CVE-2024-20142

CVE-2024-20142 concerns MediaTek MT8893 V5 DA where a missing bounds check in the V5 DA module can cause an out-of-bounds write. The resulting impact is local escalation of privilege if an attacker gains physical access to the device; exploitation requires user interaction. The initial documents ...

CVE-2024-23705

CVE-2024-23705 is an Android elevation-of-privilege vulnerability described across multiple feeds. Affected software is Google Android; root cause is improper input validation in multiple locations allowing local escalation of privilege. Exploitation reportedly requires user interaction (per init...

CVE-2024-25988

CVE-2024-25988 describes an out-of-bounds read in the SAEMM_DiscloseGuti path of SAEMM_RadioMessageCodec.c, causing potential remote information disclosure without extra execution privileges. Affected component is related to Google/Pixel modem code; exploitation is described as requiring no user ...

CVE-2024-27236

Summary: CVE-2024-27236 concerns a memory corruption risk in the aoc_unlocked_ioctl handler of aoc.c caused by type confusion, enabling local escalation of privilege without user interaction. The issue is reported across multiple sources (NVD/Red Hat/OSV/PRION/CVELIST/etc.) with consistent descri...

CVE-2018-9384

CVE-2018-9384 is documented in the Pixel/Android security context as a kernel‑level issue (Kernel components → Upstream kernel) that could enable bypassing KASLR, potentially allowing local information disclosure with SYSTEM privileges. The description consistently notes a “unusual root cause” an...

CVE-2018-9552

CVE-2018-9552 affects Android Media Framework (ihevcd_sao_shift_ctb in ihevcd_sao.c). The issue is an out-of-bounds write caused by missing bounds checks, potentially allowing information disclosure. Affected Android versions span 7.0–9 (Android-7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9); exploitation could...

CVE-2020-0414

CVE-2020-0414 affects Android’s Media Framework (AudioFlinger::RecordThread::threadLoop). A permissions bypass could allow a remote attacker to read a non-silenced audio buffer, leading to information disclosure without extra execution privileges, with exploitation requiring user interaction. Aff...

CVE-2020-0420

CVE-2020-0420 affects Android Framework due to a missing permission check in setUpdatableDriverPath in GpuService.cpp, enabling local EoP with no user interaction. The NVD/NCSC/Red Hat entries confirm a memory-corruption path leading to privilege escalation. The Android Security Bulletin lists th...

CVE-2021-0305

CVE-2021-0305 affects the Android PackageInstaller. The issue is a tapjacking vulnerability caused by an insecure default value, enabling local escalation of privilege with no extra execution privileges, requiring user interaction to exploit. Affected platforms include Android 8.1, 9, and 10. The...

CVE-2021-0334

CVE-2021-0334 is a vulnerability in the Android Framework affecting Android 8.1–11 where ResolverActivity.java’s onTargetSelected allows a malicious app to bypass domain-handling settings and register as the default handler for arbitrary domains. This can lead to local privilege elevation with no...

CVE-2021-0435

CVE-2021-0435 describes a heap data leak in the Android Bluetooth stack: in avrc_proc_vendor_command within avrc_api.cc, uninitialized data can leak heap data, enabling remote information disclosure with no extra privileges and without user interaction. Affected Android versions include Android-1...

CVE-2021-0483

CVE-2021-0483 affects Android’s Media Framework via the AAudioService: a race condition can cause a use-after-free, enabling local elevation of privilege with user privileges and no user interaction needed. The issue is documented across multiple feeds (NVD/Red Hat/ CVE lists) with Android 10–11 ...

CVE-2021-0578

CVE-2021-0578 affects the Android WiFi driver (MediaTek components) with an out-of-bounds read caused by a missing bounds check. This could allow remote information disclosure by a nearby attacker without user interaction or additional privileges. Documents do not specify an affected version, exp...

CVE-2021-0887

CVE-2021-0887 describes a leak of kernel heap content in PVRSRVBridgeHeapCfgHeapConfigName due to uninitialized data, enabling local information disclosure without extra privileges or user interaction. This affects Android environments utilizing PowerVR-GPU components and is reflected across mult...

CVE-2022-20119

CVE-2022-20119 affects the Android display/graphics path (mali_gralloc_buffer.h, private_handle_t) where an uninitialized data path allows local information disclosure. The root cause is uninitialized data in the private_handle_t structure, enabling information leakage without extra execution pri...

CVE-2022-20236

CVE-2022-20236 is referenced in the Android Security Bulletin under Unisoc GPU; the affected component is a UNISOC GPU driver. The underlying root cause and specific impact are not detailed in the provided documents. The CVSS from NVD indicates HIGH impact with network attack vector and no user i...

CVE-2022-20390

Technical details about CVE-2022-20390 are not publicly available in the provided documents. Monitor the Android Bulletin and vendor advisories for updates and fixes.

CVE-2023-20695

CVE-2023-20695 concerns MediaTek preloader on MT6880/6890/6980/6990 devices. The issue is an out-of-bounds write caused by a missing bounds check in the preloader, enabling local escalation of privilege with System execution privileges required; exploitation does not require user interaction. Pub...

CVE-2023-20780

The CVE-2023-20780 entry concerns MediaTek/MVK keyinstall: a missing bounds check in the keyinstall module can cause local information disclosure, requiring System privileges with no user interaction. Affected component is the keyinstall path; impact is local information disclosure with potential...

CVE-2023-32837

CVE-2023-32837 is a MediaTek JPEG decoding accelerator vulnerability in the mtk_jpeg driver exposed to unprivileged userland on devices like Xiaomi 11T and Asus ROG 6D. The flaw is an out-of-bounds read/write in an array of structs, caused by a race between the JPEG_DEC_IOCTL_HYBRID_START path (w...

CVE-2023-48409

Summary: CVE-2023-48409 affects the Mali KBase GPU kernel module on Google Pixel devices. The vulnerability is described as a possible out-of-bounds write triggered by an integer overflow in the function gpu_pixel_handle_buffer_liveness_update_ioctl within private/google-modules/gpu/mali_kbase/ma...

CVE-2024-25992

CVE-2024-25992 is a out-of-bounds read in tmu_tz_control of tmu.c caused by a missing bounds check. The vulnerability enables local escalation of privilege with no additional execution privileges required and does not require user interaction. The provided connected sources (Red Hat, NVD, PRION, ...

CVE-2024-27227

CVE-2024-27227 affects Google Pixel devices via the modem component, with remote code execution reported as the impact. The Pixel security bulletin lists this CVE under the Modem subcomponent with a High severity and notes that applying patch level 2024-03-05 or later mitigates issues described i...

CVE-2024-31336

The CVE-2024-31336 entry concerns PVRSRVBridgeRGXKickTA3D2 in server_rgxta3d_bridge.c, affecting the PowerVR-GPU component. The issue is described as an arbitrary code execution caused by improper input validation, enabling local kernel privilege escalation without extra privileges or user intera...

CVE-2026-20435

CVE-2026-20435 concerns a logic error in the preloader of MediaTek-based devices that allows reading device unique identifiers. The vulnerability can enable local information disclosure with physical access and no required user interaction or execution privileges. Affected component: preloader; u...

CVE-2020-0243

CVE-2020-0243 is a Media Framework elevation-of-privilege vulnerability in Android. In clearPropValue of MediaAnalyticsItem.cpp, an improper locking leads to a use-after-free that could allow a local attacker to escalate privileges within the media server. Impact is described as local escalation ...

CVE-2020-0459

The CVE-2020-0459 issue affects Android’s WifiConfigManager.java (sendConfiguredNetworkChangedBroadcast) and is an information-disclosure flaw caused by a missing permission check. It allows local disclosure of WiFi network names without extra execution privileges, with no user interaction requir...

CVE-2021-0324

CVE-2021-0324 is associated with Android/Unisoc components in the 2021 May Android bulletin. Sources catalog it under Unisoc Framework with High severity (per patch-level details), affecting Android devices via the Android SoC/Unisoc stack. The connected records do not provide concrete technical ...

CVE-2021-0437

CVE-2021-0437 is a local elevation-of-privilege issue in Android’s DRM module. The root cause is a possible double free in DrmPlugin.cpp within setPlayPolicy, which could allow a privileged process to escalate privileges without additional execution privileges or user interaction. Affected OS ver...

CVE-2021-0517

CVE-2021-0517 affects Google Android ConnectivityService.java (Android 11). In updateCapabilities, a logic error can lead to an incorrect network state determination, biasing networking tasks to non-VPN networks and enabling remote information disclosure without additional privileges. Exploitatio...

CVE-2021-0521

CVE-2021-0521 affects the Android PackageManagerService’s getAllPackages function, enabling local information disclosure of cross-user permissions due to a missing permission check. The impact is information disclosure with no additional execution privileges or user interaction required, i.e., a ...

CVE-2021-0689

CVE-2021-0689 affects Android platforms (Android-8.1, 9, 10, 11) via an out-of-bounds read in SkSwizzler_opts.h: RGB_to_BGR1_portable, caused by a missing bounds check. This can lead to local information disclosure without user interaction. The provided documents do not specify an exploit or patc...

CVE-2021-0702

CVE-2021-0702 affects Android 11 in the Framework component tied to apexd.cpp RevertActiveSessions, enabling local information disclosure via an unintentional MediaStore downgrade. Exploitation requires user interaction, with the issue rated at MEDIUM severity (CVSSv3.1) and LOW/Med in CVSS2 depe...

CVE-2021-0952

CVE-2021-0952 affects Android devices (Android 9–12) and stems from a vulnerability in doCropPhoto within PhotoSelectionHandler.java that enables a possible permission bypass via a confused deputy. This could allow local information disclosure of a user’s contacts with no additional execution pri...

CVE-2021-39621

CVE-2021-39621 is an Android elevation-of-privilege vulnerability in the LegacyModeSmsHandler.java’s sendLegacyVoicemailNotification. It relies on an unsafe PendingIntent to bypass permissions, enabling local privilege escalation from Android 9 to 12. The issue does not require user interaction f...

CVE-2021-39659

CVE-2021-39659 affects Google Android (10–12) and concerns the method sortSimPhoneAccountsForEmergency in CreateConnectionProcessor.java. An unhandled exception can block access to emergency calling, potentially causing a local denial of service with user privileges. Exploitation details are not ...

CVE-2021-39712

CVE-2021-39712 is an Elevation of Privilege issue in the Android kernel tied to a race-condition leading to a possible user-after-free. The connected Pixel bulletin and related records confirm this vulnerability affects the Android kernel (upstream kernel) and can enable local privilege escalatio...

CVE-2021-39724

CVE-2021-39724 is an Android/kernel issue: in TuningProviderBase::GetTuningTreeSet there is an out-of-bounds read due to a missing bounds check. This can enable local information disclosure with system privileges required. The vulnerability affects the Android kernel via tuning_provider_base.cc a...

CVE-2022-20006

CVE-2022-20006 affects Android 10–12 (including 12L). A race condition in KeyguardServiceWrapper.java and related files can briefly reveal what’s under the lock screen, enabling local privilege escalation if a Guest user is enabled. Exploitation does not require user interaction. The issue is lis...

CVE-2022-44432

CVE-2022-44432 describes a vulnerability in the WLAN driver where a missing bounds check could allow a local denial-of-service in WLAN services. The concrete details in the provided documents are limited to this root cause and its local impact; no public exploit information, affected vendor/produ...

CVE-2022-44438

CVE-2022-44438 affects the Android messaging service (in Unisoc contexts) where a missing permission check can allow a local denial of service in the contacts service without extra privileges. Root cause: inadequate access control in the messaging component. Impact: local DoS as described in mult...

CVE-2023-20623

CVE-2023-20623 affects the Ion component in MediaTek-based systems. Root cause is improper locking that allows local privilege escalation without extra execution privileges and with no user interaction required. The CVSS metrics indicate a local attack vector, high complexity, and high privileges...

CVE-2023-21248

CVE-2023-21248 affects Android’s WifiScanningMainSwitchPreferenceController.java. The issue is a missing permission check in getAvailabilityStatus, which could bypass a device policy restriction and enable local escalation of privilege without additional execution privileges. Exploitation details...

CVE-2023-21279

CVE-2023-21279 concerns Android’s RemoteViews.visitUris, where a confused deputy could enable cross-user media reads and local information disclosure without extra execution privileges. The vulnerability is discussed across multiple sources tied to the Android security ecosystem (NVD, Red Hat, PR...

CVE-2023-40080

CVE-2023-40080 involves the Bluetooth stack in Android (btm_ble_gap.cc) where a logic error can cause an out-of-bounds write, leading to local elevation of privilege without extra execution privileges or user interaction. The issue is categorized with high impact and is described across multiple ...

CVE-2023-45773

The CVE-2023-45773 issue affects the Bluetooth stack component (btm_ble_gap.cc) in Android. It describes an out-of-bounds write caused by a missing bounds check in multiple functions, which could enable local escalation of privilege with User privileges required and no user interaction. The threa...

CVE-2024-22008

CVE-2024-22008 affects Google Pixel devices (Pixel bulletin context shows it under ACPM/TMU components). The vulnerability originates from a missing bounds check in the config_gov_time_windows function within tmu.c, causing an out-of-bounds write. This leads to local escalation of privilege with ...

CVE-2024-25993

CVE-2024-25993 involves a missing bounds check in the tmu_reset_tmu_trip_counter function, causing an out-of-bounds write that could enable local privilege escalation with no extra privileges or user interaction required. Public docs attribute this to Pixel/Android components and classify the imp...

CVE-2024-31318

CVE-2024-31318 affects Android’s CompanionDeviceManagerService.java. The flaw is a missing permission check that could allow pairing a companion device without user acceptance, enabling local elevation of privilege with no extra execution privileges required. User interaction is not needed for ex...

CVE-2017-0675

CVE-2017-0675 is a remote code execution vulnerability in the Android media framework affecting Android 6.0.1, 7.0, 7.1.1, and 7.1.2. The issue is described as RCE in the media framework with impact to confidentiality, integrity, and availability. The Android bulletin indicates that the most seve...