CVE-2024-34741

The CVE-2024-34741 issue concerns Android’s WindowState.java function setForceHideNonSystemOverlayWindowIfNeeded. A logic error could allow message content to be visible on the screensaver when lock-screen visibility is restricted, enabling local elevation of privilege with no extra execution pri...

CVE-2023-21101

CVE-2023-21101 concerns a race condition in WVDrmPlugin.cpp that leads to a use-after-free, enabling local escalation of privilege. The vulnerability is described as requiring no user interaction and enabling exploitation locally, with the Android Widevine DRM component implicated. The linked doc...

CVE-2023-21246

CVE-2023-21246 affects Android’s ShortcutInfo.java. The issue: an uncaught exception could allow an app to retain notification listening access, enabling local elevation of privilege with no extra execution privileges and no user interaction required. Public details in NVD/NVD-linked entries conf...

CVE-2023-21271

CVE-2023-21271 : In the parseInputs function of ShimPreparedModel.cpp, there is an out-of-bounds read due to improper input validation, potentially enabling local information disclosure without user interaction. This is a local information disclosure vulnerability with high confidentiality impact...

CVE-2023-21280

The CVE-2023-21280 issue affects Android’s MediaSessionRecord.java in setMediaButtonBroadcastReceiver, causing a possible permanent DoS via resource exhaustion. Exploitation requires local access (AV:L, PR:L) with no user interaction, and no additional privileges are needed. The initial entry and...

CVE-2023-35664

CVE-2023-35664 corresponds to an information-disclosure flaw in Android related to an out-of-bounds read in the ShimConverter.cpp function convertSubgraphFromHAL. The issue arises from a missing bounds check, enabling a local attacker to read sensitive information without additional execution pri...

CVE-2023-48409

Summary: CVE-2023-48409 affects the Mali KBase GPU kernel module on Google Pixel devices. The vulnerability is described as a possible out-of-bounds write triggered by an integer overflow in the function gpu_pixel_handle_buffer_liveness_update_ioctl within private/google-modules/gpu/mali_kbase/ma...

CVE-2024-0026

CVE-2024-0026 corresponds to a DoS in Android’s SnoozeHelper.java, causing a persistent denial of service through resource exhaustion. Affected component: Android framework/system code on Google Android. Impact: local DoS with no extra execution privileges and no user interaction required. Source...

CVE-2024-31319

CVE-2024-31319 affects Android Framework (NotificationManagerService.java). A cross-user data leak caused by a confused deputy could lead to local escalation of privilege with no extra execution privileges required. Exploitation is described as local and independent of user interaction. Public de...

CVE-2024-43085

The CVE-2024-43085 entry concerns Android’s UsbDeviceManager.java: In handleMessage a logic error could allow local privilege escalation by reading device contents over USB without unlocking, with no user interaction required. Affected component is the Android USB subsystem; impact is local eleva...

CVE-2018-9489

CVE-2018-9489 affects Android where, upon wifi state changes, WifiStateMachine.sendNetworkStateChangeBroadcast broadcasts an intent that includes detailed wifi network information. The root cause is information disclosure via system broadcasts that do not require execution privileges or user inte...

CVE-2019-2185

CVE-2019-2185: Out-of-bounds write in VlcDequantH263IntraBlock_SH (vlc_dequant.cpp) can lead to remote code execution. Affected Android versions include 7.1.1, 7.1.2, 8.0, 8.1, 9, 10; vulnerability located in Android Media framework. Exploitation requires user interaction. Remediation is provided...

CVE-2020-0122

CVE-2020-0122 affects Android where the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml can bypass permissions, enabling local elevation of privilege with System execution privileges and no user interaction required. Impact is describe...

CVE-2020-0408

CVE-2020-0408: A local EoP in Android’s runtime due to an out-of-bounds write caused by an integer overflow in String16.cpp. Affected: Android versions 8.0–11 (Android Runtime component). Exploitation would require local access with no user interaction; impact is potentially arbitrary code execut...

CVE-2021-0332

CVE-2021-0332 affects Android’s Media/Graphics stack (SurfaceFlinger) where a use-after-free in bootFinished can cause memory corruption, enabling local privilege escalation with low complexity and no user interaction. Affected: Android 10 and 11. Root cause: memory corruption via use-after-free ...

CVE-2021-0352

CVE-2021-0352 affects Android (Android-10/Android-11) via memory corruption in the RT regmap driver caused by a type confusion. This can lead to local denial of service with system execution privileges, and exploitation requires no user interaction. The patch referenced is ALPS05453809. The vulne...

CVE-2022-20225

CVE-2022-20225 is an Android information-disclosure vulnerability in getSubscriptionProperty() of SubscriptionController.java caused by a missing permission check. The issue could allow a local attacker to read a sensitive identifier without user interaction. Affected Android versions listed in t...

CVE-2022-32602

CVE-2022-32602 is described as an out-of-bounds read in the Mediatek keyinstall component caused by a missing bounds check. This could lead to local information disclosure with no authentication or user interaction required. The CVSS data indicates a LOCAL attack vector, LOW privileges, and HIGH ...

CVE-2023-20940

Summary: CVE-2023-20940 affects Android 13. A vulnerability in the boot partition handling caused by improper use of crypto allows local escalation of privilege without user interaction. The issue’s impact is described as high (EoP) with CVSSv3.1 metrics showing attack vector LOCAL, privileges re...

CVE-2023-21144

The CVE-2023-21144 entry affects Android 11–13 and involves a DoInBackground() path in NotificationContentInflater.java. The vulnerability is a temporary denial of service caused by long-running operations, enabling remote DoS without extra privileges or user interaction. The Red Hat/CNVD/PRION/N...

CVE-2023-21257

CVE-2023-21257 is an Android Framework elevation-of-privilege issue. In the function updateSettingsInternalLI of InstallPackageHelper.java , a missing permission check could allow sideloading an app into the work profile, enabling local privilege escalation with no extra execution privileges requ...

CVE-2023-21283

CVE-2023-21283 affects Google Android (StatusHints.java) and describes a local information disclosure via a confused deputy vulnerability. The issue allows revealing images across users and requires user interaction to exploit; no additional execution privileges are stated. The available connecte...

CVE-2023-35677

CVE-2023-35677 describes a DoS vulnerability in Android where, in the onCreate path of DeviceAdminAdd.java, a missing permission check could allow a device admin to be forcibly added. This enables local denial of service (factory reset or persistent locking) without extra execution privileges and...

CVE-2023-40075

CVE-2023-40075 affects Android and is caused by a missing bounds check in the forceReplaceShortcutInner method of ShortcutPackage.java, allowing registration of unlimited packages. This leads to a local denial-of-service condition and a boot loop, with no additional execution privileges required....

CVE-2023-40095

CVE-2023-40095 describes a likely local elevation of privilege in Android Framework due to a missing check in PendingIntentUtils.createDontSendToRestrictedAppsBundle. Exploitation does not require user interaction and could enable background activity launches on affected devices. Connected source...

CVE-2023-45774

CVE-2023-45774 affects the Android Shortcuts framework: In fixUpIncomingShortcutInfo of ShortcutService.java, an attacker could view another user’s image due to a confused deputy, enabling local elevation of privilege with no user interaction. Exploitation status is not detailed in the provided d...

CVE-2024-20023

A vulnerability exists in the flashc component of MediaTek hardware due to a lack of validation, leading to a possible out-of-bounds write . An attacker with System execution privileges could exploit this flaw to achieve a local escalation of privilege . No user interaction is required for exploi...

CVE-2024-31335

The CVE-2024-31335 entry concerns a logic error in DevmemIntChangeSparse2 within devicemem_server.c that can enable arbitrary code execution with local privilege elevation in the kernel. Connected sources indicate affected components include Android’s kernel-related stack and PowerVR-GPU subcompo...

CVE-2024-34723

Summary: CVE-2024-34723 describes a logic error in Android’s ParcelableListBinder.java (onTransact) that could enable local elevation of privilege by stealing the mAllowlistToken to launch an app from the background, without extra privileges or user interaction. The vulnerability is tied to how P...

CVE-2020-0398

CVE-2020-0398 affects Android 10 and 11, relating to updateMwi in NotificationMgr.java. A PendingIntent error allows a permission bypass that could cause local information disclosure without user interaction; exploitation requires User execution privileges but not explicit user action. Affected c...

CVE-2021-0312

CVE-2021-0312 involves WAVSource::read in WAVExtractor.cpp. Root cause: integer overflow causing an out-of-bounds write. Impact: remote information disclosure without extra execution privileges; requires user interaction to exploit. Affected Android versions: 8.0–11 (Android 8.0, 8.1, 9, 10, 11)....

CVE-2021-0325

CVE-2021-0325 (Android Media Framework) : A remote code execution vulnerability exists due to an out-of-bounds write (heap buffer overflow) in ih264d_parse_pslice.c. It affects Android 8.1, 9, 10 and 11 and can be exploited with user interaction. CVSS v3 base score is 8.8 (HIGH) with NETWORK atta...

CVE-2021-0511

CVE-2021-0511 affects Android Dex2oat (dex2oat.cc) with an input-validation flaw that could inject bytecode into an app, enabling local privilege escalation without user interaction. Affected Android versions: 9, 10, 11. CVSS v3 base score 7.8 (local, low attack complexity, high impact). No remed...

CVE-2022-20106

The CVE-2022-20106 entry concerns the MM service, with a heap-based buffer overflow causing an out-of-bounds write that could enable local privilege escalation to SYSTEM. Exploit details or in-the-wild activity are not provided in the documents. No user interaction is required. Remediation refere...

CVE-2022-20153

Summary (CVE-2022-20153) In the Android kernel, the vulnerability occurs in the function rcu_cblist_dequeue of rcu_segcblist.c , where improper locking can cause a use-after-free. This can enable local escalation of privilege with SYSTEM execution privileges required, and exploitation does not re...

CVE-2022-20416

CVE-2022-20416 involves a bounds-check error in the audioTransportsToHal function of HidlUtils.cpp, causing a possible out-of-bounds write. Affected: Android 12, 12L, 13. Impact: local elevation of privilege with high severity; no user interaction required. Root cause: incorrect bounds check lead...

CVE-2022-20432

CVE-2022-20432 is documented in multiple feeds with concrete technical details: it targets UNISOC components in the Android Telephony stack, where a missing authorization check in a system service leads to Local Elevation of Privilege. The UNISOC entry places the vulnerability under Telephony wit...

CVE-2022-47335

CVE-2022-47335 is described across multiple sources as a vulnerability in Android Unisoc components, with the root cause being a missing permission check in the telecom service. This could allow a local attacker with low privileges and no user interaction to induce a denial of service on the affe...

CVE-2022-47460

CVE-2022-47460 describes a memory corruption via a use-after-free in the GPU device that can lead to local denial of service in the kernel. The connected records corroborate a kernel-level use-after-free affecting GPU-related paths and kernel space, with the impact explicitly stated as local DoS....

CVE-2023-20602

CVE-2023-20602 affects the MediaTek ged component in MediaTek devices. The issue is a vulnerability in ged caused by an integer overflow leading to an out-of-bounds write. This can enable local escalation of privilege with System execution privileges required; no user interaction is needed for ex...

CVE-2023-40090

What’s affected: Google Android platform vulnerability CVE-2023-40090 in the Bluetooth stack, specifically BTM_BleVerifySignature in btm_ble.cc. The issue is described as bypassing signature validation via side-channel information disclosure, enabling remote escalation of privilege with no additi...

CVE-2023-40136

The CVE-2023-40136 entry corresponds to a local information disclosure in Android via DialogFillUi.java setHeader, caused by a confused deputy that allows viewing another user’s images without extra privileges or user interaction. Connected sources (including PT-Security PT-2023-27288 and Android...

CVE-2024-25990

A race condition in the pktproc_perftest_gen_rx_packet_sktbuf_mode function of link_rx_pktproc.c can lead to an out of bounds write . This vulnerability may result in a local escalation of privilege , requiring System execution privileges for exploitation. No user interaction is required. While s...

CVE-2024-27228

A heap buffer overflow in the MFC media component of the Android operating system allows for an out-of-bounds write due to insufficient checking of input data. A remote attacker can exploit this vulnerability to achieve remote code execution without requiring additional execution privileges or us...

CVE-2024-27236

A type confusion vulnerability exists in the aoc_unlocked_ioctl method of the aoc.c file within Google Pixel smartphones. This flaw can lead to memory corruption , potentially allowing for local escalation of privilege without requiring additional execution privileges or user interaction. While t...

CVE-2024-31323

CVE-2024-31323 is an Android local elevation-of-privilege vulnerability in the onCreate path of the HealthFitness module (HealthFitness) that could trick a user into granting health permissions via tapjacking, requiring no user interaction for exploitation. The issue is mapped to the Healthfitnes...

CVE-2025-20636

CVE-2025-20636 involves MediaTek MT8798 secmem module where a missing bounds check can cause an out-of-bounds write. This could enable local privilege escalation if an attacker already has System privileges, with no user interaction required. The available references list a patch: ALPS09403554 (M...

CVE-2019-1985

CVE-2019-1985 affects Android Framework: In TextServicesManagerService.findAvailSpellCheckerLocked, there is a permissions bypass that can bypass the warning dialog when selecting an untrusted spell checker. This could allow local elevation of privilege with no additional privileges and without u...

CVE-2020-0245

CVE-2020-0245 is a Media Framework issue in Android (DecodeFrameCombinedMode in combined_decode.cpp) causing a heap-based out-of-bounds write that could disclose information remotely. Affected Android versions include 8.0, 8.1, 9, 10, and 11. The CVSS vectors indicate high severity with network a...

CVE-2020-0383

CVE-2020-0383 affects Android Media Framework (Parse_ins in eas_mdls.c). The issue is an out-of-bounds write due to a missing bounds check, enabling remote information disclosure in the media extractor process with no extra execution privileges required. Impact is shown as partial confidentiality...