CVE-2025-20655

The Keymaster component of MediaTek’s microprogramming software is vulnerable to an out-of-bounds read due to a missing bounds check. An attacker who has already obtained System privilege can exploit this flaw to cause local information disclosure and potentially enhance their privileges or expos...

CVE-2015-8546

Concrete details: CVE-2015-8546 affects Samsung mobile devices with Shannon333 baseband (Galaxy S6/S6 Edge/S6 Edge+/Note5) and firmware up to 2015-11-12. Vulnerability is a stack-based buffer overflow in the baseband process, enabling remote code execution via a fake base station. Exploitation st...

CVE-2015-9547

CVE-2015-9547 describes an information-disclosure issue on Samsung mobile devices running JBP(4.3) and KK(4.4.2). The vulnerability stems from mishandling the READ_LOGS permission, causing sensitive data to be exposed in a world-readable log copy if the error messages include, for example, “Unhan...

CVE-2017-13167

CVE-2017-13167 is described as an elevation of privilege vulnerability in the kernel sound timer affecting the Android kernel. The provided connected document notes the product as Android and versions as the Android kernel, with Android ID A-37240993. The Unity Linux/UTSA advisories reference thi...

CVE-2019-2019

CVE-2019-2019 describes a local information-disclosure vulnerability in Android where, in ce_t4t_data_cback of ce_t4t.cc, an out-of-bounds read can occur due to a missing bounds check. The issue could allow leakage of information without extra execution privileges, requiring user interaction to e...

CVE-2019-2114

CVE-2019-2114 describes a local elevation-of-privilege issue in Android related to NFC default privileges that can bypass part of the user-interaction requirement during package installation. The result could allow a local attacker to install a malicious application and gain higher privileges, wi...

CVE-2020-0240

CVE-2020-0240 is an Android Framework vulnerability for Android 10, caused by an out-of-bounds write in NewFixedDoubleArray within factory.cc due to an integer overflow. It could enable remote code execution and requires user interaction for exploitation, with network-based access as the attack v...

CVE-2020-0409

CVE-2020-0409 affects Android (Android-8.0/8.1/9/10). The issue is an out-of-bounds write in FileMap.cpp caused by an integer overflow in create(), enabling local elevation of privilege with no user interaction. In the public docs, severity is high for local access with partial confidentiality/ i...

CVE-2020-0458

CVE-2020-0458 affects the Android Media Framework, specifically the SPDIFEncoder.cpp path. The issue is a possible out-of-bounds write caused by an integer overflow in SPDIFEncoder::writeBurstBufferBytes and related methods, leading to remote code execution with no extra privileges. Public detail...

CVE-2021-0304

CVE-2021-0304 affects Android, describing an information-disclosure risk in GlobalScreenshot.java due to an unsafe PendingIntent. Exploitation requires local access with User privileges and does not require user interaction. Affected versions include Android 8.0, 8.1, 9, and 10. The issue could a...

CVE-2021-0317

CVE-2021-0317 is an Elevation of Privilege vulnerability in Android stemming from a logic error in createOrUpdate(...) of Permission.java that could allow local privilege escalation. Affected Android versions include 8.0, 8.1, 9, 10, and 11. The issue requires user interaction to exploit and is c...

CVE-2021-0327

CVE-2021-0327 affects Android (Android-9, Android-10, Android-11, Android-8.1) via getContentProviderImpl in ActivityManagerService, enabling a local privilege bypass due to non-restored binder identities. This could lead to local escalation of privilege without extra execution privileges or user...

CVE-2021-0596

CVE-2021-0596 is an out-of-bounds read in the NFC path (phNciNfc_RecvMfResp in phNxpExtns_MifareStd.cpp) caused by a missing bounds check. This allows remote information disclosure over NFC with no extra execution privileges and no user interaction. Affected are Android versions 8.1, 9, 10, and 1...

CVE-2021-0651

Technical details about CVE-2021-0651 beyond the initial description are not publicly provided in the connected documents. Please monitor for updates from official advisories.

CVE-2021-0953

CVE-2021-0953 affects Android 9–12. The issue is in SearchWidgetProvider.setOnClickActivityIntent, where an unsafe PendingIntent could allow access to contacts and history bookmarks without permission, enabling local privilege escalation with no user interaction required. Android patch levels 202...

CVE-2022-20118

CVE-2022-20118 affects the Android kernel ion.c, specifically in ion_ioctl and related functions, where a race condition can trigger a use-after-free. This leads to local privilege escalation without extra execution privileges or user interaction. Documented impact appears as EoP with local acces...

CVE-2022-32635

CVE-2022-32635 concerns an out-of-bounds write in the gps component, caused by a missing bounds check, which could enable local escalation of privilege with no user interaction needed. Multiple connected sources reference this exact issue (MediaTek ALPS07573237) and reiterate that exploitation wo...

CVE-2022-42772

CVE-2022-42772 affects the WLAN driver and is caused by a missing bounds check, which could lead to a local denial of service in WLAN services. The connected documents do not specify exact affected product versions or a direct patch, but Android security bulletins indicate that patch levels 2022-...

CVE-2023-20971

CVE-2023-20971 affects the Android Framework in PermissionManagerServiceImpl.java (removePermission) where a logic error could allow obtaining dangerous permissions without user consent, enabling local elevation of privilege with no extra execution privileges and no user interaction needed. The i...

CVE-2023-21099

CVE-2023-21099 affects Android via a logic error in the PackageInstallerSession.java component that can let an attacker start foreground services from the background, enabling local elevation of privilege with no extra execution privileges or user interaction. Affected Android versions include 11...

CVE-2023-40091

CVE-2023-40091 affects Android via the IncidentService.cpp onTransact path, where a memory corruption leads to a possible out-of-bounds write. This could allow local escalation of privilege with no extra execution privileges or user interaction required. The description is consistently reported a...

CVE-2020-0074

CVE-2020-0074 is a local elevation of privilege vulnerability in Android Framework (PackageManagerService.verifyIntentFiltersIfNeeded) that could allow a malicious app to become the default handler for arbitrary domains without user interaction. Impact, per sources, is local access to elevated pr...

CVE-2020-0107

CVE-2020-0107 affects Android 10 via a flaw in PhoneInterfaceManager.getUiccCardsInfo where improper input validation enables a local information disclosure without additional privileges. The issue is a permissions bypass with no user interaction required. Exploitation details are not provided be...

CVE-2020-0424

CVE-2020-0424 is an Android System vulnerability where an out-of-bounds read in res_send.cpp (send_vc) can disclose local information due to an incorrect bounds check. Affected: Android-11, Android-9, Android-10. Impact: information disclosure with no extra privileges or user interaction required...

CVE-2021-0639

CVE-2021-0639 affects Android/Widevine through libl3oemcrypto.cpp. Described as a local information disclosure due to weaknesses in the obfuscation/handling of sensitive data; requires no user interaction. Documented impact is partial confidentiality loss with local access and no privileges beyon...

CVE-2021-0967

CVE-2021-0967 : In vorbis_book_decodev_set of codebook.c there is a missing bounds check causing an out-of-bounds write. This could lead to remote information disclosure on Android devices running Android-10/11/12/9. Exploitation requires user interaction. The issue is within the Media/Codecs pat...

CVE-2021-39625

CVE-2021-39625 affects Android (versions 9–12) and is tied to EuiccNotificationManager.java in showCarrierAppInstallationNotification, where an unsafe PendingIntent could allow a local attacker to access MediaProvider content and escalate privileges. The underlying issue is a local elevation of p...

CVE-2021-39632

CVE-2021-39632 : A bug in Android’s inotify_cb function (events.cpp) allows an out-of-bounds write due to an incorrect bounds check, enabling local privilege escalation without extra privileges or user interaction. Affected: Android 11 and 12 (Android devices with this code path). The issue is de...

CVE-2021-39666

CVE-2021-39666 describes a vulnerability in Android where an out-of-bounds read in the MediaMetricsItem.h extractor may allow local information disclosure without extra privileges or user interaction. Affected software is Android 11 and Android 12; the description specifies the root cause as impr...

CVE-2022-20217

CVE-2022-20217 stems from an authorization weakness in Android’s SprdContactsProvider, enabling a third-party app to trigger an unauthorized broadcast that could delete FDN contacts. Connected sources (PT-2022-4134, NVD entry) confirm the vulnerability in SprdContactsProvider with Android telepho...

CVE-2023-20655

CVE-2023-20655 stems from a parcel format mismatch in MediaTek’s mmsdk, enabling local privilege escalation and potential local code execution without extra privileges or user interaction. Severity is rated high (CVSSv3.1: 7.8; LOCAL attack, LOW complexity, HIGH impact on confidentiality, integri...

CVE-2023-21120

CVE-2023-21120 affects Android components, notably cdm_engine.cpp, where a use-after-free caused by improper locking could enable local privilege escalation with no required user interaction. The vulnerability is documented across multiple feeds (NVD/Red Hat/NCSC/OSV) with Android context; exploi...

CVE-2023-40087

CVE-2023-40087 affects Android Bluetooth code in transcodeQ*ToFloat (btif_avrcp_audio_track.cc) with a missing bounds check, causing an out-of-bounds write and potential elevation of privilege on a paired device. No user interaction required. Documents note this issue and reference Android patch ...

CVE-2024-22012

CVE-2024-22012 : A Google Pixel-related out-of-bounds write due to a missing bounds check can lead to local privilege escalation without user interaction. Affected component: Pixel bootloader (per Pixel Update Bulletin).CVSS shows LOCAL access, LOW exploit complexity, and HIGH confidentiality/int...

CVE-2024-25991

The Google Pixel smartphone is vulnerable to an out-of-bounds read due to a missing bounds check in the acpm_tmu_ipc_handler function within the tmu_plugin.c file. This vulnerability could lead to local information disclosure without requiring additional execution privileges or user interaction. ...

CVE-2024-34741

The CVE-2024-34741 issue concerns Android’s WindowState.java function setForceHideNonSystemOverlayWindowIfNeeded. A logic error could allow message content to be visible on the screensaver when lock-screen visibility is restricted, enabling local elevation of privilege with no extra execution pri...

CVE-2016-0823

The CVE-2016-0823 entry concerns the Linux kernel vulnerability in which pagemap_open (fs/proc/task_mmu.c) on kernels before 3.19.3, including Android 6.0.1 before 2016-03-01, can let a local user read pagemap data to obtain sensitive physical-address information. This is triggered by reading the...

CVE-2018-9384

CVE-2018-9384 identifies a vulnerability in the Kernel component of Google Pixel and Nexus devices. The flaw allows an attacker with System execution privileges to bypass KASLR (Kernel Address Space Layout Randomization) due to an unusual root cause, potentially leading to local information discl...

CVE-2019-2023

CVE-2019-2023 affects Android's hardware ServiceManager::add, where an insecure PID-based permissions check can let an app add or replace a HAL service, enabling code execution in a privileged process. Supported in multiple feeds (NVD, Red Hat, PRION, CIRCL) with exploited/attack data referenced ...

CVE-2020-0241

CVE-2020-0241 is a Media Framework issue in Android (NuPlayerStreamListener.cpp) where a double free leads to memory corruption, enabling local privilege escalation with no user interaction. Affected: Android 8.0–10. Root cause: memory-management error in NuPlayerStreamListener. Impact: local ele...

CVE-2020-0412

CVE-2020-0412 affects Android where in setProcessMemoryTrimLevel of ActivityManagerService.java a missing permission check could allow local information disclosure of foreground processes without extra privileges. Affected Android versions include 8.0–11 (Android-8.0/8.1/9/10/11). The issue is cl...

CVE-2021-0321

CVE-2021-0321 affects Android 11 and is linked to a fault in ActivityManagerService.enforceDumpPermissionForPackage. It may allow a local attacker to determine if a package is installed via a side-channel information disclosure, with no additional privileges and no user interaction required. The ...

CVE-2021-0510

CVE-2021-0510 affects Android's CryptoPlugin.cpp (decrypt_1_2) where an integer overflow can cause an out-of-bounds write. This is described as enabling local privilege escalation with no user interaction. Affected Android versions per the entry are Android 8.1, 9, 10, and 11 (Android-8.1, Androi...

CVE-2021-0971

CVE-2021-0971 affects Google Android Media Framework: specifically MPEG4Source::read in MPEG4Extractor.cpp, where an out-of-bounds write can occur due to a missing bounds check. This can lead to remote information disclosure. The vulnerability is described for Android 9–12, with exploitation requ...

CVE-2021-39648

CVE-2021-39648 affects the Linux kernel gadget code path: the function gadget_dev_desc_UDC_show in configfs.c may disclose kernel heap memory due to a race condition, enabling local information disclosure with SYSTEM privileges (no user interaction required). Publicly documented references in And...

CVE-2021-39676

CVE-2021-39676 — Android 11 : The flaw resides in the AndroidFuture.java writeThrowable path, where a parcel serialization/deserialization mismatch occurs due to improper input validation. This enables local escalation of privilege with no additional execution privileges required, and does not re...

CVE-2021-39717

CVE-2021-39717 affects the Android kernel component iaxxx-btp.c (function iaxxx_btp_write_words). The issue is an out-of-bounds read caused by an incorrect bounds check, leading to local information disclosure with System privileges required. No exploitation details or user interaction informatio...

CVE-2022-20059

CVE-2022-20059 concerns a boundary-check omission in the preloader (usb) leading to an out-of-bounds write and local privilege escalation with physical access. The entry notes user interaction is required for exploitation. Connected sources specify affected MediaTek MT line chips (e.g., MT6761/MT...

CVE-2022-20142

CVE-2022-20142 affects Android (10, 11, 12, 12L) where the issue resides in GeofenceHardwareRequestParcelable.java: createFromParcel, causing an arbitrary code execution due to a parcel mismatch and enabling local privilege escalation with no extra privileges or user interaction. Connected source...

CVE-2022-20468

CVE-2022-20468: A Bluetooth out-of-bounds read in Android’s BNEP_ConnectResp (bnep_api.cc) due to an incorrect bounds check. Affects Android-10/11/12/12L/13; could lead to local information disclosure with no privileges required. Public sources confirm Android security bulletin references and pat...