CVE-2024-25993

CVE-2024-25993 involves a missing bounds check in the tmu_reset_tmu_trip_counter function, causing an out-of-bounds write that could enable local privilege escalation with no extra privileges or user interaction required. Public docs attribute this to Pixel/Android components and classify the imp...

CVE-2024-31318

CVE-2024-31318 affects Android’s CompanionDeviceManagerService.java. The flaw is a missing permission check that could allow pairing a companion device without user acceptance, enabling local elevation of privilege with no extra execution privileges required. User interaction is not needed for ex...

CVE-2025-20635

CVE-2025-20635 concerns MediaTek V6 DA with a missing bounds check in the DA module, enabling a possible out-of-bounds write and local elevation of privilege if an attacker has physical access to the device. Exploitation requires user interaction; no remote/vector details are provided. The patch ...

CVE-2014-9803

CVE-2014-9803 affects the Linux kernel and Android deployments using affected kernels prior to 3.15-rc5-next-20140519 (notably on Nexus 5X/6P before 2016-07-05). The issue arises in arch/arm64/include/asm/pgtable.h where execute-only pages are mishandled, enabling a local attacker to gain privile...

CVE-2017-0675

CVE-2017-0675 is a remote code execution vulnerability in the Android media framework affecting Android 6.0.1, 7.0, 7.1.1, and 7.1.2. The issue is described as RCE in the media framework with impact to confidentiality, integrity, and availability. The Android bulletin indicates that the most seve...

CVE-2019-14783

CVE-2019-14783 affects Samsung mobile devices running N7.x, O8.x, and P9.0 software. The issue resides in the FotaAgent component and allows a malicious application to create privileged files, indicating an elevation of privilege risk within the FotaAgent handling of file creation. The connected ...

CVE-2019-2020

CVE-2019-2020 affects Android devices and is caused by a missing bounds check in llcp_dlc_proc_rr_rnr_pdu within the llcp_dlc.cc module, leading to a possible out-of-bounds read and local information disclosure. Affected releases include Android-7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9.0. The vulnerabi...

CVE-2020-0238

CVE-2020-0238 affects the Android Framework in the AccountTypePreferenceLoader’s updatePreferenceIntents. The issue is a race condition that can enable a confused deputy, allowing local escalation of privilege and the launch of privileged activities without extra execution privileges. Impact is d...

CVE-2020-0385

CVE-2020-0385 affects Android via the Media Framework component, specifically in eas_mdls.c Parse_insh, where an out-of-bounds write could disclose information. Exploitation requires user interaction; impact is information disclosure without remote code execution. Affected Android versions includ...

CVE-2021-0692

CVE-2021-0692 affects Android (Android-9/10/11) via a flaw in FirstScreenBroadcast.java: sendBroadcastToInstaller can trigger an activity launch through an unsafe PendingIntent, enabling local elevation of privilege with no extra execution privileges required. The issue is described as requiring ...

CVE-2021-0704

CVE-2021-0704 (Google Android): A local information-disclosure vulnerability in AccountManagerService.java allows retrieving accounts without required permissions due to a permissions bypass. Affected Android versions include 9, 10, and 11. Exploitation is local and does not require user interact...

CVE-2021-0943

CVE-2021-0943 affects Android, with the MMU_MapPages function showing an out-of-bounds write due to improper input validation. This could lead to local escalation of privilege without extra execution privileges, and exploitation requires no user interaction. Sources consistently describe the vuln...

CVE-2021-39620

CVE-2021-39620 affects Android (Android 11 and 12) and is caused by a memory corruption in ipcSetDataReference within Parcel.cpp due to a use-after-free, enabling local privilege escalation with no user interaction. The Red Hat/OSV entries corroborate a local EoP risk and list the component as An...

CVE-2021-39815

CVE-2021-39815 concerns the PowerVR-GPU driver in Android. Unprivileged apps can allocate pinned memory, unpin it, and continue using the page in GPU calls, allowing kernel memory corruption without privileges. CVSSv3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H assigns a base score of 9.8 (CRITICAL) wi...

CVE-2022-47461

CVE-2022-47461 affects the telephony stack (com.android.phone) where a missing permission check in the telephone service can enable local elevation of privilege. The CVSS data indicate LOCAL attack vector, requiring HIGH privileges and potentially impacting confidentiality, integrity, and availab...

CVE-2023-21086

CVE-2023-21086 concerns a permissions bypass in Android’s NFC runtime: in the isToggleable logic of SecureNfcEnabler.java and SecureNfcPreferenceController.java , an attacker could enable NFC from a secondary/guest account without additional execution privileges or user interaction. Reported as a...

CVE-2023-21216

CVE-2023-21216 affects the Linux kernel memory path (PMRChangeSparseMemOSMem in physmem_osmem_linux.c) where a use-after-free can cause arbitrary code execution, enabling local escalation of privilege with no additional privileges and no user interaction. The NVD entry rates this as CRITICAL (CVS...

CVE-2023-35667

CVE-2023-35667 affects Android’s NotificationAccessSettings.java, specifically the updateList method. The logic error can allow hiding approved notification listeners, enabling local elevation of privilege with no extra execution privileges and no user interaction required. The vulnerability is d...

CVE-2023-35668

The CVE-2023-35668 entry affects Android’s Notification.java visitUris path, where a confused deputy could cause an image display from another user. This is an information-disclosure vulnerability with local impact and no execution privileges required (no user interaction). Connected sources corr...

CVE-2023-40092

CVE-2023-40092 affects the Android Framework, specifically the verifyShortcutInfoPackage function in ShortcutService.java. The Red Hat/Android/NVD entries describe a confused deputy scenario that could allow an authenticated local attacker to view another user’s image, causing local information d...

CVE-2024-20027

CVE-2024-20027 concerns a MediaTek MediaTek da module issue described as an out-of-bounds write due to improper input validation. This could allow local escalation of privilege with SYSTEM execution privileges required; exploitation reportedly does not require user interaction. The available docu...

CVE-2024-31312

CVE-2024-31312 affects Google Android Framework. It describes a local information disclosure due to a missing permission check in multiple locations, allowing access to played media without extra privileges and without user interaction. The issue is listed in the Android Security Bulletin and is ...

CVE-2024-31326

CVE-2024-31326 affects the Android Framework. The issue is a logic error in policy migration code that can lead to local elevation of privilege without extra privileges or user interaction. The Android bulletin notes this as an EoP vulnerability with High severity, and lists updated AOSP versions...

CVE-2018-9385

CVE-2018-9385 affects the Linux/Android kernel: in driver_override_store of bus.c there is an out-of-bounds write due to an incorrect bounds check, enabling local privilege escalation with SYSTEM privileges. Exploitation reportedly does not require user interaction. Connected advisories (Unity Li...

CVE-2020-0400

CVE-2020-0400 affects Android (Android-10/Android-11) in the NotificationMgr.showDataRoamingNotification path. The root cause is an unsafe PendingIntent, enabling a local permission bypass that could disclose data. Exploitation is local with no user interaction required (UI: NONE). The issue is c...

CVE-2020-0422

CVE-2020-0422: Android system/framework vulnerability in NotificationImportExportListener.java due to an unsafe PendingIntent enables local information disclosure of contacts data with no user interaction; the issue is listed under the 2020-10-01/10-05 patch levels in the Android security bulleti...

CVE-2020-0449

The CVE affects Android’s Bluetooth stack, specifically the btm_sec_disconnected path in btm_sec.cc. A use-after-free leads to memory corruption that could enable remote code execution in the Bluetooth server, requiring user interaction to exploit. Affected Android versions include 8.0–11 (Androi...

CVE-2021-0329

CVE-2021-0329: In several native functions called by AdvertiseManager.java, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth server on Android 8.1–11. Exploitation is possible with local privileges; no user in...

CVE-2021-0482

CVE-2021-0482 concerns Android 11’s Media Framework. In BinderDiedCallback within MediaCodec.cpp there is memory corruption due to a use-after-free, enabling local elevation of privilege with no additional execution privileges required and no user interaction needed. The vulnerability is categori...

CVE-2021-0484

CVE-2021-0484: In readVector of IMediaPlayer.cpp there is a missing bounds check allowing a read of uninitialized heap data, leading to local information disclosure without extra privileges. Affected: Android 8.1, 9, 10, 11. Exploitation does not require user interaction; mitigation in the linked...

CVE-2021-0486

CVE-2021-0486 concerns Android 10–11 where, in the PermissionManagerService.java more precisely in onPackageAddedInternal, there is a permissions bypass that allows possible access to external storage. The root cause is a local-elevation-of-privilege path that does not require user interaction. T...

CVE-2021-0582

CVE-2021-0582 is an information-disclosure vulnerability in the Android Wi‑Fi driver caused by a missing bounds check that enables a remote attacker in adjacent network range to read memory without executing code or requiring user interaction. Impact is confidentiality loss (high per CVSS‑3.1) wi...

CVE-2021-0585

CVE-2021-0585 is a documented Android vulnerability affecting Android 8.1–11 where an out-of-bounds write can occur in beginWrite/beginRead of MessageQueueBase.h due to improper input validation. This could enable local escalation of privilege to a system-level context without user interaction. T...

CVE-2021-0601

CVE-2021-0601 : Android Media Framework vulnerability in encodeFrames of avc_enc_fuzzer.cpp enables a possible out-of-bounds write due to a double free, leading to local information disclosure with no special privileges required. Exploitation requires no user interaction. Affected products/versio...

CVE-2021-0685

CVE-2021-0685 affects Android 11. In ParsedIntentInfo.java, there is a parcel serialization/deserialization mismatch due to unsafe deserialization, enabling local elevation of privilege with no extra execution privileges required. Exploitation requires local access; user interaction is not needed...

CVE-2021-0966

CVE-2021-0966 affects Android 11 and 12. It arises from BuildParcelFields in generate_cpp.cpp, allowing a crafted parcelable to reveal uninitialized memory in a target process and cause local information disclosure across Binder transactions without extra privileges or user interaction. Impact is...

CVE-2021-39657

CVE-2021-39657 concerns an out-of-bounds read in the Android kernel’s ufshcd_eh_device_reset_handler (ufshcd.c). The issue enables local information disclosure with System privileges required, and does not require user interaction to exploit. The provided connected documents reiterate the same de...

CVE-2021-39725

CVE-2021-39725 affects the Android kernel component gasket_page_table.c, specifically the function gasket_free_coherent_memory_all. The issue is memory corruption caused by a double free, enabling local escalation of privilege with System-level execution privileges required; exploitation is descr...

CVE-2021-39732

CVE-2021-39732 affects the Android kernel component copy_io_entries in lwis_ioctl.c. It describes an out-of-bounds write caused by an integer overflow, which could enable local privilege escalation without user interaction. The available connected documents confirm the issue’s presence in Android...

CVE-2021-39736

CVE-2021-39736 affects the Android kernel: in lwis_ioctl.c and lwis_periodic_io.c, an integer overflow can cause an out-of-bounds write, enabling local elevation of privileges with SYSTEM access. Exploitation details are not provided in the documents, and no user interaction is required for explo...

CVE-2022-20209

CVE-2022-20209 affects Android 12L in the hme_add_new_node_to_a_sorted_array function of hme_utils.c. The issue is an out-of-bounds read caused by a heap buffer overflow, enabling remote information disclosure without additional execution privileges. Exploitation is described as not requiring use...

CVE-2022-20391

CVE-2022-20391 is listed in the Android 2022-09-01 bulletin under Unisoc components with a High severity. The provided documents do not include explicit root-cause, exploit details, or affected Android versions beyond the bulletin’s context. remediation guidance, where provided, is to apply the 2...

CVE-2022-33729

CVE-2022-33729 affects Samsung devices with NFC ConfirmConnectActivity. The issue is an improper restriction of a broadcasting Intent in ConfirmConnectActivity, which leaks the MAC address of the connected Bluetooth device. The vulnerability is associated with NFC prior to SMR Aug-2022 Release 1....

CVE-2022-44437

CVE-2022-44437 affects Android components related to the messaging service, where a missing permission check could allow local denial of service in the contacts service with no extra privileges. The base CVSS3.1 vector indicates Local access, Low attack complexity and Low privileges required, wit...

CVE-2022-47459

CVE-2022-47459 concerns a vulnerability in the WLAN driver where a missing parameter check can lead to a local denial of service in WLAN services. The concrete details across connected sources consistently identify the affected component as the WLAN driver and describe the root cause as an inadeq...

CVE-2023-21249

The vulnerability is in Google Android's Framework, specifically OneTimePermissionUserManager.java, where a permissions bypass can cause a one‑time permission to be retained. This could enable local elevation of privilege with User execution privileges required and no user interaction. Public tec...

CVE-2023-21366

Technical details (affected products, exact vulnerable component, versions, exploit specifics) are not publicly available in the provided Connected documents for CVE-2023-21366. Monitor for updates.

CVE-2023-40084

CVE-2023-40084 involves a memory corruption vulnerability caused by a use-after-free in the MDnsSdListener.cpp path. The flaw can permit local escalation of privilege without additional execution privileges and without user interaction, as described across multiple sources (NVD/Red Hat/Android bu...

CVE-2023-45776

CVE-2023-45776 affects Android in the CreateAudioBroadcast function (broadcaster.cc) with an out-of-bounds write caused by a missing bounds check. This enables local escalation of privilege (attack vector: local; user interaction: none; required privileges: low; impact: high). Public references a...

CVE-2023-45781

CVE-2023-45781 is described across multiple connected sources as an information-disclosure vulnerability in Google Android, caused by an out-of-bounds read in parse_gap_data() within utils.cc. Exploitation requires local access (local Vector) with low privileges and does not require user interact...