CVE-2018-9416

CVE-2018-9416 concerns memory corruption in the Linux kernel SCSI driver, specifically in sg_remove_scat (scsi/sg.c). The root cause is described as an unusual root cause leading to local escalation of privilege with System execution privileges needed; no user interaction required. Connected docu...

CVE-2024-40659

CVE-2024-40659 concerns Android’s RemoteProvisioningService.getRegistration, where improper input validation could allow an attacker to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps. This yields a local Denial of Service with...

CVE-2024-49734

A vulnerability in multiple functions of ConnectivityService.java within Google Android allows a Wi-Fi access point to determine the specific site a device is accessing through a VPN . This is caused by a side channel information disclosure , which can lead to remote information disclosure withou...

CVE-2024-49736

Google Android is affected by a denial-of-service vulnerability caused by a logic error in the MainClear.java file. An attacker can exploit this error to trigger a factory reset without explicit user consent. This attack requires no additional execution privileges and does not require user intera...

CVE-2017-14496

CVE-2017-14496: dnsmasq contains an integer underflow in the EDNS0 add_pseudoheader handling when --add-mac, --add-cpe-id, or --add-subnet is used, allowing a denial of service via crafted DNS requests. Public advisories (CentOS/RH, Arch Linux, AWS ALAS) and Arista note fixes, with upgrades to dn...

CVE-2024-0042

Technical details are not publicly available in the provided documents. No affected products/versions or remediation specifics are listed. Monitor for updates.

CVE-2023-45866

CVE-2023-45866 affects BlueZ Bluetooth HID Hosts. The description states that an unauthenticated Peripheral role HID Device could initiate, establish an encrypted connection, and send HID keyboard reports, potentially injecting HID messages when there is no user interaction in the Central role to...

CVE-2024-43096

The Google Android operating system is affected by a code execution vulnerability caused by an out-of-bounds write in the build_read_multi_rsp function of gatt_sr.cc. This flaw results from a missing bounds check , which could allow an attacker to achieve remote (proximal/adjacent) code execution...

CVE-2024-49744

Google Android is impacted by an elevation of privilege vulnerability (CVE-2024-49744 ) caused by unsafe deserialization within the checkKeyIntentParceledCorrectly function of AccountManagerService.java. An attacker can exploit this flaw to bypass parcel mismatch mitigation , potentially leading ...

CVE-2016-2107

CVE-2016-2107 (OpenSSL) is a padding-oracle vulnerability in the AES-NI CBC MAC check. The issue arises in the AES-CBC padding validation where memory allocation during the padding check is mishandled, enabling potential leakage of plaintext under certain conditions. Affected OpenSSL versions inc...

CVE-2011-1823

The CVE-2011-1823 entry concerns the vold volume manager daemon in Android (Android 3.0 and 2.x up to 2.3.4). The vulnerability arises from trusting PF_NETLINK messages, enabling a local attacker to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only ...

CVE-2023-20963

CVE-2023-20963 affects Android WorkSource: a parcel/unparcel mismatch can enable local privilege escalation with no additional execution privileges required. Affected versions include Android 11–13 (11, 12, 12L, 13); patch information is in the March 2023 Android Security Bulletin, with mitigatio...

CVE-2018-9434

A flaw in Android's Binder IPC allows applications to craft Parcels where binder-object metadata overlaps with string data. During unmarshalling, the kernel inserts genuine kernel pointers into attacker-controlled buffers. These pointers can be leaked back through services like the clipboard, res...

CVE-2024-49738

Google Android is affected by an out-of-bounds write vulnerability within the writeInplace function of Parcel.cpp . This flaw arises from a failure to properly check boundaries, which could allow for local escalation of privilege without requiring additional execution privileges or user interacti...

CVE-2018-9401

This vulnerability affects the cameraisp component within the MediaTek components of Google Pixel and Nexus devices. The root cause is an incorrect bounds check , which allows an attacker to access kernel memory from user space. This flaw can lead to local escalation of privilege (EoP) without re...

CVE-2023-35674

The CVE-2023-35674 issue affects the Android Framework, specifically an onCreate path in WindowState.java that can launch a background activity due to a logic error. This enables local elevation of privilege without extra execution privileges and without user interaction. The Android Security Bul...

CVE-2023-40132

The Android operating system contains an Elevation of Privilege (EoP) vulnerability (CVE-2023-40132) within the Framework component, specifically in RingtoneManager.java at the setActualDefaultRingtoneUri function. The root cause is a missing permission check , which allows an attacker to bypass ...

CVE-2024-43765

Google Android is affected by an elevation of privilege vulnerability in the System component and the Documents UI subcomponent of Project Mainline. The flaw originates from multiple locations where a tapjacking/overlay attack or eavesdropping hijacking/overwriting attack can be exploited to gain...

CVE-2011-0419

CVE-2011-0419 is a stack consumption/DoS vulnerability in the APR library’s fnmatch implementation (apr_fnmatch.c) and, for some platforms, in libc’s fnmatch.c. It affects APR < 1.4.3 and Apache HTTP Server

CVE-2024-49737

Google Android is affected by an elevation of privilege vulnerability (CVE-2024-49737) caused by a logic error in the applyTaskFragmentOperation function of the WindowOrganizerController.java file. An attacker can exploit this flaw to launch arbitrary activities as the system UID . This local esc...

CVE-2024-31310

CVE-2024-31310 affects Android: in AutofillManagerServiceImpl.newServiceInfoLocked, improper input validation can allow hiding an enabled Autofill service in the Autofill service settings. Impact is local privilege escalation with high confidentiality/integrity/availability implications, requirin...

CVE-2022-20007

The CVE-2022-20007 issue is a race-condition vulnerability in Android's RootWindowContainer.java (startActivityForAttachedApplicationIfNeeded) that could allow an overlay to fool a foreground app, enabling local privilege escalation. Affected: Android 10–12 (including 12L). Root cause: a race bet...

CVE-2017-0781

CVE-2017-0781 is a remote code execution vulnerability in the Android Bluetooth stack (BNEP) that allows crafting packets to overflow a heap buffer and execute code. Connected PoC/Exploit references (BlueBorne) describe Android RCE via the BNEP service and related Bluetooth flaws across Android v...

CVE-2025-48595

The Android Framework contains an integer overflow vulnerability (CWE-190) during Parcel deserialization in the system_server component. The flaw occurs because the system fails to perform overflow checks when multiplying the array length N by the element size (sizeof(int32_t)), allowing an attac...

CVE-2024-49724

Google Android is affected by an elevation of privilege vulnerability in the Framework component. A race condition (competitive condition) flaw exists in multiple functions within AccountManagerService.java , allowing an attacker to bypass permissions and launch protected activities. This can lea...

CVE-2024-49735

Google Android is affected by a local elevation of privilege vulnerability (CVE-2024-49735). The root cause is a failure to persist permissions settings due to resource exhaustion , which may lead to the program incorrectly retaining setup privileges. An attacker can exploit this to elevate privi...

CVE-2023-21273

CVE-2023-21273 describes an out-of-bounds write in the Android SDP_AddAttribute path (sdp_db.cc), caused by an incorrect bounds check. The issue can enable remote code execution with no extra privileges and no user interaction, as stated in multiple public sources. Public documents consistently i...

CVE-2018-9461

A race condition exists in the onAttachFragment method of ShareIntentActivity.java within the Android operating system. This vulnerability allows an application to read files from the messages app without requiring additional execution privileges. The flaw can be exploited without user interactio...

CVE-2024-49748

Google Android is affected by a heap buffer overflow vulnerability within the gatt_sr.cc file, specifically in the gatts_process_primary_service_req function. An attacker can exploit this flaw to achieve remote code execution (RCE) without requiring additional execution privileges or user interac...

CVE-2025-48593

A use-after-free vulnerability exists in the bta_hf_client_cb_init function of bta_hf_client_main.cc within the Android Bluetooth subsystem. This flaw is triggered when a phone responds with an error during SDP discovery , causing a tSDP_DISCOVERY_DB to be freed while a dangling pointer remains i...

CVE-2024-49733

Google Android is affected by an information disclosure vulnerability caused by a logic error in the code within ServiceListing.java . A malicious application could exploit this to hide an NLS from Settings , leading to local information disclosure without requiring additional execution privilege...

CVE-2016-2108

CVE-2016-2108 : OpenSSL’s ASN.1 implementation allows remote attackers to execute arbitrary code or cause a denial of service via a crafted ASN.1 ANY field, due to a buffer underflow/memory corruption when deserializing data. Affected: OpenSSL versions prior to 1.0.1o (and prior to 1.0.2c in the ...

CVE-2019-9456

CVE-2019-9456 stems from the Android kernel Pixel C USB monitor driver. The issue is an out-of-bounds write caused by a missing bounds check in the Pixel C USB monitor driver, enabling local escalation of privilege to System with no user interaction required. This is described in the CVE entry as...

CVE-2019-9458

CVE-2019-9458 is a Linux kernel video driver use-after-free caused by a race condition, leading to local privilege escalation without user interaction. Multiple connected advisories confirm the issue exists in the Android/Linux kernel/video driver stack and note kernel fixes are needed; no public...

CVE-2024-32927

CVE-2024-32927 affects Google's Pixel devices via the RadioExt.cpp function sendDeviceState_1_6, where a use-after-free due to improper locking is reported. The vulnerability enables local escalation of privilege with no additional execution privileges required and no user interaction needed, per...

CVE-2018-9447

A local denial of service vulnerability exists in the Google Android System due to a missing null check in the onCreate method of EmergencyCallbackModeExitDialog.java. An attacker can exploit this flaw to crash the emergency callback mode without requiring additional execution privileges or user ...

CVE-2024-49742

Google Android is affected by a local elevation of privilege vulnerability (CWE-269) caused by a missing permission check in the onCreate method of NotificationAccessConfirmationActivity.java. This flaw could allow an application with notification access to be hidden within the system Settings, p...

CVE-2018-9379

The MiniThumbFile.java component in Google Pixel and Google Nexus smartphones contains a confused deputy vulnerability in multiple functions. This flaw allows an attacker to view thumbnails of deleted photos, leading to local information disclosure without requiring additional execution privilege...

CVE-2025-48543

A critical use-after-free vulnerability exists in the Android Runtime (ART) component, affecting Android versions 13, 14, 15, and 16. This flaw allows a malicious application to escape the Chrome sandbox and escalate privileges to the system_server process, potentially leading to full device comp...

CVE-2018-9405

A security vulnerability exists in the dm_agent.cpp file within the BnDmAgent::onTransact function due to a missing bounds check . This flaw allows for a possible out-of-bounds write , which could lead to a local escalation of privilege requiring System execution privileges . Exploitation does no...

CVE-2025-0087

Google Android is vulnerable to a local escalation of privilege due to a missing permission check in the onCreate function of UninstallerActivity.java . An attacker can exploit this flaw to uninstall applications belonging to different users without requiring additional execution privileges or us...

CVE-2024-31317

CVE-2024-31317 is a Zygote command-injection vulnerability affecting Android 9–13, enabling a non-privileged app with WRITE_SECURE_SETTINGS to trigger code execution in the Zygote process via unsafe deserialization and manipulated Zygote arguments (e.g., runtime-flags, hidden_api_blacklist_exempt...

CVE-2018-9375

The UserDictionaryProvider component, specifically within UserDictionaryProvider.java , is vulnerable to a confused deputy flaw in multiple functions. This vulnerability allows an attacker to add or delete words in the user dictionary, potentially leading to a local escalation of privilege withou...

CVE-2025-48530

A code execution vulnerability exists in Android due to out-of-bounds (OOB) accesses caused by incorrect bounds checking in multiple locations. Specifically, a linear buffer overflow was identified in CrabbyAVIF , an AVIF image parser/decoder implemented in unsafe Rust . While the flaw was never ...

CVE-2018-9382

A missing permission check in multiple functions of WifiServiceImpl.java allows for the activation of a Wi-Fi hotspot from a non-owner profile. This vulnerability enables a local escalation of privilege without requiring additional execution privileges or user interaction. The issue specifically ...

CVE-2018-9387

The mnh_sm driver component in Google Pixel and Nexus devices is vulnerable to a heap overflow caused by an integer overflow in multiple functions of mnh-sm.c . This vulnerability allows for local escalation of privilege without requiring additional execution privileges or user interaction. Remed...

CVE-2025-26426

A vulnerability exists in the Framework component of the Android operating system within the registerReceiverWithFeatureTraced function of BroadcastController.java. Due to improper input validation (specifically related to receiving broadcasts intended for the "android" package), a local attacker...

CVE-2023-21127

CVE-2023-21127 affects Android (11, 12, 12L, 13) via the NuMediaExtractor.cpp function readSampleData, where an out-of-bounds write on uninitialized data is possible. This can lead to remote code execution with no additional privileges required, with user interaction needed for exploitation. Mult...

CVE-2019-9506

CVE-2019-9506 affects Bluetooth KNOB (Key Negotiation of Bluetooth) by allowing nearby attackers to influence encryption key length during BR/EDR negotiation, enabling potential eavesdropping and ciphertext injection. Connected sources show this vulnerability being acknowledged by Apple across iO...

CVE-2018-9568

This CVE-2018-9568 entry concerns the Linux kernel socket code: In sk_clone_lock of sock.c, a memory corruption due to type confusion could allow local privilege escalation without user interaction. Affected product/version in the initial doc is Android kernel; connected MiracleLinux advisory con...