0652 are not available in the provided connected documents. The Initial document notes a memory corruption in VectorDrawable and local privilege escalation on Android, but there are no specific product/version, exploit, impact, or remediation details in the supplied...

CVE-2023-35687

CVE-2023-35687 affects Google Android, specifically the MtpPropertyValue path in MtpProperty.h. The issue is a memory corruption due to a use-after-free, allowing local escalation of privilege with no additional execution privileges required and without user interaction. In practice, exploitation...

CVE-2024-31327

CVE-2024-31327 affects Android/libfmq: multiple functions in MessageQueueBase.h may cause an out-of-bounds write due to a race, enabling local escalation of privilege with no user interaction. Exploitation specifics are not provided in the supplied documents. Android security references acknowled...

CVE-2025-27700

CVE-2025-27700 is an elevation-of-privilege issue described for Google Pixel devices. The vulnerability enables a local escalation of privilege via bypassing carrier restrictions with no extra execution privileges or user interaction required; exploitation is local. The NVD entry lists CVSSv3.1: ...

CVE-2019-2009

CVE-2019-2009 affects Android’s Bluetooth stack, specifically l2c_lcc_proc_pdu in l2c_fcr.cc. The issue is an out-of-bounds write due to a missing bounds check, enabling remote code execution over Bluetooth with no user interaction. Affected products/versions include Android 7.0 through 9 (Androi...

CVE-2021-0317

CVE-2021-0317 is an Elevation of Privilege vulnerability in Android stemming from a logic error in createOrUpdate(...) of Permission.java that could allow local privilege escalation. Affected Android versions include 8.0, 8.1, 9, 10, and 11. The issue requires user interaction to exploit and is c...

CVE-2021-0320

CVE-2021-0320 affects Android 10/11, describing a race condition in keystore_keymaster_enforcement.h (is_device_locked and set_device_locked) that could bypass lockscreen requirements for keyguard-bound keys. This may lead to local information disclosure without additional privileges, and exploit...

CVE-2021-0507

CVE-2021-0507 corresponds to an Android Bluetooth flaw in btif_rc.cc (handle_rc_metamsg_cmd) where a missing bounds check can cause an out-of-bounds write. This flaw could enable remote code execution over Bluetooth with no extra privileges and without user interaction. Affected Android versions ...

CVE-2021-0961

CVE-2021-0961 affects the Android kernel via quota_proc_write in xt_quota2.c, enabling information disclosure by reading kernel memory due to uninitialized data. Impact is local: requires SYSTEM privileges with local access; user interaction is not required. Affected product scope is Android kern...

CVE-2022-20395

The CVE-2022-20395 entry concerns Android 11–13, where a path traversal in MediaProvider.java (checkAccess) can delete files, enabling local elevation of privilege with no extra execution privileges. Affected component: MediaProvider.java; root cause: path traversal leading to local file deletion...

CVE-2022-44435

CVE-2022-44435 describes a missing permission check in the Android messaging service, enabling local denial of service in the contacts service with no extra privileges. The issue is listed across multiple sources (NVD/NIST, Red Hat advisory, CVE list) and is associated with Unisoc components with...

CVE-2023-20939

CVE-2023-20939 affects Android 12/12L/13, with memory corruption in the looper_backed_event_loop.cpp functions due to improper locking. The root cause is a locking defect that can lead to local elevation of privilege without extra execution privileges or user interaction. The impact is described ...

CVE-2023-20959

CVE-2023-20959 affects Android 13, where AddSupervisedUserActivity allows guest users to start the activity due to missing permission checks. Root cause: inadequate access control in AddSupervisedUserActivity. Impact: local elevation of privilege with no additional execution privileges required; ...

CVE-2023-21099

CVE-2023-21099 affects Android via a logic error in the PackageInstallerSession.java component that can let an attacker start foreground services from the background, enabling local elevation of privilege with no extra execution privileges or user interaction. Affected Android versions include 11...

CVE-2023-35658

CVE-2023-35658 affects the Android Bluetooth stack (gatt_process_prep_write_rsp in gatt_cl.cc), where a use-after-free can cause privilege escalation and remote code execution without extra privileges or user interaction. The issue is described across multiple sources as a proximal code execution...

CVE-2023-40076

The CVE-2023-40076 issue concerns Android’s CredentialManagerUi.java: in createPendingIntent, a permissions bypass could allow access to credentials from other users. This represents a local elevation of privilege, with exploitation possible without additional execution privileges or user interac...

CVE-2015-3864

CVE-2015-3864 is a remote-code-execution vulnerability in Android’s mediaserver (libstagefright). It arises from an integer underflow when parsing the MPEG-4 tx3g chunk in the Stagefright parser, enabling crafted MPEG-4 data to corrupt memory. The issue is tied to an incomplete fix for CVE-2015-3...

CVE-2019-2108

CVE-2019-2108 affects Android 10 in the Media framework component. The issue is an out-of-bounds write in ihevcd_ref_list.c caused by a missing bounds check, enabling remote code execution with the attacker needing user interaction. The Android 2019-09-05 patch level (and later) addressing this i...

CVE-2021-0396

CVE-2021-0396: In Android, a bounds-check bug in Builtins::Generate_ArgumentsAdaptorTrampoline (builtins-arm.cc and related files) allows an out-of-bounds write, potentially enabling remote code execution in an unprivileged process with no privileges required and no user interaction. Affected: An...

CVE-2021-0584

CVE-2021-0584 relates to an out-of-bounds read in Android’s Parcel.cpp (verifyBufferObject), caused by improper input validation. The issue can enable local information disclosure without additional privileges or user interaction. Affected Android versions include 8.1, 9, 10, and 11. The descript...

CVE-2021-0591

CVE-2021-0591 (Android) affects Android 8.1, 9, 10, 11. In BluetoothPermissionActivity.java, sendReplyIntentToReceiver can enable invoking privileged broadcast receivers due to a confusing deputy, enabling local elevation of privilege with User execution privileges needed. Exploitation requires u...

CVE-2021-0651

Technical details about CVE-2021-0651 beyond the initial description are not publicly provided in the connected documents. Please monitor for updates from official advisories.

CVE-2021-0683

CVE-2021-0683 (Android) : In runTraceIpcStop of ActivityManagerShellCommand.java, a confused deputy can trigger deletion of system files, causing local escalation of privilege without additional execution privileges. Affected: Android 8.1, 9, 10, 11. CVSSv3.1 base score 7.8 (HIGH). Exploitation r...

CVE-2021-0690

CVE-2021-0690 is an Android vulnerability describing an out-of-bounds write (heap buffer overflow) in ih264d_parse_pslice.c that could cause remote information disclosure without extra privileges. Affected Android versions include 8.1, 9, 10, and 11. The issue is exploitable via network-like cond...

CVE-2021-0935

The CVE-2021-0935 entry concerns the Linux kernel IPv6 path: in ip6_xmit() within ip6_output.c, an out-of-bounds write can occur due to a use-after-free, enabling locally escalated privileges with SYSTEM/root rights. Exploitation details are not provided in the supplied documents. Some connected ...

CVE-2022-20356

CVE-2022-20356 affects Android 11/12/12L via the shouldAllowFgsWhileInUsePermissionLocked path in ActiveServices.java. The root cause is improper input validation, allowing a foreground service to be started from the background, causing local elevation of privilege with no additional execution pr...

CVE-2023-20926

CVE-2023-20926 : The issue is a missing permission check in onParentVisible of HeaderPrivacyIconsController.kt that could bypass factory reset protections on Android 12–13, enabling local escalation of privilege with physical device access and no extra execution privileges or user interaction req...

CVE-2023-21090

CVE-2023-21090 affects Android 13 with a vulnerability in parseUsesPermission of ParsingPackageUtils.java that can cause a boot loop from resource exhaustion, leading to local denial of service. Exploitation requires user interaction and is local in scope; no remote/external vector is described i...

CVE-2023-21105

CVE-2023-21105 affects Android devices (Android 11–13). The vulnerability exists in multiple functions of ChooserActivity.java , caused by a confused deputy leading to a possible cross-user media read. This results in local information disclosure with no extra execution privileges and requires no...

CVE-2023-21145

CVE-2023-21145 corresponds to an Android Framework elevation-of-privilege issue in ActivityRecord.java, specifically in updatePictureInPictureMode, where a logic error could bypass background launch restrictions. The result is local escalation of privilege with no extra execution privileges or us...

CVE-2023-35682

CVE-2023-35682 affects Android components via a flaw in hasPermissionForActivity in PackageManagerHelper.java, enabling a confused deputy to start arbitrary components and potentially achieve local elevation of privilege. Exploitation requires user interaction, and the base CVSS indicates local a...

CVE-2023-35684

CVE-2023-35684 is described across multiple sources as a vulnerability in the Android Bluetooth stack: in the function avdt_msg_asmbl of avdt_msg.cc there is a possible out-of-bounds write caused by an integer overflow that could allow paired devices to escalate privileges with no extra execution...

CVE-2023-40134

CVE-2023-40134 concerns a local information disclosure in the Android UI code path. The vulnerability is described as a confused deputy in isFullScreen/FillUi.java that can allow viewing another user’s images without extra execution privileges and without user interaction. Public sources in the c...

CVE-2023-40137

CVE-2023-40137 affects Android’s DialogFillUi.java and enables local information disclosure of other users’ images due to a confused deputy, with no extra privileges or user interaction required. The vulnerability is documented across multiple sources (NVD entry, CVE list, OSV/ARMS-like records) ...

CVE-2024-0025

CVE-2024-0025 concerns a logic error in the Android framework (ActivityManagerService.sendIntentSender) that can enable a local elevation of privilege through a background activity launch. Affected component is Android’s system services (ActivityManagerService); no specific product/version is dis...

CVE-2024-20040

CVE-2024-20040 affects MediaTek WLAN firmware (MT6XXX/MT79XX) and stems from an out-of-bounds write caused by improper input validation. This could enable remote escalation of privilege with no additional execution privileges required and no user interaction. The CVSSv3.1 base score is 8.8 (HIGH)...

CVE-2024-22012

CVE-2024-22012 : A Google Pixel-related out-of-bounds write due to a missing bounds check can lead to local privilege escalation without user interaction. Affected component: Pixel bootloader (per Pixel Update Bulletin).CVSS shows LOCAL access, LOW exploit complexity, and HIGH confidentiality/int...

CVE-2024-34740

CVE-2024-34740 affects Android frameworks where BinaryXmlSerializer.java writes byte arrays in attributeBytesBase64/attributeBytesHex. The root cause is an integer overflow when serializing a length (e.g., 65536) via writeShort, causing the length to wrap to zero and the bytes to be misinterprete...

CVE-2025-20645

The CVE-2025-20645 issue affects MediaTek components (KeyInstall) and is caused by a missing bounds check, leading to a possible out-of-bounds write. This could enable local privilege escalation for an attacker with System privileges, with no user interaction required. A patch is available (ALPS0...

CVE-2019-2114

CVE-2019-2114 describes a local elevation-of-privilege issue in Android related to NFC default privileges that can bypass part of the user-interaction requirement during package installation. The result could allow a local attacker to install a malicious application and gain higher privileges, wi...

CVE-2020-0259

CVE-2020-0259 affects the Android kernel AMLogic dm-verity component (dm-android-verity.c). The vulnerability arises from improper crypto usage in android_verity_ctr, allowing a local attacker to modify a dm-verity protected filesystem and gain elevation of privilege with no additional execution ...

CVE-2021-0304

CVE-2021-0304 affects Android, describing an information-disclosure risk in GlobalScreenshot.java due to an unsafe PendingIntent. Exploitation requires local access with User privileges and does not require user interaction. Affected versions include Android 8.0, 8.1, 9, and 10. The issue could a...

CVE-2021-0478

Technical details beyond the initial description are not provided in the connected documents. Monitor for updates from Android/vendor advisories to confirm affected components, root cause, and fixes.

CVE-2021-0514

CVE-2021-0514 affects the Android platform through a race condition in several functions of the V8 library, causing a use-after-free that can enable remote code execution in an unprivileged process. Exploitation is possible with network access (no user interaction required) and affects Android ve...

CVE-2022-20416

CVE-2022-20416 involves a bounds-check error in the audioTransportsToHal function of HidlUtils.cpp, causing a possible out-of-bounds write. Affected: Android 12, 12L, 13. Impact: local elevation of privilege with high severity; no user interaction required. Root cause: incorrect bounds check lead...

CVE-2022-20468

CVE-2022-20468: A Bluetooth out-of-bounds read in Android’s BNEP_ConnectResp (bnep_api.cc) due to an incorrect bounds check. Affects Android-10/11/12/12L/13; could lead to local information disclosure with no privileges required. Public sources confirm Android security bulletin references and pat...

CVE-2023-21244

CVE-2023-21244 affects Android components, specifically in Notification.java (visitUris), where a missing permission check can bypass user profile boundaries, enabling local escalation of privilege with User execution privileges required and no user interaction needed. The vulnerability is discus...

CVE-2023-40091

CVE-2023-40091 affects Android via the IncidentService.cpp onTransact path, where a memory corruption leads to a possible out-of-bounds write. This could allow local escalation of privilege with no extra execution privileges or user interaction required. The description is consistently reported a...

CVE-2024-20148

CVE-2024-20148 concerns MediaTek wlan STA FW where an improper input validation leads to an out-of-bounds write. The vulnerability could enable remote code execution on proximal devices with no privileges and no user interaction required. Patch IDs associated are WCNCR00389045 and ALPS09136494 (M...

CVE-2024-43091

Summary: CVE-2024-43091 is a Google Android/Skia vulnerability in the SkEmbossMaskFilter.cpp function filterMask. The issue is a possible out-of-bounds write caused by an integer overflow, which could allow remote code execution with no extra privileges and no user interaction, as described in th...