CVE-2023-35668

The CVE-2023-35668 entry affects Android’s Notification.java visitUris path, where a confused deputy could cause an image display from another user. This is an information-disclosure vulnerability with local impact and no execution privileges required (no user interaction). Connected sources corr...

CVE-2024-20027

A possible out of bounds write exists in da due to improper input validation. This vulnerability could allow for local escalation of privilege , though System execution privileges are required. Exploitation does not require user interaction. The issue is tracked under Patch ID: ALPS08541632 and I...

CVE-2024-20145

A security vulnerability exists in MediaTek Chipsets within the V6 DA module due to a missing bounds check. This flaw allows for a possible out-of-bounds write , which could lead to local escalation of privilege . Exploitation requires physical access to the device and user interaction , but no a...

CVE-2024-22008

A vulnerability in the config_gov_time_windows function of tmu.c allows for a possible out of bounds write due to a missing bounds check. This flaw could lead to a local escalation of privilege without requiring additional execution privileges or user interaction. While the specific software prod...

CVE-2024-23708

Google Android is impacted by a local elevation of privilege vulnerability in NotificationManagerService.java . The flaw allows an attacker to access clipboard messages without the system displaying the required toast message in multiple functions. Exploitation does not require additional executi...

CVE-2017-0381

CVE-2017-0381 is an information-disclosure vulnerability in silk/NLSF_stabilize.c within libopus used by Mediaserver, affecting Android versions 5.0.2–7.1. It could allow a local malicious app to access data outside its permissions. The concrete root: a flaw in Opus handling as described in the C...

CVE-2020-0238

CVE-2020-0238 affects the Android Framework in the AccountTypePreferenceLoader’s updatePreferenceIntents. The issue is a race condition that can enable a confused deputy, allowing local escalation of privilege and the launch of privileged activities without extra execution privileges. Impact is d...

CVE-2020-0242

CVE-2020-0242 describes a use-after-free in the Android media framework due to improper locking in NuPlayerDriver.cpp. The effect is local escalation of privilege in the media server with no additional execution privileges required, and exploitation requires local access (no user interaction). Af...

CVE-2020-0469

CVE-2020-0469 affects Android 11; the issue is in addEscrowToken within LockSettingsService.java, causing a logic error that may lose the synthetic password and trigger a local denial-of-service without extra privileges or user interaction. Public references in the NVD/RH/OSV entries confirm the ...

CVE-2021-0328

CVE-2021-0328 describes a Bluetooth vulnerability in Android’s GattService.java where onBatchScanReports and deliverBatchScan fail to perform a required permissions check. This permits retrieval of Bluetooth scan results without the necessary permissions, enabling local escalation of privilege wi...

CVE-2021-0338

CVE-2021-0338 affects Android (Android-10 and Android-11) in the SystemSettingsValidators component. It describes a denial-of-service condition caused by missing bounds checks on UI settings, enabling a local DoS with user-execution privileges. Exploitation is possible without user interaction. M...

CVE-2021-0573

Summary: CVE-2021-0573 affects the asf extractor on Android (notably MediaTek components). The root cause is an out-of-bounds write due to a missing bounds check, enabling local escalation of privilege with no user interaction. Impact (as stated): local privilege escalation with partial confident...

CVE-2021-0580

CVE-2021-0580 pertains to a vulnerability in the Android WiFi driver (MediaTek component) where a missing bounds check enables an out-of-bounds read, potentially allowing remote information disclosure to a proximal attacker without extra privileges or user interaction. The issue is described as a...

CVE-2021-0585

CVE-2021-0585 is a documented Android vulnerability affecting Android 8.1–11 where an out-of-bounds write can occur in beginWrite/beginRead of MessageQueueBase.h due to improper input validation. This could enable local escalation of privilege to a system-level context without user interaction. T...

CVE-2021-0590

CVE-2021-0590 affects Android components where in NetworkMonitor.java’s sendNetworkConditionsBroadcast a privileged app could obtain WiFi BSSID/SSID without location permissions due to a missing permission check. The impact is local information disclosure with system-level privileges required; ex...

CVE-2021-0891

CVE-2021-0891 affects the PowerVR-GPU driver in Android. An unprivileged app can trigger the driver to return uninitialized heap memory, enabling information disclosure. Exploitation is possible without privileges or user interaction over network. The issue is mapped in Android’s 2022-08-01/08-05...

CVE-2021-0938

CVE-2021-0938 is described as a by-design bypass in memzero_explicit of compiler-clang.h, enabling a local information disclosure due to uninitialized data in the kernel/Android context. The issue is exploitable with local access and does not require user interaction, per the description. The Con...

CVE-2021-0943

CVE-2021-0943 affects Android, with the MMU_MapPages function showing an out-of-bounds write due to improper input validation. This could lead to local escalation of privilege without extra execution privileges, and exploitation requires no user interaction. Sources consistently describe the vuln...

CVE-2021-39722

CVE-2021-39722 affects ProtocolStkProactiveCommandAdapter::Init in protocolstkadapter.cpp, with an out-of-bounds read caused by an incorrect bounds check. This could allow local information disclosure and requires system privileges, with no user interaction needed. Connected sources (OSV entry) c...

CVE-2021-39815

CVE-2021-39815 concerns the PowerVR-GPU driver in Android. Unprivileged apps can allocate pinned memory, unpin it, and continue using the page in GPU calls, allowing kernel memory corruption without privileges. CVSSv3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H assigns a base score of 9.8 (CRITICAL) wi...

CVE-2022-32598

CVE-2022-32598 affects the Widevine component, where an incorrect bounds check can cause an out-of-bounds write. This enables local escalation to SYSTEM privileges with no user interaction required. A patch/mitigation reference is PATCH ID: ALPS07446228 (Issue ALPS07446228); no further product/ve...

CVE-2023-21342

CVE-2023-21342 is an Android framework issue in RemoteSpeechRecognitionService that enables launching an activity from the background due to a logic error. This causes local elevation of privilege with no additional privileges or user interaction required. The CVSS vector (LOCAL, LOW attack compl...

CVE-2023-35667

CVE-2023-35667 affects Android’s NotificationAccessSettings.java, specifically the updateList method. The logic error can allow hiding approved notification listeners, enabling local elevation of privilege with no extra execution privileges and no user interaction required. The vulnerability is d...

CVE-2024-20025

A vulnerability in the da component of MediaTek hardware can lead to an out of bounds write due to an integer overflow . This flaw allows for a local escalation of privilege (EoP) and does not require user interaction for exploitation. The issue is addressed in the 2024-03-05 security patch level...

CVE-2024-20026

A vulnerability exists in da where improper input validation can lead to local information disclosure . Exploitation of this issue requires System execution privileges , and no user interaction is necessary. Remediation is available via Patch ID: ALPS08541632 (Issue ID: ALPS08541632). No specific...

CVE-2024-25987

A security vulnerability in the PT kernel component of Google Pixel devices allows for a local elevation of privilege (EoP) . The root cause is an incorrect bounds check in the pt_sysctl_command function within the pt.c file, which can lead to an out-of-bounds write . Exploitation requires System...

CVE-2024-25993

A missing bounds check in the tmu_reset_tmu_trip_counter function of a Google Pixel module can lead to an out-of-bounds write . This vulnerability could allow for local escalation of privilege without requiring additional execution privileges or user interaction. While some sources identify the a...

CVE-2024-27206

A vulnerability in the Modem component of Google Pixel devices allows for an out-of-bounds read due to a missing bounds check. This flaw could lead to remote information disclosure without requiring additional execution privileges or user interaction. The issue is addressed in security patch leve...

CVE-2024-27223

A security vulnerability exists in the Modem component of Google Pixel devices, specifically within the EUTRAN_LCS_DecodeFacilityInformationElement method of the LPP_LcsManagement.c file. The issue is caused by a missing bounds check , which can result in an out-of-bounds read . This vulnerabilit...

CVE-2024-31339

CVE-2024-31339 affects Google Android: a memory corruption via use-after-free in multiple functions of StatsService.cpp can lead to local escalation of privilege with no user interaction. The issue impacts the Statsd component and is listed in Android Security Bulletin details for 2024-07-01/07-0...

CVE-2017-0675

CVE-2017-0675 is a remote code execution vulnerability in the Android media framework affecting Android 6.0.1, 7.0, 7.1.1, and 7.1.2. The issue is described as RCE in the media framework with impact to confidentiality, integrity, and availability. The Android bulletin indicates that the most seve...

CVE-2020-0377

CVE-2020-0377 targets Android Bluetooth stack: in gatt_process_read_by_type_rsp of gatt_cl.cc, a missing bounds check allows an out-of-bounds read, enabling remote information disclosure on Bluetooth servers without extra privileges. Affected: Android 8.0–11 (Android-8.0, 8.1, 9, 10, 11) per the ...

CVE-2020-0384

CVE-2020-0384 affects Android 8.0–11, with a vulnerability in the Media Framework: In Parse_art of eas_mdls.c, an incorrect bounds check allows an out-of-bounds write in the media extractor, enabling information disclosure. Exploitation requires user interaction and could occur without extra exec...

CVE-2020-0388

CVE-2020-0388 is an Android elevation-of-privilege issue in GnssVisibilityControl.java (createEmergencyLocationUserNotification) caused by an empty mutable PendingIntent. It enables a local attacker to bypass user interaction requirements and gain elevated privileges on Android-11/Android-10, wit...

CVE-2020-0413

The CVE-2020-0413 issue affects Android devices (Android 8.0–11) and is caused by a missing bounds check in gatt_process_read_by_type_rsp within gatt_cl.cc, leading to a possible out-of-bounds read that could disclose memory contents via a remote Bluetooth connection without user interaction. The...

CVE-2021-0428

CVE-2021-0428 affects Android 10 and is tied to TelephonyManager.getSimSerialNumber. The issue arises from a missing permission check, enabling a local information disclosure with no user interaction required. Multiple sources (NVD, Red Hat, OSV) confirm the vulnerability and its local attack vec...

CVE-2021-0508

CVE-2021-0508 describes a race-condition–driven use-after-free in DrmPlugin.cpp. The flaw affects Android 8.1–11 and can enable local escalation of privilege with no additional execution privileges required and without user interaction. The provided sources (NVD/NVD-derived, OSV entry) confirm th...

CVE-2021-0650

CVE-2021-0650 : In WT_InterpolateNoLoop of eas_wtengine.c, an incorrect bounds check allows an out-of-bounds read, potentially enabling remote information disclosure without extra privileges. Affected: Android 9–11 (as listed). Exploitation requires user interaction. No exploit details provided; ...

CVE-2021-0672

CVE-2021-0672 describes an information-disclosure flaw in the Android Browser app due to a missing permission check, enabling local data exposure without user interaction. Root cause: permission check omission in the Browser component; impact: local information disclosure; exploitability: local, ...

CVE-2021-0919

CVE-2021-0919 : Android systems (Android 9–11) are affected by a vulnerability in getService of IServiceManager.cpp, where an integer overflow can trigger an unhandled exception, leading to local denial of service and making the lockscreen unusable. Exploitation requires user interaction, and the...

CVE-2021-0926

CVE-2021-0926 is a vulnerability in the Android NFC path found in onCreate of NfcImportVCardActivity.java, where a missing permission check enables adding a contact without user consent. This constitutes a local elevation of privilege because it does not require additional execution privileges an...

CVE-2021-0966

CVE-2021-0966 affects Android 11 and 12. It arises from BuildParcelFields in generate_cpp.cpp, allowing a crafted parcelable to reveal uninitialized memory in a target process and cause local information disclosure across Binder transactions without extra privileges or user interaction. Impact is...

CVE-2021-39729

The CVE-2021-39729 issue affects the TitanM chip in Android, caused by a missing bounds check that enables an out-of-bounds write. This can lead to local privilege escalation with System execution privileges required, and exploitation does not require user interaction. Documents consistently desc...

CVE-2021-39814

CVE-2021-39814 affects Android kernel: in ppmp_validate_wsm of drm_fw.c there is an out-of-bounds write caused by an incorrect bounds check, enabling local privilege escalation with System execution privileges required and no user interaction. Documents indicate a local attack with high impact (C...

CVE-2022-20103

In CVE-2022-20103, aee daemon is vulnerable to information disclosure via symbolic link following, enabling local information exposure and requiring system privileges for exploitation. Exploitation reportedly does not require user interaction. The vulnerability is associated with patch ALPS063839...

CVE-2022-20108

CVE-2022-20108 concerns a vulnerability in the voice service where an out-of-bounds write occurs due to a stack-based buffer overflow. The consequence is local escalation of privilege to System level, with no user interaction required for exploitation. Public details consistently describe this as...

CVE-2022-20237

The CVE-2022-20237 entry affects Android kernel code, specifically the BuildDevIDResponse function in miscdatabuilder.cpp. A missing bounds check can cause an out-of-bounds write, which the provided documents state could enable remote code execution without extra privileges or user interaction. T...

CVE-2022-20435

CVE-2022-20435 is an Android vulnerability described as an unauthorized service in the system service that, due to missing permission checks, can lead to local elevation of privilege and potentially a system reboot. Connected OSV entries (ASB-A-242248367 and ASB-A-242248369) corroborate an unauth...

CVE-2022-47488

CVE-2022-47488 affects the spipe drive component in Unisoc chipsets, with an out-of-bounds write caused by a missing bounds check that could enable local DoS with system execution privileges. The connected documents confirm the issue but provide no publicly available fix/version details; some sou...

CVE-2023-21240

Technical details are not publicly available in the provided connected documents. CVE-2023-21240 is described as a boot loop/resource exhaustion DoS in Policy.java with no exploitation vectors, affected versions, or fixes disclosed here.