CVE-2023-21292

CVE-2023-21292 affects Android’s ActivityManagerService.openContentUri, where a confused deputy could allow a third-party app to access restricted files and disclose information locally without extra execution privileges and with no user interaction. The vulnerability is described in Android’s CV...

CVE-2023-35677

CVE-2023-35677 describes a DoS vulnerability in Android where, in the onCreate path of DeviceAdminAdd.java, a missing permission check could allow a device admin to be forcibly added. This enables local denial of service (factory reset or persistent locking) without extra execution privileges and...

CVE-2023-35679

The CVE-2023-35679 entry concerns information disclosure in Android via an out-of-bounds read in MtpPropertyValue (MtpProperty.h) caused by uninitialized data. Affected component is the MTP property handling code; the issue enables local information disclosure with no extra execution privileges, ...

CVE-2023-45774

CVE-2023-45774 affects the Android Shortcuts framework: In fixUpIncomingShortcutInfo of ShortcutService.java, an attacker could view another user’s image due to a confused deputy, enabling local elevation of privilege with no user interaction. Exploitation status is not detailed in the provided d...

CVE-2024-25990

The CVE-2024-25990 issue affects the Google Pixel Android stack described in multiple sources: the function pktproc_perftest_gen_rx_packet_sktbuf_mode in link_rx_pktproc.c experiences an out-of-bounds write due to a race condition. This vulnerability is claimed to permit local escalation of privi...

CVE-2024-31323

CVE-2024-31323 is an Android local elevation-of-privilege vulnerability in the onCreate path of the HealthFitness module (HealthFitness) that could trick a user into granting health permissions via tapjacking, requiring no user interaction for exploitation. The issue is mapped to the Healthfitnes...

CVE-2024-43095

CVE-2024-43095 is an elevation-of-privilege vulnerability in Google Android System (Permission Controller) caused by a logic error. It enables local privilege escalation and is listed as a High-severity EoP issue affecting Android 12–15. The Android security bulletin (January 2025) notes updated ...

CVE-2016-0823

The CVE-2016-0823 entry concerns the Linux kernel vulnerability in which pagemap_open (fs/proc/task_mmu.c) on kernels before 3.19.3, including Android 6.0.1 before 2016-03-01, can let a local user read pagemap data to obtain sensitive physical-address information. This is triggered by reading the...

CVE-2020-0408

CVE-2020-0408: A local EoP in Android’s runtime due to an out-of-bounds write caused by an integer overflow in String16.cpp. Affected: Android versions 8.0–11 (Android Runtime component). Exploitation would require local access with no user interaction; impact is potentially arbitrary code execut...

CVE-2020-0424

CVE-2020-0424 is an Android System vulnerability where an out-of-bounds read in res_send.cpp (send_vc) can disclose local information due to an incorrect bounds check. Affected: Android-11, Android-9, Android-10. Impact: information disclosure with no extra privileges or user interaction required...

CVE-2021-0327

CVE-2021-0327 affects Android (Android-9, Android-10, Android-11, Android-8.1) via getContentProviderImpl in ActivityManagerService, enabling a local privilege bypass due to non-restored binder identities. This could lead to local escalation of privilege without extra execution privileges or user...

CVE-2021-0587

CVE-2021-0587 affects Android’s Media Framework. The issue involves an out-of-bounds write via a use-after-free in the media path (StreamOut.cpp), enabling local escalation of privilege with no user interaction required. Vulnerable Android versions include 8.1–11; the Android Security Bulletin in...

CVE-2021-0588

CVE-2021-0588 describes an information-disclosure flaw in Android’s System component where processInboundMessage in MceStateMachine.java can disclose SMS-related data due to a missing permission check. Exploitation is local (no user interaction required) and could occur on affected versions (Andr...

CVE-2021-0675

The CVE-2021-0675 entry affects the alac decoder and is due to an incorrect bounds check, causing an out-of-bounds write that enables local privilege escalation without user interaction. Documented impact and exploitation status indicate local escalation of privilege with complete confidentiality...

CVE-2021-0696

CVE-2021-0696 describes a use-after-free race in dllist_remove_node (TBD) leading to local privilege escalation on Android SoC. Connected records corroborate a race condition in dllist_remove_node with local-privilege escalation, affecting Android components (PowerVR-GPU listed in PT-2022-9122) a...

CVE-2021-0698

CVE-2021-0698 involves a leak of kernel heap content in PVRSRVBridgeHeapCfgHeapDetails due to uninitialized data, enabling local information disclosure without extra privileges or user interaction. Affected component/driver appears to be PowerVR-GPU (Imagination Technologies) within Android envir...

CVE-2021-39632

CVE-2021-39632 : A bug in Android’s inotify_cb function (events.cpp) allows an out-of-bounds write due to an incorrect bounds check, enabling local privilege escalation without extra privileges or user interaction. Affected: Android 11 and 12 (Android devices with this code path). The issue is de...

CVE-2021-39718

CVE-2021-39718 concerns the Android kernel component ProtocolStkProactiveCommandAdapter (file protocolstkadapter.cpp). A possible out-of-bounds write caused by an incorrect bounds check is reported, which could enable local escalation of privilege with System execution privileges needed. Exploita...

CVE-2022-20217

CVE-2022-20217 stems from an authorization weakness in Android’s SprdContactsProvider, enabling a third-party app to trigger an unauthorized broadcast that could delete FDN contacts. Connected sources (PT-2022-4134, NVD entry) confirm the vulnerability in SprdContactsProvider with Android telepho...

CVE-2022-47460

CVE-2022-47460 describes a memory corruption via a use-after-free in the GPU device that can lead to local denial of service in the kernel. The connected records corroborate a kernel-level use-after-free affecting GPU-related paths and kernel space, with the impact explicitly stated as local DoS....

CVE-2023-20842

CVE-2023-20842 affects MediaTek devices via the core component described as /imgs y s_cmdq/ . The vulnerability is an out-of-bounds write caused by missing valid range checking in imgsys_cmdq, which can enable local privilege escalation with System execution privileges after user interaction. No ...

CVE-2023-21120

CVE-2023-21120 affects Android components, notably cdm_engine.cpp, where a use-after-free caused by improper locking could enable local privilege escalation with no required user interaction. The vulnerability is documented across multiple feeds (NVD/Red Hat/NCSC/OSV) with Android context; exploi...

CVE-2023-21141

CVE-2023-21141 affects Android 11–13 and is linked to a permissions bypass that allows access to developer mode traces, enabling local information disclosure without additional execution privileges. The vulnerability is described as an information disclosure (ID) issue with local attack vector an...

CVE-2023-21280

The CVE-2023-21280 issue affects Android’s MediaSessionRecord.java in setMediaButtonBroadcastReceiver, causing a possible permanent DoS via resource exhaustion. Exploitation requires local access (AV:L, PR:L) with no user interaction, and no additional privileges are needed. The initial entry and...

CVE-2023-40081

The CVE-2023-40081 entry describes an information-disclosure flaw in Android: in loadMediaDataInBgForResumption inside MediaDataManager.kt, a confused-deputy allows viewing another user’s images (no extra execution privileges, no user interaction required). Several connected advisories confirm th...

CVE-2024-0024

The CVE-2024-0024 issue affects Android’s UserManagerService.java, where improper input validation can cause a failure to persist or enforce user restrictions. This can enable local privilege escalation, requiring user interaction to exploit. Public references in the provided documents (Android/O...

CVE-2024-22005

CVE-2024-22005 affects Google Pixel devices, categorized under the Pixel bulletin as a WLAN-related Elevation of Privilege vulnerability. The root cause is described as an authentication bypass due to improperly used cryptography, enabling local privilege escalation without user interaction. No p...

CVE-2024-31319

CVE-2024-31319 affects Android Framework (NotificationManagerService.java). A cross-user data leak caused by a confused deputy could lead to local escalation of privilege with no extra execution privileges required. Exploitation is described as local and independent of user interaction. Public de...

CVE-2015-9546

CVE-2015-9546 affects Samsung mobile devices running KK(4.4) and later through 2015-06-16. The issue arises when HTTP is used for an Inputmethod instead of HTTPS, allowing a man-in-the-middle to modify the client–server data stream and insert directory traversal sequences into an extracted file p...

CVE-2020-0240

CVE-2020-0240 is an Android Framework vulnerability for Android 10, caused by an out-of-bounds write in NewFixedDoubleArray within factory.cc due to an integer overflow. It could enable remote code execution and requires user interaction for exploitation, with network-based access as the attack v...

CVE-2021-0333

CVE-2021-0333 affects Android BluetoothPermissionActivity.java, where a tapjacking overlay during device pairing can bypass the phonebook permissions dialog. This enables local privilege escalation with user interaction required, across Android 8.1–11. The issue is documented in multiple sources ...

CVE-2021-0476

CVE-2021-0476 describes a local elevation-of-privilege vulnerability due to a race condition causing a use-after-free in FindOrCreatePeer (btif_av.cc). Affected: Android 11, 10, 9. Exploitation requires local access with no user interaction; impact is escalation to a privileged context with high ...

CVE-2021-0953

CVE-2021-0953 affects Android 9–12. The issue is in SearchWidgetProvider.setOnClickActivityIntent, where an unsafe PendingIntent could allow access to contacts and history bookmarks without permission, enabling local privilege escalation with no user interaction required. Android patch levels 202...

CVE-2021-39622

CVE-2021-39622 affects Google GBoard on Android 10–12, where a missing permission check allows bypassing Factory Reset Protection, enabling local elevation of privilege without user interaction. The NVD entry lists the impact as local privilege escalation with complete confidentiality/integrity/a...

CVE-2022-20216

CVE-2022-20216 concerns an Android risk where the exported attribute is used to grant third‑party app access permissions; the default intent-filter is true and com.sprd.firewall has set exported to true. The vulnerability is tied to Android devices with a vulnerable Telephony/OSC component (Andro...

CVE-2022-20417

CVE-2022-20417 describes an out-of-bounds write in the Android framework: in audioTransportsToHal of HidlUtils.cpp, caused by an incorrect bounds check, enabling local elevation of privilege with no user interaction. Affected: Android 12, 12L, and 13. The connected documents do not provide a conc...

CVE-2022-20487

CVE-2022-20487 affects Android 10–13: In NotificationChannel.java, a possible failure to persist permissions settings due to resource exhaustion could enable local privilege escalation with no extra execution privileges or user interaction. CVSSv3.1 metrics indicate Local attack, Low privileges r...

CVE-2022-32637

CVE-2022-32637 affects the hevc decoder (MediaTek components) with a missing bounds check causing an out-of-bounds write. This can enable local privilege escalation to System level with no user interaction required. The patch identified is ALPS07491374 (Issue ID ALPS07491374). Exploitation detail...

CVE-2022-47339

CVE-2022-47339 describes a local OS command injection in the cmd_services component due to missing permission checks, enabling local privilege escalation to a root/system level on affected Unisoc/Android devices. The CVSS vector indicates LOCAL access, low attack complexity, but HIGH privileges r...

CVE-2023-20602

CVE-2023-20602 affects the MediaTek ged component in MediaTek devices. The issue is a vulnerability in ged caused by an integer overflow leading to an out-of-bounds write. This can enable local escalation of privilege with System execution privileges required; no user interaction is needed for ex...

CVE-2023-20694

CVE-2023-20694 affects MediaTek preloader for MT6880/MT6890. The issue is an out-of-bounds write caused by a missing bounds check in the preloader, enabling local escalation of privilege with System execution privileges required; no user interaction is needed. A patch is available (ALPS07733998 /...

CVE-2023-20971

CVE-2023-20971 affects the Android Framework in PermissionManagerServiceImpl.java (removePermission) where a logic error could allow obtaining dangerous permissions without user consent, enabling local elevation of privilege with no extra execution privileges and no user interaction needed. The i...

CVE-2023-20993

CVE-2023-20993 affects Android 11–13 via SnoozeHelper.java, where an uncaught exception can cause a failure to persist settings, enabling local elevation of privilege with no extra execution privileges and no user interaction required. The vulnerability is documented across multiple sources (NVD,...

CVE-2023-21084

CVE-2023-21084 affects Android 13, with the flaw in the buildPropFile of filesystem.go caused by an insecure hash from improper crypto usage. The impact is local elevation of privilege (EoP) with system-level execution privileges required and no user interaction. Public details in the provided do...

CVE-2023-21087

CVE-2023-21087 affects Android 11–13, with the root cause described as an uncaught exception in PreferencesHelper.java that can cause a boot loop. The consequence is a local persistent DoS without requiring user interaction. Connected sources repeatedly reference the same underlying issue and not...

CVE-2024-43077

CVE-2024-43077 : Affects Google Android via the DevmemValidateFlags function in devicemem_server.c. The vulnerability is described as an out-of-bounds write caused by memory corruption, enabling local escalation of privilege with no additional execution privileges and no user interaction required...

CVE-2016-2434

CVE-2016-2434 affects NVIDIA Tegra kernel driver (NVHOST) on Android/Nexus 9. An attacker can write an arbitrary value to an arbitrary location, leading to privilege escalation in the kernel. The issue is tied to the NVIDIA video driver in Android before 2016-05-01. Impact is described as local p...

CVE-2020-0383

CVE-2020-0383 affects Android Media Framework (Parse_ins in eas_mdls.c). The issue is an out-of-bounds write due to a missing bounds check, enabling remote information disclosure in the media extractor process with no extra execution privileges required. Impact is shown as partial confidentiality...

CVE-2020-0471

CVE-2020-0471 in Android concerns a flaw in reassemble_and_dispatch of packet_fragmenter.cc that could allow injecting packets into an encrypted Bluetooth connection due to improper input validation. This enables remote escalation of privilege between two Bluetooth devices by a proximal attacker ...

CVE-2021-0433

CVE-2021-0433 affects Android 8.1–11. The issue is a tapjacking/overlay bypass in DeviceChooserActivity.java that lets an attacker bypass the consent dialog when pairing a Bluetooth device, enabling local escalation of privilege and pairing with a malicious device without extra privileges. Exploi...