CVE-2023-40134

CVE-2023-40134 concerns a local information disclosure in the Android UI code path. The vulnerability is described as a confused deputy in isFullScreen/FillUi.java that can allow viewing another user’s images without extra execution privileges and without user interaction. Public sources in the c...

CVE-2023-40137

CVE-2023-40137 affects Android’s DialogFillUi.java and enables local information disclosure of other users’ images due to a confused deputy, with no extra privileges or user interaction required. The vulnerability is documented across multiple sources (NVD entry, CVE list, OSV/ARMS-like records) ...

CVE-2024-20104

CVE-2024-20104 affects MediaTek DA (the DA component in MediaTek chipsets). It describes an out-of-bounds write due to a missing bounds check, potentially enabling local privilege escalation without additional execution privileges; user interaction is required to exploit. The entry cites patch AL...

CVE-2024-34731

CVE-2024-34731 affects Android components (TranscodingResourcePolicy.cpp) with a race-condition leading to memory corruption and local privilege escalation. The description across sources (NVD/Red Hat/CNVD/Vuln enrichment) consistently notes memory corruption as the root cause and local EoP risk ...

CVE-2024-39441

The CVE-2024-39441 entry concerns Unisoc Unisoc components with a vulnerability in wifi display due to a missing permission check. This can allow local escalation of privilege without requiring additional execution privileges (local vector, as described). The connected Red Hat and NVD entries mir...

CVE-2019-2019

CVE-2019-2019 describes a local information-disclosure vulnerability in Android where, in ce_t4t_data_cback of ce_t4t.cc, an out-of-bounds read can occur due to a missing bounds check. The issue could allow leakage of information without extra execution privileges, requiring user interaction to e...

CVE-2019-2023

CVE-2019-2023 affects Android's hardware ServiceManager::add, where an insecure PID-based permissions check can let an app add or replace a HAL service, enabling code execution in a privileged process. Supported in multiple feeds (NVD, Red Hat, PRION, CIRCL) with exploited/attack data referenced ...

CVE-2021-0304

CVE-2021-0304 affects Android, describing an information-disclosure risk in GlobalScreenshot.java due to an unsafe PendingIntent. Exploitation requires local access with User privileges and does not require user interaction. Affected versions include Android 8.0, 8.1, 9, and 10. The issue could a...

CVE-2021-0430

CVE-2021-0430 affects the Android System component. In rw_mfc_handle_read_op (rw_mfc.cc) there is a missing bounds check that allows an out-of-bounds write, enabling remote code execution via a malicious NFC packet with no user interaction. Affected: Android 10 and 11. Impact: RCE with high confi...

CVE-2021-0683

CVE-2021-0683 (Android) : In runTraceIpcStop of ActivityManagerShellCommand.java, a confused deputy can trigger deletion of system files, causing local escalation of privilege without additional execution privileges. Affected: Android 8.1, 9, 10, 11. CVSSv3.1 base score 7.8 (HIGH). Exploitation r...

CVE-2021-39627

CVE-2021-39627 describes a permissions bypass in Android via an unsafe PendingIntent in LegacyModeSmsHandler.java (sendLegacyVoicemailNotification). Affected: Android 9–12 (Android-9, -10, -11, -12). Root cause: unsafe PendingIntent may allow elevation of privileges within a privileged process. I...

CVE-2022-20028

The CVE-2022-20028 entry concerns a Bluetooth out-of-bounds write due to a missing bounds check, enabling local privilege escalation without user interaction. Public documents tie this to MediaTek Bluetooth components exposed in Android devices and list Patch ALPS06198663 as the fix. Exploitation...

CVE-2022-20118

CVE-2022-20118 affects the Android kernel ion.c, specifically in ion_ioctl and related functions, where a race condition can trigger a use-after-free. This leads to local privilege escalation without extra execution privileges or user interaction. Documented impact appears as EoP with local acces...

CVE-2022-20468

CVE-2022-20468: A Bluetooth out-of-bounds read in Android’s BNEP_ConnectResp (bnep_api.cc) due to an incorrect bounds check. Affects Android-10/11/12/12L/13; could lead to local information disclosure with no privileges required. Public sources confirm Android security bulletin references and pat...

CVE-2023-20926

CVE-2023-20926 : The issue is a missing permission check in onParentVisible of HeaderPrivacyIconsController.kt that could bypass factory reset protections on Android 12–13, enabling local escalation of privilege with physical device access and no extra execution privileges or user interaction req...

CVE-2023-21090

CVE-2023-21090 affects Android 13 with a vulnerability in parseUsesPermission of ParsingPackageUtils.java that can cause a boot loop from resource exhaustion, leading to local denial of service. Exploitation requires user interaction and is local in scope; no remote/external vector is described i...

CVE-2024-20022

CVE-2024-20022 describes a missing bounds check in the lk module that could allow local escalation of privilege to SYSTEM-level execution. The issue is triggered locally (no user interaction required) and is corroborated across multiple connected sources (e.g., Red Hat advisory and other feeds) w...

CVE-2024-20144

CVE-2024-20144 affects V6 DA, with an out-of-bounds write caused by a missing bounds check. This can enable local escalation of privilege when an attacker has physical access, requiring user interaction for exploitation. Patch ALPS09167056 fixes MSV-2041 for affected devices. No explicit exploita...

CVE-2024-22012

CVE-2024-22012 : A Google Pixel-related out-of-bounds write due to a missing bounds check can lead to local privilege escalation without user interaction. Affected component: Pixel bootloader (per Pixel Update Bulletin).CVSS shows LOCAL access, LOW exploit complexity, and HIGH confidentiality/int...

CVE-2024-34740

CVE-2024-34740 affects Android frameworks where BinaryXmlSerializer.java writes byte arrays in attributeBytesBase64/attributeBytesHex. The root cause is an integer overflow when serializing a length (e.g., 65536) via writeShort, causing the length to wrap to zero and the bytes to be misinterprete...

CVE-2019-2185

CVE-2019-2185: Out-of-bounds write in VlcDequantH263IntraBlock_SH (vlc_dequant.cpp) can lead to remote code execution. Affected Android versions include 7.1.1, 7.1.2, 8.0, 8.1, 9, 10; vulnerability located in Android Media framework. Exploitation requires user interaction. Remediation is provided...

CVE-2020-0074

CVE-2020-0074 is a local elevation of privilege vulnerability in Android Framework (PackageManagerService.verifyIntentFiltersIfNeeded) that could allow a malicious app to become the default handler for arbitrary domains without user interaction. Impact, per sources, is local access to elevated pr...

CVE-2020-0107

CVE-2020-0107 affects Android 10 via a flaw in PhoneInterfaceManager.getUiccCardsInfo where improper input validation enables a local information disclosure without additional privileges. The issue is a permissions bypass with no user interaction required. Exploitation details are not provided be...

CVE-2021-0321

CVE-2021-0321 affects Android 11 and is linked to a fault in ActivityManagerService.enforceDumpPermissionForPackage. It may allow a local attacker to determine if a package is installed via a side-channel information disclosure, with no additional privileges and no user interaction required. The ...

CVE-2021-0332

CVE-2021-0332 affects Android’s Media/Graphics stack (SurfaceFlinger) where a use-after-free in bootFinished can cause memory corruption, enabling local privilege escalation with low complexity and no user interaction. Affected: Android 10 and 11. Root cause: memory corruption via use-after-free ...

CVE-2021-0688

CVE-2021-0688 is a local privilege-escalation race-condition vulnerability in Android affecting PhoneWindowManager.lockNow (lock screen bypass). Exploitation could grant higher privileges without user interaction; impact is described as local escalation with user privileges needed. Affected Andro...

CVE-2021-39676

CVE-2021-39676 — Android 11 : The flaw resides in the AndroidFuture.java writeThrowable path, where a parcel serialization/deserialization mismatch occurs due to improper input validation. This enables local escalation of privilege with no additional execution privileges required, and does not re...

CVE-2022-20225

CVE-2022-20225 is an Android information-disclosure vulnerability in getSubscriptionProperty() of SubscriptionController.java caused by a missing permission check. The issue could allow a local attacker to read a sensitive identifier without user interaction. Affected Android versions listed in t...

CVE-2022-20416

CVE-2022-20416 involves a bounds-check error in the audioTransportsToHal function of HidlUtils.cpp, causing a possible out-of-bounds write. Affected: Android 12, 12L, 13. Impact: local elevation of privilege with high severity; no user interaction required. Root cause: incorrect bounds check lead...

CVE-2023-20694

CVE-2023-20694 affects MediaTek preloader for MT6880/MT6890. The issue is an out-of-bounds write caused by a missing bounds check in the preloader, enabling local escalation of privilege with System execution privileges required; no user interaction is needed. A patch is available (ALPS07733998 /...

CVE-2023-20842

CVE-2023-20842 affects MediaTek devices via the core component described as /imgs y s_cmdq/ . The vulnerability is an out-of-bounds write caused by missing valid range checking in imgsys_cmdq, which can enable local privilege escalation with System execution privileges after user interaction. No ...

CVE-2023-20927

CVE-2023-20927 affects Android 13 (and related AAOS/Android Automotive OS entries) where a permissions bypass in AndroidManifest.xml could grant signature permissions, enabling local privilege escalation with no user interaction. Vulnerable component is AndroidManifest.xml permission handling; ro...

CVE-2023-21142

CVE-2023-21142 involves a permissions bypass that can allow access to traces in Android dev mode, causing local information disclosure without extra execution privileges. Affected products listed in sources include Android 11–13. Root cause centers on improper access controls for trace data in de...

CVE-2023-35679

The CVE-2023-35679 entry concerns information disclosure in Android via an out-of-bounds read in MtpPropertyValue (MtpProperty.h) caused by uninitialized data. Affected component is the MTP property handling code; the issue enables local information disclosure with no extra execution privileges, ...

CVE-2023-35684

CVE-2023-35684 is described across multiple sources as a vulnerability in the Android Bluetooth stack: in the function avdt_msg_asmbl of avdt_msg.cc there is a possible out-of-bounds write caused by an integer overflow that could allow paired devices to escalate privileges with no extra execution...

CVE-2023-40091

CVE-2023-40091 affects Android via the IncidentService.cpp onTransact path, where a memory corruption leads to a possible out-of-bounds write. This could allow local escalation of privilege with no extra execution privileges or user interaction required. The description is consistently reported a...

CVE-2026-0049

CVE-2026-0049 centers on the Android Framework component LocalImageResolver.java, with the root cause in onHeaderDecoded leading to resource exhaustion and a possible persistent denial-of-service. Exploitation is local and does not require user interaction. Public references consistently describe...

CVE-2026-20435

CVE-2026-20435 concerns a logic error in the preloader of MediaTek-based devices that allows reading device unique identifiers. The vulnerability can enable local information disclosure with physical access and no required user interaction or execution privileges. Affected component: preloader; u...

CVE-2015-9547

CVE-2015-9547 describes an information-disclosure issue on Samsung mobile devices running JBP(4.3) and KK(4.4.2). The vulnerability stems from mishandling the READ_LOGS permission, causing sensitive data to be exposed in a world-readable log copy if the error messages include, for example, “Unhan...

CVE-2019-2054

CVE-2019-2054 involves a seccomp bypass in the Android/Linux kernel prior to 4.8, where seccomp policies allow ptrace usage. This could enable local privilege escalation without additional execution privileges and without user interaction. The core issue is that certain seccomp policies permit pt...

CVE-2019-2114

CVE-2019-2114 describes a local elevation-of-privilege issue in Android related to NFC default privileges that can bypass part of the user-interaction requirement during package installation. The result could allow a local attacker to install a malicious application and gain higher privileges, wi...

CVE-2020-0122

CVE-2020-0122 affects Android where the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml can bypass permissions, enabling local elevation of privilege with System execution privileges and no user interaction required. Impact is describe...

CVE-2020-0382

CVE-2020-0382 affects Android 10/11. In RunInternal of dumpstate.cpp, an uncaught exception enables a possible user-consent bypass, allowing local disclosure of bug report data with System privileges. No user interaction is required for exploitation, and the impact is limited to information discl...

CVE-2021-0312

CVE-2021-0312 involves WAVSource::read in WAVExtractor.cpp. Root cause: integer overflow causing an out-of-bounds write. Impact: remote information disclosure without extra execution privileges; requires user interaction to exploit. Affected Android versions: 8.0–11 (Android 8.0, 8.1, 9, 10, 11)....

CVE-2021-0581

CVE-2021-0581 affects the Android Wi-Fi driver (Android SoC) and is described as an out-of-bounds read caused by a missing bounds check, enabling remote information disclosure to a proximal attacker without extra privileges or user interaction. The issue is documented across multiple feeds (NVD, ...

CVE-2021-0675

The CVE-2021-0675 entry affects the alac decoder and is due to an incorrect bounds check, causing an out-of-bounds write that enables local privilege escalation without user interaction. Documented impact and exploitation status indicate local escalation of privilege with complete confidentiality...

CVE-2021-0877

CVE-2021-0877 is linked in connected documents to Imagination Technologies as an issue affecting PowerVR-GPU on Android SoC. The CVE entry carries a high severity (CVSSv3.1 base score 9.8, CRITICAL) with network attack vector, no user interaction, and impact to confidentiality, integrity, and ava...

CVE-2021-0967

CVE-2021-0967 : In vorbis_book_decodev_set of codebook.c there is a missing bounds check causing an out-of-bounds write. This could lead to remote information disclosure on Android devices running Android-10/11/12/9. Exploitation requires user interaction. The issue is within the Media/Codecs pat...

CVE-2021-0971

CVE-2021-0971 affects Google Android Media Framework: specifically MPEG4Source::read in MPEG4Extractor.cpp, where an out-of-bounds write can occur due to a missing bounds check. This can lead to remote information disclosure. The vulnerability is described for Android 9–12, with exploitation requ...

CVE-2021-39628

CVE-2021-39628 affects Android (StatusBar.java): a logic error can disclose notification content on the lockscreen, causing local information disclosure without user interaction. The vulnerability is described for Android 10 and 11, with a local attack vector and partial confidentiality impact. T...