CVE-2020-0418

CVE-2020-0418 affects Android 10 and is tied to a logic error in Utils.java (getPermissionInfosForGroup) that can enable local elevation of privilege. The vulnerability, described as a local EoP with high severity in the 2020-11 Android Bulletin, requires local access but not user interaction to ...

CVE-2022-44431

CVE-2022-44431 describes a missing bounds check in the WLAN driver that could allow a local Denial of Service in WLAN services. The NVD entry lists a CVSS v3.1 base score of 5.5 (Local, Low complexity, Low privileges, High impact on availability). Connected sources corroborate the WLAN-driver foc...

CVE-2022-44434

CVE-2022-44434 affects a messaging service component and is caused by a missing permission check, enabling local denial of service in the contacts service with no extra privileges required. The vulnerability has a CVSS v3.1 base score of 5.5 (AV:L, AC:L, PR:L, UI:N, S:U, C:N, I:N, A:H), indicatin...

CVE-2022-47461

CVE-2022-47461 affects the telephony stack (com.android.phone) where a missing permission check in the telephone service can enable local elevation of privilege. The CVSS data indicate LOCAL attack vector, requiring HIGH privileges and potentially impacting confidentiality, integrity, and availab...

CVE-2023-20623

CVE-2023-20623 affects the Ion component in MediaTek-based systems. Root cause is improper locking that allows local privilege escalation without extra execution privileges and with no user interaction required. The CVSS metrics indicate a local attack vector, high complexity, and high privileges...

CVE-2023-20695

CVE-2023-20695 concerns MediaTek preloader on MT6880/6890/6980/6990 devices. The issue is an out-of-bounds write caused by a missing bounds check in the preloader, enabling local escalation of privilege with System execution privileges required; exploitation does not require user interaction. Pub...

CVE-2023-21238

CVE-2023-21238 affects Google's Android framework: in RemoteViews.visitUris, a confused-deputy flaw can leak images between users, causing local information disclosure without extra privileges or user interaction. The issue is documented in the 2023-07-01 Android Security Bulletin (Framework sect...

CVE-2023-21253

CVE-2023-21253 describes a resource exhaustion condition that can crash multiple system services, leading to local DoS with no required user interaction. The impact is limited to denial of service on affected Android/Linux components; no remote context is implied. Public details indicate the issu...

CVE-2023-21274

CVE-2023-21274 affects Google Android, specifically the code path in ShimConverter.cpp:convertSubgraphFromHAL. The issue is an out-of-bounds read caused by a missing bounds check, leading to local information disclosure without requiring additional privileges. Exploitation is described as needing...

CVE-2023-40073

CVE-2023-40073 concerns an information disclosure in Android’s framework: in the method visitUris of Notification.java, there is a cross-user media read (Confused Deputy) that can lead to local information disclosure without extra execution privileges. The exposed data is restricted to local acce...

CVE-2023-40074

CVE-2023-40074 affects Google Android via a flaw in PersistableBundle.java (saveToXml): invalid data can cause local persistent denial of service without user interaction. Impacted component: Android framework (PersistableBundle.java). Exploitation is described as local; no in-the-wild exploitati...

CVE-2024-0043

CVE-2024-0043 involves a logic error that can grant a notification listener to an app in the work profile, enabling local elevation of privilege with no extra execution privileges needed. Exploitation requires user interaction. Multiple connected sources (Android NVD entry, Red Hat advisory, CNVD...

CVE-2024-20103

In CVE-2024-20103, MediaTek WLAN firmware contains an out-of-bounds write due to improper input validation, enabling remote code execution with no privileges or user interaction required. The vulnerability affects WLAN-related firmware (MediaTek) and is tracked under Patch ID ALPS09001358 and MSV...

CVE-2024-27236

Summary: CVE-2024-27236 concerns a memory corruption risk in the aoc_unlocked_ioctl handler of aoc.c caused by type confusion, enabling local escalation of privilege without user interaction. The issue is reported across multiple sources (NVD/Red Hat/OSV/PRION/CVELIST/etc.) with consistent descri...

CVE-2024-44093

CVE-2024-44093 describes a memory corruption vulnerability in the function ppmp_unprotect_buf within drm/code/drm_fw.c. Exploitation could enable local privilege escalation without additional execution privileges or user interaction. The issue is referenced across multiple feeds (NVD, Red Hat, CV...

CVE-2018-9552

CVE-2018-9552 affects Android Media Framework (ihevcd_sao_shift_ctb in ihevcd_sao.c). The issue is an out-of-bounds write caused by missing bounds checks, potentially allowing information disclosure. Affected Android versions span 7.0–9 (Android-7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9); exploitation could...

CVE-2020-0243

CVE-2020-0243 is a Media Framework elevation-of-privilege vulnerability in Android. In clearPropValue of MediaAnalyticsItem.cpp, an improper locking leads to a use-after-free that could allow a local attacker to escalate privileges within the media server. Impact is described as local escalation ...

CVE-2020-0385

CVE-2020-0385 affects Android via the Media Framework component, specifically in eas_mdls.c Parse_insh, where an out-of-bounds write could disclose information. Exploitation requires user interaction; impact is information disclosure without remote code execution. Affected Android versions includ...

CVE-2021-0435

CVE-2021-0435 describes a heap data leak in the Android Bluetooth stack: in avrc_proc_vendor_command within avrc_api.cc, uninitialized data can leak heap data, enabling remote information disclosure with no extra privileges and without user interaction. Affected Android versions include Android-1...

CVE-2021-0483

CVE-2021-0483 affects Android’s Media Framework via the AAudioService: a race condition can cause a use-after-free, enabling local elevation of privilege with user privileges and no user interaction needed. The issue is documented across multiple feeds (NVD/Red Hat/ CVE lists) with Android 10–11 ...

CVE-2021-0486

CVE-2021-0486 concerns Android 10–11 where, in the PermissionManagerService.java more precisely in onPackageAddedInternal, there is a permissions bypass that allows possible access to external storage. The root cause is a local-elevation-of-privilege path that does not require user interaction. T...

CVE-2021-0522

CVE-2021-0522 is an Android vulnerability reported as an out-of-bounds read caused by a use-after-free in ConnectionHandler::SdpCb (connection_handler.cc). The issue could allow remote information disclosure without additional execution privileges, and no user interaction is required. Affected pr...

CVE-2021-0702

CVE-2021-0702 affects Android 11 in the Framework component tied to apexd.cpp RevertActiveSessions, enabling local information disclosure via an unintentional MediaStore downgrade. Exploitation requires user interaction, with the issue rated at MEDIUM severity (CVSSv3.1) and LOW/Med in CVSS2 depe...

CVE-2021-0704

CVE-2021-0704 (Google Android): A local information-disclosure vulnerability in AccountManagerService.java allows retrieving accounts without required permissions due to a permissions bypass. Affected Android versions include 9, 10, and 11. Exploitation is local and does not require user interact...

CVE-2021-0942

CVE-2021-0942 describes an ioctl-based path where an untrusted app can control the ui32PageIndex in sPA.uiAddr = page_to_phys(psOSPageArrayData->pagearray[ui32PageIndex]), leading to an out-of-bounds read (and plausibly an OOB write) in the Android kernel. Multiple sources confirm a high-sever...

CVE-2021-0963

CVE-2021-0963 involves a tapjacking/overlay vulnerability in KeyChainActivity.java that could allow an app certificate stored in the Android keychain to be misused, resulting in local elevation of privilege. Public details in the provided documents confirm the issue affects Android versions 9–12 ...

CVE-2021-39720

CVE-2021-39720Concern: Affects Google Pixel devices in the Modem component; classified as Remote Code Execution (RCE) with Critical severity in the Pixel security bulletin. Root cause is documented as a modem-related vulnerability within the Android stack; no exploit details are provided in the c...

CVE-2021-39731

CVE-2021-39731 concerns an out-of-bounds write in Android’s ProtocolStkProactiveCommandAdapter::Init (protocolstkadapter.cpp). The vulnerability arises from an incorrect bounds check in the Android kernel component, enabling a local elevation of privilege with System execution privileges, without...

CVE-2021-39737

CVE-2021-39737 is listed in the Pixel security bulletin as a Modem component vulnerability (RCE) affecting Google Pixel devices. The entry ties the issue to the Pixel modem with a critical impact profile (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The public documentation does not specify t...

CVE-2022-20037

The CVE-2022-20037 entry concerns the ion driver with an information-disclosure flaw caused by an incorrect bounds check. This can enable local information disclosure without additional execution privileges and requires no user interaction. The issue is associated with patch ALPS06171705 (Issue I...

CVE-2022-44427

Technical details about CVE-2022-44427 are not publicly provided in the supplied documents. The entries reference a missing bounds check in the WLAN driver and local DoS, but no vendor/product/version specifics or fixes are given here. Monitor for updates.

CVE-2022-44438

CVE-2022-44438 affects the Android messaging service (in Unisoc contexts) where a missing permission check can allow a local denial of service in the contacts service without extra privileges. Root cause: inadequate access control in the messaging component. Impact: local DoS as described in mult...

CVE-2023-21218

CVE-2023-21218 : The vulnerability is in PMRChangeSparseMemOSMem of physmem_osmem_linux.c, where an incorrect bounds check allows an out-of-bounds write. This could enable local escalation of privilege in the Linux kernel without extra execution privileges or user interaction. Public sources in t...

CVE-2023-40084

CVE-2023-40084 involves a memory corruption vulnerability caused by a use-after-free in the MDnsSdListener.cpp path. The flaw can permit local escalation of privilege without additional execution privileges and without user interaction, as described across multiple sources (NVD/Red Hat/Android bu...

CVE-2024-20142

CVE-2024-20142 concerns MediaTek MT8893 V5 DA where a missing bounds check in the V5 DA module can cause an out-of-bounds write. The resulting impact is local escalation of privilege if an attacker gains physical access to the device; exploitation requires user interaction. The initial documents ...

CVE-2024-23695

CVE-2024-23695 involves the Android/Linux kernel’s CacheOpPMRExec in cache_km.c, with a reported out-of-bounds write caused by an integer overflow. This can lead to local elevation of privilege with no extra execution privileges or user interaction required. The available connected documents do n...

CVE-2024-31325

CVE-2024-31325 is listed in the Android Framework as an Elevation of Privilege (EoP) vulnerability with a local attack vector. The issue arises from a logic error that can reveal images across different users’ data, enabling local privilege escalation without additional execution privileges. Affe...

CVE-2024-39432

CVE-2024-39432 affects Unisoc UMTS RLC driver; root cause is a missing bounds check causing an out-of-bounds read. According to Red Hat and NVD entries, this can lead to remote DoS with system privileges. PT-2024-9414 adds that exploitation could enable remote code execution and full system compr...

CVE-2014-9900

CVE-2014-9900 affects the Linux kernel (ethtool_get_wol in net/core/ethtool.c) up to version 4.7. It can leak kernel memory due to uninitialized data, enabling local information disclosure. Reported impact seen on Android devices (Nexus 5/2013 era) with Android before 2016-08-05. Public advisorie...

CVE-2020-0414

CVE-2020-0414 affects Android’s Media Framework (AudioFlinger::RecordThread::threadLoop). A permissions bypass could allow a remote attacker to read a non-silenced audio buffer, leading to information disclosure without extra execution privileges, with exploitation requiring user interaction. Aff...

CVE-2020-0420

CVE-2020-0420 affects Android Framework due to a missing permission check in setUpdatableDriverPath in GpuService.cpp, enabling local EoP with no user interaction. The NVD/NCSC/Red Hat entries confirm a memory-corruption path leading to privilege escalation. The Android Security Bulletin lists th...

CVE-2021-0952

CVE-2021-0952 affects Android devices (Android 9–12) and stems from a vulnerability in doCropPhoto within PhotoSelectionHandler.java that enables a possible permission bypass via a confused deputy. This could allow local information disclosure of a user’s contacts with no additional execution pri...

CVE-2021-39659

CVE-2021-39659 affects Google Android (10–12) and concerns the method sortSimPhoneAccountsForEmergency in CreateConnectionProcessor.java. An unhandled exception can block access to emergency calling, potentially causing a local denial of service with user privileges. Exploitation details are not ...

CVE-2021-39724

CVE-2021-39724 is an Android/kernel issue: in TuningProviderBase::GetTuningTreeSet there is an out-of-bounds read due to a missing bounds check. This can enable local information disclosure with system privileges required. The vulnerability affects the Android kernel via tuning_provider_base.cc a...

CVE-2022-22268

CVE-2022-22268 concerns Samsung Knox Guard. The vulnerability is described as an incorrect implementation that, on affected devices, allows a physically proximate attacker to temporarily unlock Knox Guard by using Samsung DeX mode when Knox Guard is locked. Root cause: DeX mode runs in contexts w...

CVE-2022-44429

Technical details about CVE-2022-44429 are not publicly provided in the supplied documents. No confirmed affected products, versions, or fixes are listed here. Monitor for official disclosures and vendor advisories.

CVE-2023-21086

CVE-2023-21086 concerns a permissions bypass in Android’s NFC runtime: in the isToggleable logic of SecureNfcEnabler.java and SecureNfcPreferenceController.java , an attacker could enable NFC from a secondary/guest account without additional execution privileges or user interaction. Reported as a...

CVE-2024-23705

CVE-2024-23705 is an Android elevation-of-privilege vulnerability described across multiple feeds. Affected software is Google Android; root cause is improper input validation in multiple locations allowing local escalation of privilege. Exploitation reportedly requires user interaction (per init...

CVE-2024-23709

CVE-2024-23709 describes a heap-buffer-overflow/out-of-bounds write in multiple locations that can lead to remote information disclosure without additional execution privileges, with user interaction required for exploitation. Connected sources confirm Android’s Android Security Bulletin details:...

CVE-2024-29757

The CVE-2024-29757 vulnerability is an Elevation of Privilege issue in Google Android Pixel firmware, caused by whitelisting of debugging certificates. Affected component (Pixel Companion) can bypass certain permissions, enabling local escalation of privilege without additional execution privileg...