CVE-2023-40090

What’s affected: Google Android platform vulnerability CVE-2023-40090 in the Bluetooth stack, specifically BTM_BleVerifySignature in btm_ble.cc. The issue is described as bypassing signature validation via side-channel information disclosure, enabling remote escalation of privilege with no additi...

CVE-2024-0026

CVE-2024-0026 corresponds to a DoS in Android’s SnoozeHelper.java, causing a persistent denial of service through resource exhaustion. Affected component: Android framework/system code on Google Android. Impact: local DoS with no extra execution privileges and no user interaction required. Source...

CVE-2015-9546

CVE-2015-9546 affects Samsung mobile devices running KK(4.4) and later through 2015-06-16. The issue arises when HTTP is used for an Inputmethod instead of HTTPS, allowing a man-in-the-middle to modify the client–server data stream and insert directory traversal sequences into an extracted file p...

CVE-2018-9464

CVE-2018-9464 is an Elevation of Privilege in the Google Android Kernel (Taimen bootloader) identified across multiple trackers. The vulnerability arises from a missing permission check, enabling local access to read protected files and escalate privileges with no additional execution privileges ...

CVE-2019-1999

CVE-2019-1999 is evidenced in connected Nessus advisories for Unity Linux kernel updates (UTSA-2026-003839/004335/000386). The issue is in binder_alloc_free_page in binder_alloc.c, causing a possible double free due to improper locking. This can lead to local escalation of privilege in the kernel...

CVE-2020-0181

CVE-2020-0181 affects libexif: the DoS is due to an integer overflow in exif_data_load_data_thumbnail within exif-data.c. The Nessus/NVD data describe remote denial of service with network access and no user interaction. Multiple advisories (Unity Linux, MiracleLinux, SUSE, Red Hat) reference thi...

CVE-2020-0381

CVE-2020-0381 affects Android, with the vulnerability located in Media Framework (Parse_wave of eas_mdls.c). The issue is an out-of-bounds write caused by an integer overflow, enabling remote information disclosure in a highly constrained process without requiring user interaction. Affected Andro...

CVE-2021-0325

CVE-2021-0325 (Android Media Framework) : A remote code execution vulnerability exists due to an out-of-bounds write (heap buffer overflow) in ih264d_parse_pslice.c. It affects Android 8.1, 9, 10 and 11 and can be exploited with user interaction. CVSS v3 base score is 8.8 (HIGH) with NETWORK atta...

CVE-2021-0594

CVE-2021-0594 affects Android: In ConfirmConnectActivity.onCreate, there is a possible remote bypass of user consent due to improper input validation. This could lead to remote (proximal, NFC) escalation of privilege by deceiving a user into allowing a Bluetooth connection with no additional exec...

CVE-2021-0708

CVE-2021-0708 in Android is described as a local elevation-of-privilege flaw caused by a confused deputy in ActivityManagerShellCommand.java (runDumpHeap). The issue enables deletion of system files and privilege escalation without additional execution privileges, with no user interaction require...

CVE-2021-0959

CVE-2021-0959 is a local elevation-of-privilege vulnerability in Android 12 affecting jit_memory_region.cc. The flaw enables bypassing memory restrictions due to a logic error, allowing a local attacker to gain higher privileges without user interaction. Exploitation is described as requiring loc...

CVE-2021-39688

The CVE-2021-39688 entry concerns the Android kernel, with an out-of-bounds read vulnerability that could allow local information disclosure without requiring additional privileges and without user interaction. The affected area is described as Android kernel components, affecting Android-based d...

CVE-2022-20209

CVE-2022-20209 affects Android 12L in the hme_add_new_node_to_a_sorted_array function of hme_utils.c. The issue is an out-of-bounds read caused by a heap buffer overflow, enabling remote information disclosure without additional execution privileges. Exploitation is described as not requiring use...

CVE-2022-26098

CVE-2022-26098 is a heap-based buffer overflow in the libsimba library, specifically in the sheifd_create function, that allows remote code execution. The issue affects libsimba prior to the SMR Apr-2022 Release 1. The vulnerability’s impact is described as code execution with high severity, incl...

CVE-2022-32637

CVE-2022-32637 affects the hevc decoder (MediaTek components) with a missing bounds check causing an out-of-bounds write. This can enable local privilege escalation to System level with no user interaction required. The patch identified is ALPS07491374 (Issue ID ALPS07491374). Exploitation detail...

CVE-2023-20602

CVE-2023-20602 affects the MediaTek ged component in MediaTek devices. The issue is a vulnerability in ged caused by an integer overflow leading to an out-of-bounds write. This can enable local escalation of privilege with System execution privileges required; no user interaction is needed for ex...

CVE-2023-20652

CVE-2023-20652 is a MediaTek keyinstall vulnerability described as an out-of-bounds write caused by a missing bounds check. It allows local escalation to SYSTEM privileges with no user interaction required. Exploitation status is not detailed in the provided records, but NVD/Red Hat entries confi...

CVE-2023-20971

CVE-2023-20971 affects the Android Framework in PermissionManagerServiceImpl.java (removePermission) where a logic error could allow obtaining dangerous permissions without user consent, enabling local elevation of privilege with no extra execution privileges and no user interaction needed. The i...

CVE-2023-21087

CVE-2023-21087 affects Android 11–13, with the root cause described as an uncaught exception in PreferencesHelper.java that can cause a boot loop. The consequence is a local persistent DoS without requiring user interaction. Connected sources repeatedly reference the same underlying issue and not...

CVE-2023-21165

CVE-2023-21165 concerns a use-after-free in the DevmemIntUnmapPMR function of devicemem_server.c, leading to possible arbitrary code execution and local privilege escalation in the kernel. Multiple connected sources corroborate the issue and its kernel-level impact, with the vulnerability enablin...

CVE-2023-21246

CVE-2023-21246 affects Android’s ShortcutInfo.java. The issue: an uncaught exception could allow an app to retain notification listening access, enabling local elevation of privilege with no extra execution privileges and no user interaction required. Public details in NVD/NVD-linked entries conf...

CVE-2023-32832

CVE-2023-32832 describes a local race condition in the Mediatek mtk_jpeg (MediaTek JPEG decoding) driver used on MTK-based Android devices (e.g., Xiaomi 11T and Asus ROG 6D). The vulnerability arises during memory/ DMA buffer handling in the JPEG hybrid decoding path, enabling a race between jpeg...

CVE-2023-40078

CVE-2023-40078 describes a possible out-of-bounds write caused by a heap buffer overflow in the Android a2dp_vendor_opus_decoder_decode_packet function. This can enable paired-device escalation of privilege without user interaction. Affected context is the A2DP Opus decoder path in Android Blueto...

CVE-2023-40136

The CVE-2023-40136 entry corresponds to a local information disclosure in Android via DialogFillUi.java setHeader, caused by a confused deputy that allows viewing another user’s images without extra privileges or user interaction. Connected sources (including PT-Security PT-2023-27288 and Android...

CVE-2023-48409

Summary: CVE-2023-48409 affects the Mali KBase GPU kernel module on Google Pixel devices. The vulnerability is described as a possible out-of-bounds write triggered by an integer overflow in the function gpu_pixel_handle_buffer_liveness_update_ioctl within private/google-modules/gpu/mali_kbase/ma...

CVE-2024-20023

CVE-2024-20023 concerns the MediaTek/flashc component, where an out-of-bounds write can occur due to lack of validation. This could permit local escalation to SYSTEM privileges without user interaction. The issue is documented across several sources (e.g., NVD/Red Hat/NCSC etc.) and is associated...

CVE-2024-27228

CVE-2024-27228 is a remote code execution in Google's Pixel MFC component caused by a heap buffer overflow/out-of-bounds write. The issue requires no user interaction and can be triggered over the network. Pixel Update Bulletin lists this CVE as Critical (RCE) with affected Pixel devices; remedia...

CVE-2019-1985

CVE-2019-1985 affects Android Framework: In TextServicesManagerService.findAvailSpellCheckerLocked, there is a permissions bypass that can bypass the warning dialog when selecting an untrusted spell checker. This could allow local elevation of privilege with no additional privileges and without u...

CVE-2020-0066

The CVE-2020-0066 entry describes a race-condition in the Android kernel netlink driver enabling a local out-of-bounds write, leading to local privilege escalation to SYSTEM. Exploit requires local access; user interaction is not needed. The issue is tied to the netlink path and affects Android k...

CVE-2021-0513

CVE-2021-0513 concerns an elevation-of-privilege via the Android NotificationManagerService.java layer. The issue is described as a permission bypass caused by improper state validation in deleteNotificationChannel and related functions, enabling local escalation of privilege to hidden services w...

CVE-2021-0576

CVE-2021-0576 is described as an out-of-bounds write in the Android flv extractor caused by a missing bounds check, allowing local elevation of privilege with no user interaction. The issue affects Android’s flv extractor component; exploitation is local and could impact devices where the vulnera...

CVE-2021-0653

Technical details for CVE-2021-0653 are not publicly provided in the connected documents. The initial description notes a local information disclosure due to a missing permission check in NetworkPolicyManagerService. Monitor for official advisories and patches.

CVE-2021-0684

CVE-2021-0684 is an Android local privilege escalation affecting Android 8.1, 9, 10, and 11. The issue is described as an out-of-bounds write caused by a use-after-free in TouchInputMapper::sync, enabling a local attacker to escalate privileges without user interaction. Exploitation, if any, is n...

CVE-2021-0947

CVE-2021-0947 involves a kernel information disclosure in Android's graphics stack. The method PVRSRVBridgeTLDiscoverStreams allocates a heap buffer for streams, fills it via TLServerDiscoverStreamsKM, then copies it to userspace. If TLServerDiscoverStreamsKM fails (e.g., due to invalid sizes), t...

CVE-2021-0956

CVE-2021-0956 affects Android by a flaw in NfcTag::discoverTechnologies (activation) in NfcTag.cpp, where an incorrect bounds check allows an out-of-bounds write. This could enable remote elevation of privilege with no user interaction, impacting Android 11 and 12. The issue is listed in Android’...

CVE-2021-0964

CVE-2021-0964 is an out-of-bounds write in the MP3 decoding path: in C2SoftMP3Dec.cpp, C2SoftMP3::process() a heap buffer overflow can lead to remote information disclosure without extra privileges. Affected Android versions: 9–12. Exploitation requires user interaction. References note this vuln...

CVE-2021-39723

CVE-2021-39723 affects Google Pixel devices and is listed in the Pixel March 2022 bulletin as a Critical RCE in the Modem component. Patch levels 2022-03-05 address issues in that bulletin. The provided documents do not include public exploit details or specific root-cause/affected kernel version...

CVE-2022-20431

CVE-2022-20431 describes a local elevation of privilege in Android due to a missing authorization check in a system service. The issue affects Android devices (specific component not publicly named in the documents) and is exploited locally with high impact (confidentiality, integrity, and availa...

CVE-2022-21764

CVE-2022-21764 concerns a vulnerability in the telecom service where a missing permission check can lead to local information disclosure. The underlying issue is an inadequate access control in the telecom subsystem, allowing an attacker with local access to read sensitive data without executing ...

CVE-2022-22291

Technical details about CVE-2022-22291 are not publicly provided in the connected documents. Available sources summarize a logging-related information disclosure in Samsung telephony, but do not specify affected versions, root cause, exploit details, or patches; monitor for updates.

CVE-2023-35666

This CVE (CVE-2023-35666) affects the Android Bluetooth stack: specifically in the bta_av_rc_msg handling within bta_av_act.cc. The vulnerability is a use-after-free caused by a logic error, leading to local elevation of privilege without requiring user interaction. The exploitation is categorize...

CVE-2023-40075

CVE-2023-40075 affects Android and is caused by a missing bounds check in the forceReplaceShortcutInner method of ShortcutPackage.java, allowing registration of unlimited packages. This leads to a local denial-of-service condition and a boot loop, with no additional execution privileges required....

CVE-2024-27220

CVE-2024-27220 affects Google Pixel/Android components; in lpm_req_handler (TBD module), a missing bounds check allows out-of-bounds memory access. This leads to local escalation of privilege with no user interaction required. The issue is classified as Elevation of Privilege (EoP) and appears in...

CVE-2024-31315

In Android, CVE-2024-31315 affects the ManagedServices.java implementation, where improper input validation in multiple functions could enable hiding an app with notification access via the Device & app notifications settings. The vulnerability is described as enabling local elevation of privileg...

CVE-2024-34739

CVE-2024-34739 concerns a logic error in shouldRestrictOverlayActivities within UsbProfileGroupSettingsManager.java, potentially allowing local escalation of privilege in Android’s framework. The vulnerability description is consistent across multiple sources (NVD, Red Hat advisory, CNVD, OSV, et...

CVE-2025-20657

CVE-2025-20657 relates to MediaTek MediaTek vdec with a permission bypass caused by improper input validation. The issue could enable local escalation of privilege if an attacker already has SYSTEM privileges; exploitation reportedly does not require user interaction. Connected sources (RH, NVD, ...

CVE-2016-5344

CVE-2016-5344 affects the MDSS driver in the Linux kernel 3.x, used in Qualcomm QuIC Android MSM contributions. The root cause is multiple integer overflows triggered by large size values in mdss_compat_utils.c, mdss_fb.c, and mdss_rotator.c, potentially causing denial of service and possibly oth...

CVE-2020-0459

The CVE-2020-0459 issue affects Android’s WifiConfigManager.java (sendConfiguredNetworkChangedBroadcast) and is an information-disclosure flaw caused by a missing permission check. It allows local disclosure of WiFi network names without extra execution privileges, with no user interaction requir...

CVE-2020-0467

CVE-2020-0467 concerns a logic issue in Vpn.java (onUserStopped) on Android where user preferences could be reset, potentially causing local information disclosure of secure network traffic when not on VPN. Affected platforms include Android 8.1, 9, 10 and 11. Exploitation is described as requiri...

CVE-2021-0301

CVE-2021-0301 affects the Android ged component. The root cause is a missing bounds check that allows an out-of-bounds write, leading to local escalation of privilege with System-level execution privileges required. Exploitation does not require user interaction. Multiple connected sources (NVD, ...