CVE-2024-20022

CVE-2024-20022 describes a missing bounds check in the lk module that could allow local escalation of privilege to SYSTEM-level execution. The issue is triggered locally (no user interaction required) and is corroborated across multiple connected sources (e.g., Red Hat advisory and other feeds) w...

CVE-2021-0510

CVE-2021-0510 affects Android's CryptoPlugin.cpp (decrypt_1_2) where an integer overflow can cause an out-of-bounds write. This is described as enabling local privilege escalation with no user interaction. Affected Android versions per the entry are Android 8.1, 9, 10, and 11 (Android-8.1, Androi...

CVE-2021-0953

CVE-2021-0953 affects Android 9–12. The issue is in SearchWidgetProvider.setOnClickActivityIntent, where an unsafe PendingIntent could allow access to contacts and history bookmarks without permission, enabling local privilege escalation with no user interaction required. Android patch levels 202...

CVE-2021-0959

CVE-2021-0959 is a local elevation-of-privilege vulnerability in Android 12 affecting jit_memory_region.cc. The flaw enables bypassing memory restrictions due to a logic error, allowing a local attacker to gain higher privileges without user interaction. Exploitation is described as requiring loc...

CVE-2021-39625

CVE-2021-39625 affects Android (versions 9–12) and is tied to EuiccNotificationManager.java in showCarrierAppInstallationNotification, where an unsafe PendingIntent could allow a local attacker to access MediaProvider content and escalate privileges. The underlying issue is a local elevation of p...

CVE-2021-39688

The CVE-2021-39688 entry concerns the Android kernel, with an out-of-bounds read vulnerability that could allow local information disclosure without requiring additional privileges and without user interaction. The affected area is described as Android kernel components, affecting Android-based d...

CVE-2022-20417

CVE-2022-20417 describes an out-of-bounds write in the Android framework: in audioTransportsToHal of HidlUtils.cpp, caused by an incorrect bounds check, enabling local elevation of privilege with no user interaction. Affected: Android 12, 12L, and 13. The connected documents do not provide a conc...

CVE-2022-32637

CVE-2022-32637 affects the hevc decoder (MediaTek components) with a missing bounds check causing an out-of-bounds write. This can enable local privilege escalation to System level with no user interaction required. The patch identified is ALPS07491374 (Issue ID ALPS07491374). Exploitation detail...

CVE-2023-20602

CVE-2023-20602 affects the MediaTek ged component in MediaTek devices. The issue is a vulnerability in ged caused by an integer overflow leading to an out-of-bounds write. This can enable local escalation of privilege with System execution privileges required; no user interaction is needed for ex...

CVE-2023-20993

CVE-2023-20993 affects Android 11–13 via SnoozeHelper.java, where an uncaught exception can cause a failure to persist settings, enabling local elevation of privilege with no extra execution privileges and no user interaction required. The vulnerability is documented across multiple sources (NVD,...

CVE-2023-21084

CVE-2023-21084 affects Android 13, with the flaw in the buildPropFile of filesystem.go caused by an insecure hash from improper crypto usage. The impact is local elevation of privilege (EoP) with system-level execution privileges required and no user interaction. Public details in the provided do...

CVE-2023-21144

The CVE-2023-21144 entry affects Android 11–13 and involves a DoInBackground() path in NotificationContentInflater.java. The vulnerability is a temporary denial of service caused by long-running operations, enabling remote DoS without extra privileges or user interaction. The Red Hat/CNVD/PRION/N...

CVE-2023-21351

CVE-2023-21351 affects Google Android (Framework) and is described as a local elevation-of-privilege vulnerability caused by a logic error that can trigger a background activity launch. The issue can be exploited without user interaction and could compromise confidentiality, integrity, and availa...

CVE-2023-21401

CVE-2023-21401 : Concrete details across connected docs show an out-of-bounds write in the Linux kernel component DevmemIntChangeSparse within devicemem_server.c caused by an integer overflow. This can enable local escalation of privilege with no extra execution privileges or user interaction req...

CVE-2024-34741

The CVE-2024-34741 issue concerns Android’s WindowState.java function setForceHideNonSystemOverlayWindowIfNeeded. A logic error could allow message content to be visible on the screensaver when lock-screen visibility is restricted, enabling local elevation of privilege with no extra execution pri...

CVE-2024-39431

The CVE-2024-39431 issue affects Unisoc chipsets’ UMTS RLC driver, where a missing bounds check can cause an out-of-bounds write. This can lead to remote denial of service with system privileges. Public references confirm the vulnerable component as the UMTS RLC driver and describe the exploit su...

CVE-2024-43077

CVE-2024-43077 : Affects Google Android via the DevmemValidateFlags function in devicemem_server.c. The vulnerability is described as an out-of-bounds write caused by memory corruption, enabling local escalation of privilege with no additional execution privileges and no user interaction required...

CVE-2025-20655

CVE-2025-20655 concerns a missing bounds check in keymaster that enables a possible out-of-bounds read and local information disclosure when the attacker already has System privileges. According to public descriptions, the vulnerability is exploitable without user interaction and is classified wi...

CVE-2020-0066

The CVE-2020-0066 entry describes a race-condition in the Android kernel netlink driver enabling a local out-of-bounds write, leading to local privilege escalation to SYSTEM. Exploit requires local access; user interaction is not needed. The issue is tied to the netlink path and affects Android k...

CVE-2020-0383

CVE-2020-0383 affects Android Media Framework (Parse_ins in eas_mdls.c). The issue is an out-of-bounds write due to a missing bounds check, enabling remote information disclosure in the media extractor process with no extra execution privileges required. Impact is shown as partial confidentiality...

CVE-2020-0398

CVE-2020-0398 affects Android 10 and 11, relating to updateMwi in NotificationMgr.java. A PendingIntent error allows a permission bypass that could cause local information disclosure without user interaction; exploitation requires User execution privileges but not explicit user action. Affected c...

CVE-2020-0471

CVE-2020-0471 in Android concerns a flaw in reassemble_and_dispatch of packet_fragmenter.cc that could allow injecting packets into an encrypted Bluetooth connection due to improper input validation. This enables remote escalation of privilege between two Bluetooth devices by a proximal attacker ...

CVE-2021-0684

CVE-2021-0684 is an Android local privilege escalation affecting Android 8.1, 9, 10, and 11. The issue is described as an out-of-bounds write caused by a use-after-free in TouchInputMapper::sync, enabling a local attacker to escalate privileges without user interaction. Exploitation, if any, is n...

CVE-2021-39717

CVE-2021-39717 affects the Android kernel component iaxxx-btp.c (function iaxxx_btp_write_words). The issue is an out-of-bounds read caused by an incorrect bounds check, leading to local information disclosure with System privileges required. No exploitation details or user interaction informatio...

CVE-2023-40079

CVE-2023-40079 affects Android frameworks (ShortcutService.java: injectSendIntentSender) where a permissions bypass may allow a background activity launch, leading to local privilege escalation without user interaction. The issue is documented as an Elevation of Privilege (EoP) with high impact. ...

CVE-2023-40097

CVE-2023-40097 affects Android’s PackageManagerHelper.hasPermissionForActivity inside the framework. The flaw is an input-validation issue that can allow a URI grant, causing local elevation of privilege with no extra execution privileges required; exploitation requires user interaction. The publ...

CVE-2024-20024

CVE-2024-20024 concerns the MediaTek flashc module where an out-of-bounds write arises from insufficient input validation. The vulnerability can enable local escalation of privilege to System execution privileges without user interaction. Public documentation consistently lists the issue as affec...

CVE-2024-25991

CVE-2024-25991 affects Google/Pixel devices and relates to the ACPM/TMU component. The root cause is a missing bounds check in the function acpm_tmu_ipc_handler within tmu_plugin.c, leading to a possible out-of-bounds read. Impact is information disclosure localized to the attacker’s host with no...

CVE-2024-27228

CVE-2024-27228 is a remote code execution in Google's Pixel MFC component caused by a heap buffer overflow/out-of-bounds write. The issue requires no user interaction and can be triggered over the network. Pixel Update Bulletin lists this CVE as Critical (RCE) with affected Pixel devices; remedia...

CVE-2024-34722

CVE-2024-34722 is an Android BLE legacy-pairing authentication bypass caused by an incorrect protocol implementation in smp_proc_rand of smp_act.cc. The issue enables remote elevation of privilege with no extra privileges or user interaction, as described across multiple sources (NVD, Red Hat CVE...

CVE-2024-34739

CVE-2024-34739 concerns a logic error in shouldRestrictOverlayActivities within UsbProfileGroupSettingsManager.java, potentially allowing local escalation of privilege in Android’s framework. The vulnerability description is consistent across multiple sources (NVD, Red Hat advisory, CNVD, OSV, et...

CVE-2024-40658

CVE-2024-40658 affects the Android Framework: the vulnerability is in getConfig of SoftVideoDecoderOMXComponent.cpp, causing a heap buffer overflow that can produce an out-of-bounds write. Impact is local escalation of privilege with no additional execution privileges or user interaction required...

CVE-2019-1999

CVE-2019-1999 is evidenced in connected Nessus advisories for Unity Linux kernel updates (UTSA-2026-003839/004335/000386). The issue is in binder_alloc_free_page in binder_alloc.c, causing a possible double free due to improper locking. This can lead to local escalation of privilege in the kernel...

CVE-2020-0409

CVE-2020-0409 affects Android (Android-8.0/8.1/9/10). The issue is an out-of-bounds write in FileMap.cpp caused by an integer overflow in create(), enabling local elevation of privilege with no user interaction. In the public docs, severity is high for local access with partial confidentiality/ i...

CVE-2021-0301

CVE-2021-0301 affects the Android ged component. The root cause is a missing bounds check that allows an out-of-bounds write, leading to local escalation of privilege with System-level execution privileges required. Exploitation does not require user interaction. Multiple connected sources (NVD, ...

CVE-2021-0576

CVE-2021-0576 is described as an out-of-bounds write in the Android flv extractor caused by a missing bounds check, allowing local elevation of privilege with no user interaction. The issue affects Android’s flv extractor component; exploitation is local and could impact devices where the vulnera...

CVE-2021-0579

CVE-2021-0579 affects the Android WiFi driver. The issue is an out‑of‑bounds read caused by a missing bounds check, enabling remote information disclosure to a proximal attacker with no additional privileges and no user interaction required. This is the concrete vulnerability detail reported acro...

CVE-2021-0594

CVE-2021-0594 affects Android: In ConfirmConnectActivity.onCreate, there is a possible remote bypass of user consent due to improper input validation. This could lead to remote (proximal, NFC) escalation of privilege by deceiving a user into allowing a Bluetooth connection with no additional exec...

CVE-2021-0599

CVE-2021-0599 : Android information disclosure in NotificationRecord.scheduleTimeoutLocked. Affected: Android 8.1, 9, 10, 11. Root cause: broadcasted intent leaks a sensitive identifier due to a confused deputy, enabling local information disclosure without extra privileges or user interaction. I...

CVE-2021-0639

CVE-2021-0639 affects Android/Widevine through libl3oemcrypto.cpp. Described as a local information disclosure due to weaknesses in the obfuscation/handling of sensitive data; requires no user interaction. Documented impact is partial confidentiality loss with local access and no privileges beyon...

CVE-2021-0653

Technical details for CVE-2021-0653 are not publicly provided in the connected documents. The initial description notes a local information disclosure due to a missing permission check in NetworkPolicyManagerService. Monitor for official advisories and patches.

CVE-2021-0708

CVE-2021-0708 in Android is described as a local elevation-of-privilege flaw caused by a confused deputy in ActivityManagerShellCommand.java (runDumpHeap). The issue enables deletion of system files and privilege escalation without additional execution privileges, with no user interaction require...

CVE-2021-0965

CVE-2021-0965 affects Android devices via a missing permission check in AndroidManifest.xml under Settings, enabling pairing of a Bluetooth device without user consent. This is described as a local elevation of privilege with no extra execution privileges required, and no user interaction is need...

CVE-2021-39723

CVE-2021-39723 affects Google Pixel devices and is listed in the Pixel March 2022 bulletin as a Critical RCE in the Modem component. Patch levels 2022-03-05 address issues in that bulletin. The provided documents do not include public exploit details or specific root-cause/affected kernel version...

CVE-2022-20118

CVE-2022-20118 affects the Android kernel ion.c, specifically in ion_ioctl and related functions, where a race condition can trigger a use-after-free. This leads to local privilege escalation without extra execution privileges or user interaction. Documented impact appears as EoP with local acces...

CVE-2022-20153

Summary (CVE-2022-20153) In the Android kernel, the vulnerability occurs in the function rcu_cblist_dequeue of rcu_segcblist.c , where improper locking can cause a use-after-free. This can enable local escalation of privilege with SYSTEM execution privileges required, and exploitation does not re...

CVE-2022-21764

CVE-2022-21764 concerns a vulnerability in the telecom service where a missing permission check can lead to local information disclosure. The underlying issue is an inadequate access control in the telecom subsystem, allowing an attacker with local access to read sensitive data without executing ...

CVE-2022-32636

The CVE-2022-32636 issue, attributed to MediaTek’s keyinstall, is a local-privilege-escalation vulnerability caused by an integer overflow that leads to an out-of-bounds write. Exploitation is described as requiring local access with no user interaction. The vulnerability affects MediaTek’s keyin...

CVE-2023-21101

CVE-2023-21101 concerns a race condition in WVDrmPlugin.cpp that leads to a use-after-free, enabling local escalation of privilege. The vulnerability is described as requiring no user interaction and enabling exploitation locally, with the Android Widevine DRM component implicated. The linked doc...

CVE-2023-35665

CVE-2023-35665 describes a local elevation-of-privilege in Android where a missing permission check across multiple files allows importing a contact from another user. The issue enables privilege escalation without additional execution privileges and without user interaction. The connected source...