CVE-2023-35666

This CVE (CVE-2023-35666) affects the Android Bluetooth stack: specifically in the bta_av_rc_msg handling within bta_av_act.cc. The vulnerability is a use-after-free caused by a logic error, leading to local elevation of privilege without requiring user interaction. The exploitation is categorize...

CVE-2023-40078

CVE-2023-40078 describes a possible out-of-bounds write caused by a heap buffer overflow in the Android a2dp_vendor_opus_decoder_decode_packet function. This can enable paired-device escalation of privilege without user interaction. Affected context is the A2DP Opus decoder path in Android Blueto...

CVE-2023-40095

CVE-2023-40095 describes a likely local elevation of privilege in Android Framework due to a missing check in PendingIntentUtils.createDontSendToRestrictedAppsBundle. Exploitation does not require user interaction and could enable background activity launches on affected devices. Connected source...

CVE-2024-0026

CVE-2024-0026 corresponds to a DoS in Android’s SnoozeHelper.java, causing a persistent denial of service through resource exhaustion. Affected component: Android framework/system code on Google Android. Impact: local DoS with no extra execution privileges and no user interaction required. Source...

CVE-2024-31315

In Android, CVE-2024-31315 affects the ManagedServices.java implementation, where improper input validation in multiple functions could enable hiding an app with notification access via the Device & app notifications settings. The vulnerability is described as enabling local elevation of privileg...

CVE-2024-40656

In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a potential information disclosure across users due to a confused deputy. This could cause local information disclosure without requiring additional execution privileges, and exploitation requires user interaction. The v...

CVE-2016-5344

CVE-2016-5344 affects the MDSS driver in the Linux kernel 3.x, used in Qualcomm QuIC Android MSM contributions. The root cause is multiple integer overflows triggered by large size values in mdss_compat_utils.c, mdss_fb.c, and mdss_rotator.c, potentially causing denial of service and possibly oth...

CVE-2019-1985

CVE-2019-1985 affects Android Framework: In TextServicesManagerService.findAvailSpellCheckerLocked, there is a permissions bypass that can bypass the warning dialog when selecting an untrusted spell checker. This could allow local elevation of privilege with no additional privileges and without u...

CVE-2020-0381

CVE-2020-0381 affects Android, with the vulnerability located in Media Framework (Parse_wave of eas_mdls.c). The issue is an out-of-bounds write caused by an integer overflow, enabling remote information disclosure in a highly constrained process without requiring user interaction. Affected Andro...

CVE-2020-0394

CVE-2020-0394 describes a tapjacking vulnerability in Android’s BluetoothPairingDialog.java, triggered in onCreate, due to an insecure default value. Affects Android 8.0–11; impact is local elevation of privilege with untrusted devices potentially accessing contact lists, requiring user interacti...

CVE-2020-0412

CVE-2020-0412 affects Android where in setProcessMemoryTrimLevel of ActivityManagerService.java a missing permission check could allow local information disclosure of foreground processes without extra privileges. Affected Android versions include 8.0–11 (Android-8.0/8.1/9/10/11). The issue is cl...

CVE-2020-0467

CVE-2020-0467 concerns a logic issue in Vpn.java (onUserStopped) on Android where user preferences could be reset, potentially causing local information disclosure of secure network traffic when not on VPN. Affected platforms include Android 8.1, 9, 10 and 11. Exploitation is described as requiri...

CVE-2021-0325

CVE-2021-0325 (Android Media Framework) : A remote code execution vulnerability exists due to an out-of-bounds write (heap buffer overflow) in ih264d_parse_pslice.c. It affects Android 8.1, 9, 10 and 11 and can be exploited with user interaction. CVSS v3 base score is 8.8 (HIGH) with NETWORK atta...

CVE-2021-0427

CVE-2021-0427 affects Android 11 and is tied to parseExclusiveStateAnnotation in LogEvent.cpp. The vulnerability is a heap buffer overflow that can cause a local escalation of privilege via an out-of-bounds write, with no user interaction required. The issue is documented in the Android security ...

CVE-2021-0438

CVE-2021-0438 describes a tapjacking/overlay risk in Android where an incorrect FLAG_OBSCURED value in InputDispatcher.cpp and WindowManagerService.java can enable local elevation of privilege with user interaction. The description covers affected Android versions (8.1, 9, 10) and notes exploitat...

CVE-2021-0511

CVE-2021-0511 affects Android Dex2oat (dex2oat.cc) with an input-validation flaw that could inject bytecode into an app, enabling local privilege escalation without user interaction. Affected Android versions: 9, 10, 11. CVSS v3 base score 7.8 (local, low attack complexity, high impact). No remed...

CVE-2021-0520

CVE-2021-0520 describes a use-after-free due to a race condition in MemoryFileSystem.cpp and related files, enabling local escalation of privilege with no additional execution privileges or user interaction. Affected: Android (Android-11 and Android-10 per the Initial document). The vulnerability...

CVE-2021-0596

CVE-2021-0596 is an out-of-bounds read in the NFC path (phNciNfc_RecvMfResp in phNxpExtns_MifareStd.cpp) caused by a missing bounds check. This allows remote information disclosure over NFC with no extra execution privileges and no user interaction. Affected are Android versions 8.1, 9, 10, and 1...

CVE-2021-0600

CVE-2021-0600 affects Android devices (Android 8.1–11) with an elevation-of-privilege vulnerability in DeviceAdminAdd.java. The issue arises from improper input validation that could mislead a user into activating a device admin app, enabling local privilege escalation without additional privileg...

CVE-2021-0682

CVE-2021-0682 affects Android via a permissions check gap in NotificationManagerService.java (sendAccessibilityEvent), enabling local information disclosure of notifications. Affected: Android 8.1, 9, 10, 11. Exploitation: local, requires no user interaction, per description; no mitigation detail...

CVE-2021-0947

CVE-2021-0947 involves a kernel information disclosure in Android's graphics stack. The method PVRSRVBridgeTLDiscoverStreams allocates a heap buffer for streams, fills it via TLServerDiscoverStreamsKM, then copies it to userspace. If TLServerDiscoverStreamsKM fails (e.g., due to invalid sizes), t...

CVE-2021-39648

CVE-2021-39648 affects the Linux kernel gadget code path: the function gadget_dev_desc_UDC_show in configfs.c may disclose kernel heap memory due to a race condition, enabling local information disclosure with SYSTEM privileges (no user interaction required). Publicly documented references in And...

CVE-2022-20385

CVE-2022-20385 affects Android and is tied to a nla_parse path that does not validate para length. Userspace can influence nla_type via maxtype (GSCAN_MAX) and trigger OOB access to the policy[type] array. This is described across multiple sources as a kernel/Android issue with potential for loca...

CVE-2022-22266

Technical details about CVE-2022-22266 are not publicly available in the connected documents; the description provided is the extent of information here. Monitor for updates.

CVE-2022-22291

Technical details about CVE-2022-22291 are not publicly provided in the connected documents. Available sources summarize a logging-related information disclosure in Samsung telephony, but do not specify affected versions, root cause, exploit details, or patches; monitor for updates.

CVE-2022-32602

CVE-2022-32602 is described as an out-of-bounds read in the Mediatek keyinstall component caused by a missing bounds check. This could lead to local information disclosure with no authentication or user interaction required. The CVSS data indicates a LOCAL attack vector, LOW privileges, and HIGH ...

CVE-2023-21246

CVE-2023-21246 affects Android’s ShortcutInfo.java. The issue: an uncaught exception could allow an app to retain notification listening access, enabling local elevation of privilege with no extra execution privileges and no user interaction required. Public details in NVD/NVD-linked entries conf...

CVE-2023-32832

CVE-2023-32832 describes a local race condition in the Mediatek mtk_jpeg (MediaTek JPEG decoding) driver used on MTK-based Android devices (e.g., Xiaomi 11T and Asus ROG 6D). The vulnerability arises during memory/ DMA buffer handling in the JPEG hybrid decoding path, enabling a race between jpeg...

CVE-2023-40073

CVE-2023-40073 concerns an information disclosure in Android’s framework: in the method visitUris of Notification.java, there is a cross-user media read (Confused Deputy) that can lead to local information disclosure without extra execution privileges. The exposed data is restricted to local acce...

CVE-2023-40075

CVE-2023-40075 affects Android and is caused by a missing bounds check in the forceReplaceShortcutInner method of ShortcutPackage.java, allowing registration of unlimited packages. This leads to a local denial-of-service condition and a boot loop, with no additional execution privileges required....

CVE-2024-20023

CVE-2024-20023 concerns the MediaTek/flashc component, where an out-of-bounds write can occur due to lack of validation. This could permit local escalation to SYSTEM privileges without user interaction. The issue is documented across several sources (e.g., NVD/Red Hat/NCSC etc.) and is associated...

CVE-2024-20146

The CVE-2024-20146 issue affects MediaTek wlan STA driver and is caused by improper input validation leading to an out-of-bounds write. This can allow remote code execution with no additional privileges and without user interaction, affecting adjacent systems and potentially enabling high-severit...

CVE-2024-23695

CVE-2024-23695 involves the Android/Linux kernel’s CacheOpPMRExec in cache_km.c, with a reported out-of-bounds write caused by an integer overflow. This can lead to local elevation of privilege with no extra execution privileges or user interaction required. The available connected documents do n...

CVE-2024-27220

CVE-2024-27220 affects Google Pixel/Android components; in lpm_req_handler (TBD module), a missing bounds check allows out-of-bounds memory access. This leads to local escalation of privilege with no user interaction required. The issue is classified as Elevation of Privilege (EoP) and appears in...

CVE-2024-31324

CVE-2024-31324 affects Android Framework due to a tapjacking/overlay bypass in WindowState.java. The issue can be triggered by starting an activity in portrait, then rotating to landscape, enabling local elevation of privilege with user interaction required. The entry notes exploitation is possib...

CVE-2024-40650

CVE-2024-40650 is an Android elevation-of-privilege vulnerability caused by a missing FRP state check in wifi_item_edit_content (styles.xml). It enables local privilege escalation with no user interaction. Connected sources confirm Android FRP bypass and affected components; exploitation details ...

CVE-2024-43085

The CVE-2024-43085 entry concerns Android’s UsbDeviceManager.java: In handleMessage a logic error could allow local privilege escalation by reading device contents over USB without unlocking, with no user interaction required. Affected component is the Android USB subsystem; impact is local eleva...

CVE-2025-20636

CVE-2025-20636 involves MediaTek MT8798 secmem module where a missing bounds check can cause an out-of-bounds write. This could enable local privilege escalation if an attacker already has System privileges, with no user interaction required. The available references list a patch: ALPS09403554 (M...

CVE-2019-1989

CVE-2019-1989 affects the Android Media framework (Android 7.0–9) and is described as a Remote Code Execution (RCE) vulnerability. The issue arises in ih264d_fmt_conv_420sp_to_420p within ih264d_format_conv.c due to a missing bounds check, enabling an out-of-bounds write. The vulnerability is exp...

CVE-2021-0314

The CVE-2021-0314 issue affects Android’s UninstallerActivity in the Framework. It describes a tapjacking/overlay-based method to uninstall an app without informed user consent, leading to local elevation of privilege with User execution privileges needed. Affected Android versions include 8.1, 9...

CVE-2021-0434

CVE-2021-0434 is an Android Bluetooth permission handling flaw in onReceive of BluetoothPermissionRequest.java that could enable a malicious Bluetooth device to phish permissions from the user, potentially causing local elevation of privilege. The vulnerability affects Android 9–11 as cited in th...

CVE-2021-0956

CVE-2021-0956 affects Android by a flaw in NfcTag::discoverTechnologies (activation) in NfcTag.cpp, where an incorrect bounds check allows an out-of-bounds write. This could enable remote elevation of privilege with no user interaction, impacting Android 11 and 12. The issue is listed in Android’...

CVE-2021-39720

CVE-2021-39720Concern: Affects Google Pixel devices in the Modem component; classified as Remote Code Execution (RCE) with Critical severity in the Pixel security bulletin. Root cause is documented as a modem-related vulnerability within the Android stack; no exploit details are provided in the c...

CVE-2021-39721

CVE-2021-39721 affects the Android kernel. The connected records specify a vulnerability described as an out-of-bounds write caused by memory corruption, enabling local escalation of privilege with System execution privileges required. Public references consistently cite Android kernel as the aff...

CVE-2021-39737

CVE-2021-39737 is listed in the Pixel security bulletin as a Modem component vulnerability (RCE) affecting Google Pixel devices. The entry ties the issue to the Pixel modem with a critical impact profile (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The public documentation does not specify t...

CVE-2022-20386

CVE-2022-20386 is listed in Android security bulletin details as affecting Android with Unisoc components (Unisoc U-1903099*). Severity is High. The connected sources do not provide concrete root-cause, exploit details, affected product versions, or a remediation/patch version. The CVE appears wi...

CVE-2022-20431

CVE-2022-20431 describes a local elevation of privilege in Android due to a missing authorization check in a system service. The issue affects Android devices (specific component not publicly named in the documents) and is exploited locally with high impact (confidentiality, integrity, and availa...

CVE-2022-44434

CVE-2022-44434 affects a messaging service component and is caused by a missing permission check, enabling local denial of service in the contacts service with no extra privileges required. The vulnerability has a CVSS v3.1 base score of 5.5 (AV:L, AC:L, PR:L, UI:N, S:U, C:N, I:N, A:H), indicatin...

CVE-2023-20652

CVE-2023-20652 is a MediaTek keyinstall vulnerability described as an out-of-bounds write caused by a missing bounds check. It allows local escalation to SYSTEM privileges with no user interaction required. Exploitation status is not detailed in the provided records, but NVD/Red Hat entries confi...

CVE-2023-21109

CVE-2023-21109 describes a local elevation-of-privilege flaw in Android’s AccessibilityService across multiple Android versions (11–13). The issue arises from a logic error in the AccessibilityService code that could allow an app to hide itself from the user without requiring extra privileges or ...