CVE-2021-0971

CVE-2021-0971 affects Google Android Media Framework: specifically MPEG4Source::read in MPEG4Extractor.cpp, where an out-of-bounds write can occur due to a missing bounds check. This can lead to remote information disclosure. The vulnerability is described for Android 9–12, with exploitation requ...

CVE-2021-39628

CVE-2021-39628 affects Android (StatusBar.java): a logic error can disclose notification content on the lockscreen, causing local information disclosure without user interaction. The vulnerability is described for Android 10 and 11, with a local attack vector and partial confidentiality impact. T...

CVE-2021-39666

CVE-2021-39666 describes a vulnerability in Android where an out-of-bounds read in the MediaMetricsItem.h extractor may allow local information disclosure without extra privileges or user interaction. Affected software is Android 11 and Android 12; the description specifies the root cause as impr...

CVE-2022-20217

CVE-2022-20217 stems from an authorization weakness in Android’s SprdContactsProvider, enabling a third-party app to trigger an unauthorized broadcast that could delete FDN contacts. Connected sources (PT-2022-4134, NVD entry) confirm the vulnerability in SprdContactsProvider with Android telepho...

CVE-2022-42772

CVE-2022-42772 affects the WLAN driver and is caused by a missing bounds check, which could lead to a local denial of service in WLAN services. The connected documents do not specify exact affected product versions or a direct patch, but Android security bulletins indicate that patch levels 2022-...

CVE-2023-21091

The CVE-2023-21091 entry affects Android 13 and involves the canDisplayLocalUi path in AppLocalePickerActivity.java. The underlying issue is a missing permission check that could allow changing system app locales, enabling a local denial of service across user boundaries. Exploitation is describe...

CVE-2023-21271

CVE-2023-21271 : In the parseInputs function of ShimPreparedModel.cpp, there is an out-of-bounds read due to improper input validation, potentially enabling local information disclosure without user interaction. This is a local information disclosure vulnerability with high confidentiality impact...

CVE-2023-21283

CVE-2023-21283 affects Google Android (StatusHints.java) and describes a local information disclosure via a confused deputy vulnerability. The issue allows revealing images across users and requires user interaction to exploit; no additional execution privileges are stated. The available connecte...

CVE-2023-35664

CVE-2023-35664 corresponds to an information-disclosure flaw in Android related to an out-of-bounds read in the ShimConverter.cpp function convertSubgraphFromHAL. The issue arises from a missing bounds check, enabling a local attacker to read sensitive information without additional execution pri...

CVE-2024-22005

CVE-2024-22005 affects Google Pixel devices, categorized under the Pixel bulletin as a WLAN-related Elevation of Privilege vulnerability. The root cause is described as an authentication bypass due to improperly used cryptography, enabling local privilege escalation without user interaction. No p...

CVE-2021-0314

The CVE-2021-0314 issue affects Android’s UninstallerActivity in the Framework. It describes a tapjacking/overlay-based method to uninstall an app without informed user consent, leading to local elevation of privilege with User execution privileges needed. Affected Android versions include 8.1, 9...

CVE-2021-0327

CVE-2021-0327 affects Android (Android-9, Android-10, Android-11, Android-8.1) via getContentProviderImpl in ActivityManagerService, enabling a local privilege bypass due to non-restored binder identities. This could lead to local escalation of privilege without extra execution privileges or user...

CVE-2021-0333

CVE-2021-0333 affects Android BluetoothPermissionActivity.java, where a tapjacking overlay during device pairing can bypass the phonebook permissions dialog. This enables local privilege escalation with user interaction required, across Android 8.1–11. The issue is documented in multiple sources ...

CVE-2021-0698

CVE-2021-0698 involves a leak of kernel heap content in PVRSRVBridgeHeapCfgHeapDetails due to uninitialized data, enabling local information disclosure without extra privileges or user interaction. Affected component/driver appears to be PowerVR-GPU (Imagination Technologies) within Android envir...

CVE-2021-39632

CVE-2021-39632 : A bug in Android’s inotify_cb function (events.cpp) allows an out-of-bounds write due to an incorrect bounds check, enabling local privilege escalation without extra privileges or user interaction. Affected: Android 11 and 12 (Android devices with this code path). The issue is de...

CVE-2021-39718

CVE-2021-39718 concerns the Android kernel component ProtocolStkProactiveCommandAdapter (file protocolstkadapter.cpp). A possible out-of-bounds write caused by an incorrect bounds check is reported, which could enable local escalation of privilege with System execution privileges needed. Exploita...

CVE-2022-20487

CVE-2022-20487 affects Android 10–13: In NotificationChannel.java, a possible failure to persist permissions settings due to resource exhaustion could enable local privilege escalation with no extra execution privileges or user interaction. CVSSv3.1 metrics indicate Local attack, Low privileges r...

CVE-2023-20940

Summary: CVE-2023-20940 affects Android 13. A vulnerability in the boot partition handling caused by improper use of crypto allows local escalation of privilege without user interaction. The issue’s impact is described as high (EoP) with CVSSv3.1 metrics showing attack vector LOCAL, privileges re...

CVE-2023-21275

CVE-2023-21275 is an Android elevation-of-privilege vulnerability caused by a logic error in DecideCancelProvisioningDialog within AdminIntegratedFlowPrepareActivity.java. The flaw could allow a local attacker to bypass factory reset protections with no extra privileges and without user interacti...

CVE-2023-21280

The CVE-2023-21280 issue affects Android’s MediaSessionRecord.java in setMediaButtonBroadcastReceiver, causing a possible permanent DoS via resource exhaustion. Exploitation requires local access (AV:L, PR:L) with no user interaction, and no additional privileges are needed. The initial entry and...

CVE-2023-35677

CVE-2023-35677 describes a DoS vulnerability in Android where, in the onCreate path of DeviceAdminAdd.java, a missing permission check could allow a device admin to be forcibly added. This enables local denial of service (factory reset or persistent locking) without extra execution privileges and...

CVE-2023-40087

CVE-2023-40087 affects Android Bluetooth code in transcodeQ*ToFloat (btif_avrcp_audio_track.cc) with a missing bounds check, causing an out-of-bounds write and potential elevation of privilege on a paired device. No user interaction required. Documents note this issue and reference Android patch ...

CVE-2024-0024

The CVE-2024-0024 issue affects Android’s UserManagerService.java, where improper input validation can cause a failure to persist or enforce user restrictions. This can enable local privilege escalation, requiring user interaction to exploit. Public references in the provided documents (Android/O...

CVE-2024-39431

The CVE-2024-39431 issue affects Unisoc chipsets’ UMTS RLC driver, where a missing bounds check can cause an out-of-bounds write. This can lead to remote denial of service with system privileges. Public references confirm the vulnerable component as the UMTS RLC driver and describe the exploit su...

CVE-2017-13167

CVE-2017-13167 is described as an elevation of privilege vulnerability in the kernel sound timer affecting the Android kernel. The provided connected document notes the product as Android and versions as the Android kernel, with Android ID A-37240993. The Unity Linux/UTSA advisories reference thi...

CVE-2020-0408

CVE-2020-0408: A local EoP in Android’s runtime due to an out-of-bounds write caused by an integer overflow in String16.cpp. Affected: Android versions 8.0–11 (Android Runtime component). Exploitation would require local access with no user interaction; impact is potentially arbitrary code execut...

CVE-2020-0409

CVE-2020-0409 affects Android (Android-8.0/8.1/9/10). The issue is an out-of-bounds write in FileMap.cpp caused by an integer overflow in create(), enabling local elevation of privilege with no user interaction. In the public docs, severity is high for local access with partial confidentiality/ i...

CVE-2020-0424

CVE-2020-0424 is an Android System vulnerability where an out-of-bounds read in res_send.cpp (send_vc) can disclose local information due to an incorrect bounds check. Affected: Android-11, Android-9, Android-10. Impact: information disclosure with no extra privileges or user interaction required...

CVE-2021-0352

CVE-2021-0352 affects Android (Android-10/Android-11) via memory corruption in the RT regmap driver caused by a type confusion. This can lead to local denial of service with system execution privileges, and exploitation requires no user interaction. The patch referenced is ALPS05453809. The vulne...

CVE-2021-0476

CVE-2021-0476 describes a local elevation-of-privilege vulnerability due to a race condition causing a use-after-free in FindOrCreatePeer (btif_av.cc). Affected: Android 11, 10, 9. Exploitation requires local access with no user interaction; impact is escalation to a privileged context with high ...

CVE-2021-0587

CVE-2021-0587 affects Android’s Media Framework. The issue involves an out-of-bounds write via a use-after-free in the media path (StreamOut.cpp), enabling local escalation of privilege with no user interaction required. Vulnerable Android versions include 8.1–11; the Android Security Bulletin in...

CVE-2021-0696

CVE-2021-0696 describes a use-after-free race in dllist_remove_node (TBD) leading to local privilege escalation on Android SoC. Connected records corroborate a race condition in dllist_remove_node with local-privilege escalation, affecting Android components (PowerVR-GPU listed in PT-2022-9122) a...

CVE-2022-22266

Technical details about CVE-2022-22266 are not publicly available in the connected documents; the description provided is the extent of information here. Monitor for updates.

CVE-2022-32635

CVE-2022-32635 concerns an out-of-bounds write in the gps component, caused by a missing bounds check, which could enable local escalation of privilege with no user interaction needed. Multiple connected sources reference this exact issue (MediaTek ALPS07573237) and reiterate that exploitation wo...

CVE-2022-47335

CVE-2022-47335 is described across multiple sources as a vulnerability in Android Unisoc components, with the root cause being a missing permission check in the telecom service. This could allow a local attacker with low privileges and no user interaction to induce a denial of service on the affe...

CVE-2023-20655

CVE-2023-20655 stems from a parcel format mismatch in MediaTek’s mmsdk, enabling local privilege escalation and potential local code execution without extra privileges or user interaction. Severity is rated high (CVSSv3.1: 7.8; LOCAL attack, LOW complexity, HIGH impact on confidentiality, integri...

CVE-2023-20957

CVE-2023-20957 describes a possible bypass of Factory Reset Protections in Android via the onAttach method of SettingsPreferenceFragment.java, caused by a confused deputy. The impact is local elevation of privilege with no extra execution privileges required, and exploitation is described as requ...

CVE-2023-21120

CVE-2023-21120 affects Android components, notably cdm_engine.cpp, where a use-after-free caused by improper locking could enable local privilege escalation with no required user interaction. The vulnerability is documented across multiple feeds (NVD/Red Hat/NCSC/OSV) with Android context; exploi...

CVE-2023-21141

CVE-2023-21141 affects Android 11–13 and is linked to a permissions bypass that allows access to developer mode traces, enabling local information disclosure without additional execution privileges. The vulnerability is described as an information disclosure (ID) issue with local attack vector an...

CVE-2023-21257

CVE-2023-21257 is an Android Framework elevation-of-privilege issue. In the function updateSettingsInternalLI of InstallPackageHelper.java , a missing permission check could allow sideloading an app into the work profile, enabling local privilege escalation with no extra execution privileges requ...

CVE-2023-21292

CVE-2023-21292 affects Android’s ActivityManagerService.openContentUri, where a confused deputy could allow a third-party app to access restricted files and disclose information locally without extra execution privileges and with no user interaction. The vulnerability is described in Android’s CV...

CVE-2023-21351

CVE-2023-21351 affects Google Android (Framework) and is described as a local elevation-of-privilege vulnerability caused by a logic error that can trigger a background activity launch. The issue can be exploited without user interaction and could compromise confidentiality, integrity, and availa...

CVE-2023-45774

CVE-2023-45774 affects the Android Shortcuts framework: In fixUpIncomingShortcutInfo of ShortcutService.java, an attacker could view another user’s image due to a confused deputy, enabling local elevation of privilege with no user interaction. Exploitation status is not detailed in the provided d...

CVE-2023-45779

CVE-2023-45779 affects the AOSP APEX module framework. The root cause is the improper use of crypto, enabling a malicious update to platform components and resulting in local privilege escalation with no extra execution privileges required. No user interaction is needed for exploitation. The vuln...

CVE-2024-25990

The CVE-2024-25990 issue affects the Google Pixel Android stack described in multiple sources: the function pktproc_perftest_gen_rx_packet_sktbuf_mode in link_rx_pktproc.c experiences an out-of-bounds write due to a race condition. This vulnerability is claimed to permit local escalation of privi...

CVE-2024-43085

The CVE-2024-43085 entry concerns Android’s UsbDeviceManager.java: In handleMessage a logic error could allow local privilege escalation by reading device contents over USB without unlocking, with no user interaction required. Affected component is the Android USB subsystem; impact is local eleva...

CVE-2016-0823

The CVE-2016-0823 entry concerns the Linux kernel vulnerability in which pagemap_open (fs/proc/task_mmu.c) on kernels before 3.19.3, including Android 6.0.1 before 2016-03-01, can let a local user read pagemap data to obtain sensitive physical-address information. This is triggered by reading the...

CVE-2020-0241

CVE-2020-0241 is a Media Framework issue in Android (NuPlayerStreamListener.cpp) where a double free leads to memory corruption, enabling local privilege escalation with no user interaction. Affected: Android 8.0–10. Root cause: memory-management error in NuPlayerStreamListener. Impact: local ele...

CVE-2020-0458

CVE-2020-0458 affects the Android Media Framework, specifically the SPDIFEncoder.cpp path. The issue is a possible out-of-bounds write caused by an integer overflow in SPDIFEncoder::writeBurstBufferBytes and related methods, leading to remote code execution with no extra privileges. Public detail...

CVE-2021-0433

CVE-2021-0433 affects Android 8.1–11. The issue is a tapjacking/overlay bypass in DeviceChooserActivity.java that lets an attacker bypass the consent dialog when pairing a Bluetooth device, enabling local escalation of privilege and pairing with a malicious device without extra privileges. Exploi...