CVE-2021-0334

CVE-2021-0334 is a vulnerability in the Android Framework affecting Android 8.1–11 where ResolverActivity.java’s onTargetSelected allows a malicious app to bypass domain-handling settings and register as the default handler for arbitrary domains. This can lead to local privilege elevation with no...

CVE-2021-0600

CVE-2021-0600 affects Android devices (Android 8.1–11) with an elevation-of-privilege vulnerability in DeviceAdminAdd.java. The issue arises from improper input validation that could mislead a user into activating a device admin app, enabling local privilege escalation without additional privileg...

CVE-2021-0604

CVE-2021-0604 affects Android 8.1, 9, 10 and 11. In BluetoothOppSendFileInfo.java, generateFileInfo allows sharing private files over Bluetooth via a confused deputy, leading to local information disclosure without extra execution privileges; user interaction is required for exploitation. The ent...

CVE-2021-0970

CVE-2021-0970 : In Android, a mismatch in Parcel serialization/deserialization in createFromParcel of GpsNavigationMessage.java can enable local elevation of privilege without user interaction. Affected: Android 9–12 (as listed by the CVE entry). The issue stems from Parcel handling, potentially ...

CVE-2021-1050

CVE-2021-1050 affects the PowerVR kernel driver (MMU_UnmapPages). The root cause is a missing bounds check causing an out-of-bounds write, enabling local privilege escalation with no user interaction. Impact is High. The Android bulletin notes patch levels 2022-11-01/2022-11-05 or newer address t...

CVE-2022-20106

The CVE-2022-20106 entry concerns the MM service, with a heap-based buffer overflow causing an out-of-bounds write that could enable local privilege escalation to SYSTEM. Exploit details or in-the-wild activity are not provided in the documents. No user interaction is required. Remediation refere...

CVE-2022-26447

Summary of CVE-2022-26447 : A MediaTek BT firmware vulnerability causes an out-of-bounds write due to a missing bounds check. This can enable remote code execution with no privileges and no user interaction required. Affected component is BT firmware (MediaTek). The issue is associated with patch...

CVE-2022-32597

CVE-2022-32597 : In Widevine, there is an out-of-bounds write due to an incorrect bounds check, enabling local escalation to System execution privileges. Exploitation requires no user interaction and is localized (local attacker). The issue is associated with the MediaTek Widevine implementation;...

CVE-2022-42755

CVE-2022-42755 describes a missing bounds check in a WLAN driver function, causing local denial-of-service via out-of-bounds access (heap overflow/out-of-bounds write) as per Red Hat, NVD and OSV entries. The affected component is the WLAN driver; root cause is parameter/bounds checking omissions...

CVE-2023-20993

CVE-2023-20993 affects Android 11–13 via SnoozeHelper.java, where an uncaught exception can cause a failure to persist settings, enabling local elevation of privilege with no extra execution privileges and no user interaction required. The vulnerability is documented across multiple sources (NVD,...

CVE-2023-21109

CVE-2023-21109 describes a local elevation-of-privilege flaw in Android’s AccessibilityService across multiple Android versions (11–13). The issue arises from a logic error in the AccessibilityService code that could allow an app to hide itself from the user without requiring extra privileges or ...

CVE-2023-40079

CVE-2023-40079 affects Android frameworks (ShortcutService.java: injectSendIntentSender) where a permissions bypass may allow a background activity launch, leading to local privilege escalation without user interaction. The issue is documented as an Elevation of Privilege (EoP) with high impact. ...

CVE-2024-20146

The CVE-2024-20146 issue affects MediaTek wlan STA driver and is caused by improper input validation leading to an out-of-bounds write. This can allow remote code execution with no additional privileges and without user interaction, affecting adjacent systems and potentially enabling high-severit...

CVE-2024-23715

CVE-2024-23715: Out-of-bounds write in PMRWritePMPageList within pmr.c triggers local kernel privilege escalation with no user interaction. Multiple sources (NVD, Red Hat, CNVD, CN)** corroborate a kernel-level issue described as a logic error enabling LPE. Affected component is the kernel; remed...

CVE-2024-34722

CVE-2024-34722 is an Android BLE legacy-pairing authentication bypass caused by an incorrect protocol implementation in smp_proc_rand of smp_act.cc. The issue enables remote elevation of privilege with no extra privileges or user interaction, as described across multiple sources (NVD, Red Hat CVE...

CVE-2024-40650

CVE-2024-40650 is an Android elevation-of-privilege vulnerability caused by a missing FRP state check in wifi_item_edit_content (styles.xml). It enables local privilege escalation with no user interaction. Connected sources confirm Android FRP bypass and affected components; exploitation details ...

CVE-2024-40656

In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a potential information disclosure across users due to a confused deputy. This could cause local information disclosure without requiring additional execution privileges, and exploitation requires user interaction. The v...

CVE-2020-0400

CVE-2020-0400 affects Android (Android-10/Android-11) in the NotificationMgr.showDataRoamingNotification path. The root cause is an unsafe PendingIntent, enabling a local permission bypass that could disclose data. Exploitation is local with no user interaction required (UI: NONE). The issue is c...

CVE-2020-0442

CVE-2020-0442 affects Android and is tied to the Notification.java path (Message and toBundle). The root cause is improper input validation that can cause a UI slowdown or crash, leading to a remote denial of service when a malicious contact file is received. Exploitation requires no user interac...

CVE-2021-0434

CVE-2021-0434 is an Android Bluetooth permission handling flaw in onReceive of BluetoothPermissionRequest.java that could enable a malicious Bluetooth device to phish permissions from the user, potentially causing local elevation of privilege. The vulnerability affects Android 9–11 as cited in th...

CVE-2021-0477

CVE-2021-0477 describes an elevation-of-privilege vulnerability in Android: in ScreenshotNotificationsController.notifyScreenshotError, an unsafe PendingIntent could allow a local attacker to bypass protection and gain privileges without user interaction. Affected: Android 8.1, 9, 10, 11. Impact ...

CVE-2021-0595

The CVE-2021-0595 issue affects Android (Framework) via the RootWindowContainer.lockAllProfileTasks path, enabling local elevation of privilege by accessing the work profile without a PIN after login. Exploitation is local and requires no user interaction. Affected Android versions include 8.1, 9...

CVE-2021-0599

CVE-2021-0599 : Android information disclosure in NotificationRecord.scheduleTimeoutLocked. Affected: Android 8.1, 9, 10, 11. Root cause: broadcasted intent leaks a sensitive identifier due to a confused deputy, enabling local information disclosure without extra privileges or user interaction. I...

CVE-2021-0691

CVE-2021-0691 affects Android 11 via an overly-permissive SELinux policy in system_app.te, enabling a local attacker with system execution privileges to gain code execution in other processes. The Red Hat and NVD entries describe a local elevation of privilege vulnerability that does not require ...

CVE-2021-0887

CVE-2021-0887 describes a leak of kernel heap content in PVRSRVBridgeHeapCfgHeapConfigName due to uninitialized data, enabling local information disclosure without extra privileges or user interaction. This affects Android environments utilizing PowerVR-GPU components and is reflected across mult...

CVE-2021-0965

CVE-2021-0965 affects Android devices via a missing permission check in AndroidManifest.xml under Settings, enabling pairing of a Bluetooth device without user consent. This is described as a local elevation of privilege with no extra execution privileges required, and no user interaction is need...

CVE-2021-39621

CVE-2021-39621 is an Android elevation-of-privilege vulnerability in the LegacyModeSmsHandler.java’s sendLegacyVoicemailNotification. It relies on an unsafe PendingIntent to bypass permissions, enabling local privilege escalation from Android 9 to 12. The issue does not require user interaction f...

CVE-2021-39661

CVE-2021-39661 affects the PowerVR kernel driver on Android. In the function PMRLogicalOffsetToPhysicalOffset , a missing bounds check can cause an out-of-bounds write, leading to local escalation of privilege with no additional execution privileges or user interaction required. Exploitation stat...

CVE-2021-39710

CVE-2021-39710 is listed in the Pixel security bulletin as a Telephony-related Elevation of Privilege (EoP) vulnerability in the Android kernel, categorized as High impact. The CVE entry in the bulletin confirms the affected component (Kernel/Telephony) and assigns a High severity for Pixel devic...

CVE-2021-39721

CVE-2021-39721 affects the Android kernel. The connected records specify a vulnerability described as an out-of-bounds write caused by memory corruption, enabling local escalation of privilege with System execution privileges required. Public references consistently cite Android kernel as the aff...

CVE-2022-20385

CVE-2022-20385 affects Android and is tied to a nla_parse path that does not validate para length. Userspace can influence nla_type via maxtype (GSCAN_MAX) and trigger OOB access to the policy[type] array. This is described across multiple sources as a kernel/Android issue with potential for loca...

CVE-2022-20386

CVE-2022-20386 is listed in Android security bulletin details as affecting Android with Unisoc components (Unisoc U-1903099*). Severity is High. The connected sources do not provide concrete root-cause, exploit details, affected product versions, or a remediation/patch version. The CVE appears wi...

CVE-2022-32636

The CVE-2022-32636 issue, attributed to MediaTek’s keyinstall, is a local-privilege-escalation vulnerability caused by an integer overflow that leads to an out-of-bounds write. Exploitation is described as requiring local access with no user interaction. The vulnerability affects MediaTek’s keyin...

CVE-2023-21084

CVE-2023-21084 affects Android 13, with the flaw in the buildPropFile of filesystem.go caused by an insecure hash from improper crypto usage. The impact is local elevation of privilege (EoP) with system-level execution privileges required and no user interaction. Public details in the provided do...

CVE-2023-21248

CVE-2023-21248 affects Android’s WifiScanningMainSwitchPreferenceController.java. The issue is a missing permission check in getAvailabilityStatus, which could bypass a device policy restriction and enable local escalation of privilege without additional execution privileges. Exploitation details...

CVE-2023-35665

CVE-2023-35665 describes a local elevation-of-privilege in Android where a missing permission check across multiple files allows importing a contact from another user. The issue enables privilege escalation without additional execution privileges and without user interaction. The connected source...

CVE-2023-40097

CVE-2023-40097 affects Android’s PackageManagerHelper.hasPermissionForActivity inside the framework. The flaw is an input-validation issue that can allow a URI grant, causing local elevation of privilege with no extra execution privileges required; exploitation requires user interaction. The publ...

CVE-2024-20024

CVE-2024-20024 concerns the MediaTek flashc module where an out-of-bounds write arises from insufficient input validation. The vulnerability can enable local escalation of privilege to System execution privileges without user interaction. Public documentation consistently lists the issue as affec...

CVE-2024-25989

CVE-2024-25989 describes an out-of-bounds read in the Google Pixel GPU driver, specifically in gpu_slc_liveness_update of pixel_gpu_slc.c, caused by a missing bounds check. This can lead to local information disclosure without requiring exploits, privileges, or user interaction. Public references...

CVE-2024-31324

CVE-2024-31324 affects Android Framework due to a tapjacking/overlay bypass in WindowState.java. The issue can be triggered by starting an activity in portrait, then rotating to landscape, enabling local elevation of privilege with user interaction required. The entry notes exploitation is possib...

CVE-2024-31336

The CVE-2024-31336 entry concerns PVRSRVBridgeRGXKickTA3D2 in server_rgxta3d_bridge.c, affecting the PowerVR-GPU component. The issue is described as an arbitrary code execution caused by improper input validation, enabling local kernel privilege escalation without extra privileges or user intera...

CVE-2024-34736

CVE-2024-34736 affects Android’s media stack, specifically the StagefrightRecorder.cpp setupVideoEncoder. When B-frame support is enabled, there is a potential for asynchronous playback that can enable local elevation of privilege without requiring additional execution privileges or user interact...

CVE-2025-48633

CVE-2025-48633 concerns a logic error in Android Framework related to DevicePolicyManagerService.hasAccountsOnAnyUser, enabling a local attacker to add a Device Owner after provisioning and escalate privileges without user interaction. Connected sources (EUVD-2025-201737; Android Security Bulleti...

CVE-2019-1989

CVE-2019-1989 affects the Android Media framework (Android 7.0–9) and is described as a Remote Code Execution (RCE) vulnerability. The issue arises in ih264d_fmt_conv_420sp_to_420p within ih264d_format_conv.c due to a missing bounds check, enabling an out-of-bounds write. The vulnerability is exp...

CVE-2021-0427

CVE-2021-0427 affects Android 11 and is tied to parseExclusiveStateAnnotation in LogEvent.cpp. The vulnerability is a heap buffer overflow that can cause a local escalation of privilege via an out-of-bounds write, with no user interaction required. The issue is documented in the Android security ...

CVE-2021-0438

CVE-2021-0438 describes a tapjacking/overlay risk in Android where an incorrect FLAG_OBSCURED value in InputDispatcher.cpp and WindowManagerService.java can enable local elevation of privilege with user interaction. The description covers affected Android versions (8.1, 9, 10) and notes exploitat...

CVE-2021-0467

CVE-2021-0467 affects Chromecast bootROM with an out-of-bounds write caused by an incorrect bounds check. This allows local escalation of privilege in the bootloader with physical USB access and no user interaction. The Android bulletin notes fixes at 2021-05-01/2021-05-05 patch levels; no exploi...

CVE-2021-0480

CVE-2021-0480 affects Android devices due to a vulnerability in SnoozeHelper.java (createPendingIntent) where a broadcast intent may include a sensitive identifier, enabling local information disclosure with no extra privileges. Exploitation requires user interaction. Affected Android versions in...

CVE-2021-0586

CVE-2021-0586 describes a tapjacking/overlay flaw in DevicePickerFragment.java on Android 8.1–11 that could trick users into selecting a Bluetooth device, enabling local escalation of privilege with no extra execution privileges required. The initial description notes user interaction is needed f...

CVE-2021-39735

CVE-2021-39735 involves the Android kernel component gasket_alloc_coherent_memory in gasket_page_table.c, where a race condition can cause memory corruption. The vulnerability enables local escalation of privilege with System execution privileges needed, and exploitation is not dependent on user ...