CVE-2024-40660

CVE-2024-40660 concerns Android’s SurfaceFlinger.cpp: setTransactionState contains a logic error that can change protected display attributes. The vulnerability enables local escalation of privilege with no extra execution privileges required and no user interaction needed. Evidence across source...

CVE-2024-43768

CVE-2024-43768 affects Google Android Skia: in SkDeflate.cpp’s skia_alloc_func there is an out-of-bounds write caused by an integer overflow. This could enable local escalation of privilege with no additional execution privileges and no user interaction required. Remediation: patch updates exist ...

CVE-2024-49745

CVE-2024-49745: In growData of Parcel.cpp, an out-of-bounds write may allow local privilege escalation without user interaction. Exploitation details are not provided in the documents; no active exploit status is stated. Android security bulletins (2025-01-01 and 2025-01-05 patch levels) include ...

CVE-2018-9464

CVE-2018-9464 is an Elevation of Privilege in the Google Android Kernel (Taimen bootloader) identified across multiple trackers. The vulnerability arises from a missing permission check, enabling local access to read protected files and escalate privileges with no additional execution privileges ...

CVE-2020-0242

CVE-2020-0242 describes a use-after-free in the Android media framework due to improper locking in NuPlayerDriver.cpp. The effect is local escalation of privilege in the media server with no additional execution privileges required, and exploitation requires local access (no user interaction). Af...

CVE-2020-0388

CVE-2020-0388 is an Android elevation-of-privilege issue in GnssVisibilityControl.java (createEmergencyLocationUserNotification) caused by an empty mutable PendingIntent. It enables a local attacker to bypass user interaction requirements and gain elevated privileges on Android-11/Android-10, wit...

CVE-2020-0440

CVE-2020-0440 affects Android 11 and is detailed across several sources (NVD entry and related security bulletins). The vulnerability resides in DisplayManagerService.createVirtualDisplay where a missing permission check could allow a trusted virtual display to be created, enabling local elevatio...

CVE-2020-0470

Summary of CVE-2020-0470 : A heap-based buffer overflow in the Android Media Framework function restoration.c:extend_frame_highbd can cause a out-of-bounds write, leading to remote information disclosure with no full compromise, requiring some user interaction for exploitation. Affected products/...

CVE-2021-0391

CVE-2021-0391 affects Android Open Source Project: the vulnerability resides in the UI flow of ChooseTypeAndAccountActivity (onCreate in ChooseTypeAndAccountActivity.java). It allows learning whether an account exists via a tapjacking/overlay attack, without requiring permissions. Impact: local e...

CVE-2021-0393

CVE-2021-0393 affects Android: out-of-bounds write in Scanner::LiteralBuffer::NewCapacity (scanner.cc) caused by an integer overflow. This could allow remote code execution when a malicious PAC file is supplied, without extra privileges and without user interaction. Affected Android versions incl...

CVE-2021-0485

CVE-2021-0485 : In Android 11, the getMinimalSize path in PipBoundsAlgorithm.java allows a permissions bypass that could bypass restrictions on background processes, enabling local escalation of privilege with no additional execution privileges and no user interaction required. The issue is docum...

CVE-2021-0505

CVE-2021-0505 affects Android 11 (Settings) with a missing permission check that could allow disabling an always-on VPN, enabling local elevation of privilege without user interaction. Documents consistently describe a local, low-exploitability EoP risk; no explicit exploit details or fixes are p...

CVE-2021-0585

CVE-2021-0585 is a documented Android vulnerability affecting Android 8.1–11 where an out-of-bounds write can occur in beginWrite/beginRead of MessageQueueBase.h due to improper input validation. This could enable local escalation of privilege to a system-level context without user interaction. T...

CVE-2021-0597

CVE-2021-0597 describes an information-disclosure issue in Android where SipService.java’s notifyProfileAdded/notifyProfileRemoved can expose SIP account names due to a missing permission check. The vulnerability enables local information disclosure without extra execution privileges, and exploit...

CVE-2021-0601

CVE-2021-0601 : Android Media Framework vulnerability in encodeFrames of avc_enc_fuzzer.cpp enables a possible out-of-bounds write due to a double free, leading to local information disclosure with no special privileges required. Exploitation requires no user interaction. Affected products/versio...

CVE-2021-0685

CVE-2021-0685 affects Android 11. In ParsedIntentInfo.java, there is a parcel serialization/deserialization mismatch due to unsafe deserialization, enabling local elevation of privilege with no extra execution privileges required. Exploitation requires local access; user interaction is not needed...

CVE-2021-0891

CVE-2021-0891 affects the PowerVR-GPU driver in Android. An unprivileged app can trigger the driver to return uninitialized heap memory, enabling information disclosure. Exploitation is possible without privileges or user interaction over network. The issue is mapped in Android’s 2022-08-01/08-05...

CVE-2021-39716

CVE-2021-39716 is present in multiple feeds. The Pixel Update Bulletin categorizes it under Modem with type ID and Moderate severity, indicating a Modem-related issue in Pixel devices; remediation is via Google’s 2022-03-05 patch level. However, the NVD entry lists the affected component as Andro...

CVE-2021-39722

CVE-2021-39722 affects ProtocolStkProactiveCommandAdapter::Init in protocolstkadapter.cpp, with an out-of-bounds read caused by an incorrect bounds check. This could allow local information disclosure and requires system privileges, with no user interaction needed. Connected sources (OSV entry) c...

CVE-2021-39729

The CVE-2021-39729 issue affects the TitanM chip in Android, caused by a missing bounds check that enables an out-of-bounds write. This can lead to local privilege escalation with System execution privileges required, and exploitation does not require user interaction. Documents consistently desc...

CVE-2021-39732

CVE-2021-39732 affects the Android kernel component copy_io_entries in lwis_ioctl.c. It describes an out-of-bounds write caused by an integer overflow, which could enable local privilege escalation without user interaction. The available connected documents confirm the issue’s presence in Android...

CVE-2021-39733

CVE-2021-39733 affects the Android kernel audio path (audiometrics.c) via amcs_cdev_unlocked_ioctl. The vulnerability is a possible out-of-bounds write caused by improper input validation, which could enable local elevation of privilege to SYSTEM if exploited. Exploitation is described as local w...

CVE-2022-20237

The CVE-2022-20237 entry affects Android kernel code, specifically the BuildDevIDResponse function in miscdatabuilder.cpp. A missing bounds check can cause an out-of-bounds write, which the provided documents state could enable remote code execution without extra privileges or user interaction. T...

CVE-2022-20437

CVE-2022-20437 affects Android Messaging. The issue is a denial-of-service vulnerability caused by an unauthorized broadcast within Messaging, leading to Local DoS on affected devices. Affected platform: Google Android (Android OS family with Messaging component). Root cause described as a flaw i...

CVE-2022-32619

The CVE-2022-32619 issue is an out-of-bounds write in MediaTek’s keyinstall component caused by an incorrect bounds check, enabling local escalation of privilege with System-level privileges required; exploitation reportedly does not require user interaction. The vulnerability is identified in Me...

CVE-2022-42756

CVE-2022-42756 concerns a buffer overflow in the sensor driver caused by a missing bounds check, potentially enabling local denial of service in the kernel. The primary sources (NVD, Red Hat, PRION, cvelist, and Android bulletin) describe the issue consistently as a buffer overflow in the sensor ...

CVE-2023-21366

Technical details (affected products, exact vulnerable component, versions, exploit specifics) are not publicly available in the provided Connected documents for CVE-2023-21366. Monitor for updates.

CVE-2023-45775

CVE-2023-45775 describes an out-of-bounds write in CreateAudioBroadcast within broadcaster.cc that enables local privilege escalation without user interaction. Affected component appears in Android source code; vulnerability details are consistent across multiple sources (NVD, Red Hat, CNVD, OSV)...

CVE-2024-23696

The CVE-2024-23696 issue is tied to the RGXCreateZSBufferKM function in rgxta3d.c, where a use-after-free leads to possible arbitrary code execution and local elevation of privilege in the kernel. Exploitation reportedly requires local access with no extra privileges and no user interaction. Conn...

CVE-2024-25987

The CVE-2024-25987 entry describes an out-of-bounds write in the pt_sysctl_command function of pt.c due to an incorrect bounds check. This can enable local privilege escalation with system execution privileges needed, and exploitation does not require user interaction. The available documents do ...

CVE-2024-27206

CVE-2024-27206 describes a potential out-of-bounds read caused by a missing bounds check, enabling remote information disclosure without privileges or user interaction. The connected sources reference this issue in the context of Google/Pixel Android security updates, but the provided documents d...

CVE-2024-44093

CVE-2024-44093 describes a memory corruption vulnerability in the function ppmp_unprotect_buf within drm/code/drm_fw.c. Exploitation could enable local privilege escalation without additional execution privileges or user interaction. The issue is referenced across multiple feeds (NVD, Red Hat, CV...

CVE-2020-0247

CVE-2020-0247 affects Android devices via Threshold::getHistogram in ImageProcessHelper.java. A crash loop could cause local denial of service with user interaction required for exploitation; no exploit details are provided. Affected Android versions listed: 8.0, 8.1, and 10. Patching guidance co...

CVE-2020-0252

CVE-2020-0252 is a memory-corruption (use-after-free) issue affecting the MediaTek Multimedia Processing Driver in Google Android. The Red Hat/Red Hat-derived and CVE catalogs classify it as an Elevation of Privilege (High) vulnerability. The Android security bulletin for 2020-08-01/08-05 lists M...

CVE-2020-0463

CVE-2020-0463 affects Android Bluetooth SDP server (sdp_server_handle_client_req in sdp_server.cc). It describes a possible out-of-bounds read due to missing bounds checks, leading to remote information disclosure without added privileges or user interaction. Affected Android versions include 8.0...

CVE-2021-0328

CVE-2021-0328 describes a Bluetooth vulnerability in Android’s GattService.java where onBatchScanReports and deliverBatchScan fail to perform a required permissions check. This permits retrieval of Bluetooth scan results without the necessary permissions, enabling local escalation of privilege wi...

CVE-2021-0487

CVE-2021-0487 affects Android 11 (Framework) where CalendarDebugActivity.java could export calendar data to SD card via a tapjacking/overlay attack, enabling local elevation of privilege without user interaction. The Android security bulletin notes this under Framework with Updated AOSP versions ...

CVE-2021-0508

CVE-2021-0508 describes a race-condition–driven use-after-free in DrmPlugin.cpp. The flaw affects Android 8.1–11 and can enable local escalation of privilege with no additional execution privileges required and without user interaction. The provided sources (NVD/NVD-derived, OSV entry) confirm th...

CVE-2021-0573

Summary: CVE-2021-0573 affects the asf extractor on Android (notably MediaTek components). The root cause is an out-of-bounds write due to a missing bounds check, enabling local escalation of privilege with no user interaction. Impact (as stated): local privilege escalation with partial confident...

CVE-2021-0580

CVE-2021-0580 pertains to a vulnerability in the Android WiFi driver (MediaTek component) where a missing bounds check enables an out-of-bounds read, potentially allowing remote information disclosure to a proximal attacker without extra privileges or user interaction. The issue is described as a...

CVE-2021-0590

CVE-2021-0590 affects Android components where in NetworkMonitor.java’s sendNetworkConditionsBroadcast a privileged app could obtain WiFi BSSID/SSID without location permissions due to a missing permission check. The impact is local information disclosure with system-level privileges required; ex...

CVE-2021-0595

The CVE-2021-0595 issue affects Android (Framework) via the RootWindowContainer.lockAllProfileTasks path, enabling local elevation of privilege by accessing the work profile without a PIN after login. Exploitation is local and requires no user interaction. Affected Android versions include 8.1, 9...

CVE-2021-0687

Technical details about CVE-2021-0687 are not provided in the connected documents. The available description notes an Android ANR/DoS scenario arising from input validation in Layout.java; no product/version specifics or remediation are included here. Monitor for updates.

CVE-2021-39727

CVE-2021-39727 describes an information-disclosure vulnerability in Android’s acropora/app/identity/libeic/EicPresentation.c, caused by a race condition in the function eicPresentationRetrieveEntryValue . The issue can enable local information disclosure with System-level privileges and does not ...

CVE-2022-20430

CVE-2022-20430 is mapped to UNISOC components, with the vulnerability labeled as High severity in Telephony. The root cause per provided documents is a missing authorization/permission check in a system service, enabling Local Privilege Elevation. The Android context is indicated, with references...

CVE-2022-27836

CVE-2022-27836 impacts Samsung Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1, due to improper access control and path traversal. This allows local attackers to access arbitrary system files; the patch adds validation logic to prevent arbitrary file access (security u...

CVE-2022-44425

CVE-2022-44425 is a UNISOC/ wlan-driver issue described as a missing bounds check in the wlan driver, leading to local denial of service in wlan services. Public sources (NVD/NIST entry) assign a CVSSv3.1 base score of 5.5 (Medium) with LOCAL attack vector, LOW attack complexity, LOW privileges r...

CVE-2023-20848

The CVE-2023-20848 entry concerns an out-of-bounds read in imgsys_cmdq caused by missing valid range checking, enabling local escalation of privileges with user interaction required. Documented impact is high for confidentiality/integrity/availability, and a patch ID (ALPS07340433) is noted as th...

CVE-2023-21035

The connected Nessus entry (UNPATCHED_CVE_2023_21035.NASL) provides concrete technical details: CVE-2023-21035 affects Android 13 and is linked to BackupHelper.java, where a permissions-bypass could allow an app to access permissions previously granted to another app sharing the same package name...

CVE-2023-21254

CVE-2023-21254 affects Android Framework in the getCurrentState path of OneTimePermissionUserManager.java. The issue allows holding one-time permissions after the app is killed due to a logic error, enabling local privilege escalation with no extra execution privileges and without user interactio...