CVE-2024-34742

The CVE-2024-34742 issue affects Google Android, specifically a logic error in shouldWrite within OwnersData.java that can prevent MDM policies from being persisted, potentially causing a local denial of service without extra privileges. The vulnerability is described across multiple sources (NVD...

CVE-2022-44425

CVE-2022-44425 is a UNISOC/ wlan-driver issue described as a missing bounds check in the wlan driver, leading to local denial of service in wlan services. Public sources (NVD/NIST entry) assign a CVSSv3.1 base score of 5.5 (Medium) with LOCAL attack vector, LOW attack complexity, LOW privileges r...

CVE-2024-20100

A high-severity vulnerability exists in MediaTek chips within the wlan driver component. The root cause is improper input validation , which can lead to an out-of-bounds write . Exploitation of this flaw could result in remote code execution (RCE) without requiring additional execution privileges...

CVE-2024-20106

A vulnerability exists in the Multimedia Memory Management Unit (M4U) within MediaTek microprogramming software. The root cause is a missing bounds check resulting from a data type mixing error , which can lead to out-of-bounds writes . This flaw could allow an attacker to achieve local escalatio...

CVE-2024-31332

CVE-2024-31332 affects Google Android Framework components, where a missing permission check allows bypassing restrictions on adding new Wi‑Fi connections. This enables local elevation of privilege with no extra execution privileges and no user interaction. Root cause: permission check gaps in mu...

CVE-2024-34720

CVE-2024-34720 affects Google Android: a logic error in com_android_internal_os_ZygoteCommandBuffer.cpp (ZygoteCommandBuffer.nativeForkRepeatedly) may enable arbitrary code execution in any app’s zygote processes, causing local privilege escalation with no extra privileges or user interaction req...

CVE-2024-43083

Modes C: CVE-2024-43083 affects Google Android WiFi stack. The vulnerability is in the validate() function of WifiConfigurationUtil.java and can cause a persistent denial of service via resource exhaustion, leading to local DoS with no required user interaction. Documented impact is DoS with avai...

CVE-2017-0406

CVE-2017-0406 is a remote code execution vulnerability in Android's Mediaserver (libhevc) that can be triggered by processing a specially crafted media file, leading to memory corruption and potential code execution within the Mediaserver process. Reported impact is critical (CVE-2017-0406) with ...

CVE-2019-2007

CVE-2019-2007 affects Android Audio stack via FifoControllerBase.cpp, where getReadIndex/getWriteIndex allow an out-of-bounds write caused by an integer overflow. This leads to local elevation of privilege in the audio server with no extra user interaction. Affected Android versions include 8.1 a...

CVE-2020-0247

CVE-2020-0247 affects Android devices via Threshold::getHistogram in ImageProcessHelper.java. A crash loop could cause local denial of service with user interaction required for exploitation; no exploit details are provided. Affected Android versions listed: 8.0, 8.1, and 10. Patching guidance co...

CVE-2020-0376

CVE-2020-0376 has concrete details in connected documents: it is an out-of-bounds read due to a missing bounds check affecting MediaTek components in Android, specifically MTK ISP within Android SoC. The root cause is a missing bounds check leading to a possible local information disclosure; expl...

CVE-2020-0415

CVE-2020-0415 affects Android’s SystemUI: a permission bypass via an unsafe PendingIntent could enable local information disclosure of contacts with user privileges, requiring no user interaction for exploitation. The vulnerability is listed in the 2020-10 Android security bulletin under System a...

CVE-2020-0443

CVE-2020-0443 affects Android via LocaleList.LocaleList.java. The issue is a forced reboot from an uncaught exception, enabling local DoS with no user interaction required. Affected versions include Android 8.0–11; the vulnerability is listed under the 2020-11-01/11-05 patch levels in the Android...

CVE-2021-0390

CVE-2021-0390 is described as a local elevation-of-privilege issue in Android arising from a missing permission check in multiple methods of WifiNetworkSuggestionsManager.java. The flaw could allow a background user on the same device, with no additional execution privileges, to modify the set of...

CVE-2021-0472

CVE-2021-0472 concerns a local elevation-of-privilege in Android 9–11 due to a permissions bypass in shouldLockKeyguard (LockTaskController.java) that could allow exiting App Pinning without a PIN and without user interaction. The issue is limited to the Framework component and is described as en...

CVE-2021-0482

CVE-2021-0482 concerns Android 11’s Media Framework. In BinderDiedCallback within MediaCodec.cpp there is memory corruption due to a use-after-free, enabling local elevation of privilege with no additional execution privileges required and no user interaction needed. The vulnerability is categori...

CVE-2021-0487

CVE-2021-0487 affects Android 11 (Framework) where CalendarDebugActivity.java could export calendar data to SD card via a tapjacking/overlay attack, enabling local elevation of privilege without user interaction. The Android security bulletin notes this under Framework with Updated AOSP versions ...

CVE-2021-0517

CVE-2021-0517 affects Google Android ConnectivityService.java (Android 11). In updateCapabilities, a logic error can lead to an incorrect network state determination, biasing networking tasks to non-VPN networks and enabling remote information disclosure without additional privileges. Exploitatio...

CVE-2021-0872

CVE-2021-0872 affects Imagination Technologies PowerVR kernel driver (PowerVR-GPU) via PVRSRVBridgeRGXKickVRDM. The issue is a missing size check that enables an integer overflow, leading to out-of-bounds heap access and local escalation of privilege with no extra privileges or user interaction r...

CVE-2021-39620

CVE-2021-39620 affects Android (Android 11 and 12) and is caused by a memory corruption in ipcSetDataReference within Parcel.cpp due to a use-after-free, enabling local privilege escalation with no user interaction. The Red Hat/OSV entries corroborate a local EoP risk and list the component as An...

CVE-2022-20430

CVE-2022-20430 is mapped to UNISOC components, with the vulnerability labeled as High severity in Telephony. The root cause per provided documents is a missing authorization/permission check in a system service, enabling Local Privilege Elevation. The Android context is indicated, with references...

CVE-2022-21755

The CVE-2022-21755 entry concerns a MediaTek WLAN driver vulnerability: an out-of-bounds read caused by an incorrect bounds check. This could allow local information disclosure and potentially system-privilege execution, with no user interaction required. Patch ALPS06545464/Issue ALPS06545464 is ...

CVE-2022-32596

CVE-2022-32596 describes an out-of-bounds write in Widevine caused by an incorrect bounds check, enabling possible local escalation to System privileges. Exploitation is described as requiring no user interaction (ATT&CK-like vector: local) with high confidentiality, integrity, and availability i...

CVE-2022-47331

CVE-2022-47331 concerns a race condition in the wlan driver. Connected document ASB-A-262503737 specifies a function lacking parameter checks that leads to an out-of-bounds write, which is tied to the same CVE entry and supports a local DoS impact via wlan services. Other connected entries reiter...

CVE-2023-45775

CVE-2023-45775 describes an out-of-bounds write in CreateAudioBroadcast within broadcaster.cc that enables local privilege escalation without user interaction. Affected component appears in Android source code; vulnerability details are consistent across multiple sources (NVD, Red Hat, CNVD, OSV)...

CVE-2024-23696

The CVE-2024-23696 issue is tied to the RGXCreateZSBufferKM function in rgxta3d.c, where a use-after-free leads to possible arbitrary code execution and local elevation of privilege in the kernel. Exploitation reportedly requires local access with no extra privileges and no user interaction. Conn...

CVE-2024-31314

CVE-2024-31314 is a DoS via resource exhaustion in multiple functions of ShortcutService.java. The issue is described across Android/Red Hat/NVD/CVE lists as a local DoS without required user interaction. Affected component is ShortcutService.java, with a persistent denial of service risk due to ...

CVE-2024-34737

CVE-2024-34737 affects Android via a logic error in ensureSetPipAspectRatioQuotaTracker within the framework’s ActivityClientController.java, potentially allowing local privilege escalation by generating unmovable/undeletable pip windows. Exploitation requires local access; user interaction is no...

CVE-2024-43084

CVE-2024-43084 is a Google Android information-disclosure flaw described across multiple sources as a confused-deputy in visitUris. Affected area is listed under Android security data with an information disclosure (ID) or library/Framework contexts, enabling local access to sensitive data withou...

CVE-2025-0078

Google Android is impacted by an elevation of privilege vulnerability (CVE-2025-0078) caused by a logic error in the main code of main.cpp. This flaw allows an attacker to bypass SELinux , potentially leading to a local escalation of privilege without requiring additional execution privileges or ...

CVE-2020-0246

CVE-2020-0246 affects Android Framework code (UiccAccessRule.getCarrierPrivilegeStatus). A missing permission check could allow local information disclosure of EID data without extra privileges; exploitation requires local access. The issue is listed in the 2020-10 Android security bulletin and w...

CVE-2020-0417

The CVE-2020-0417 entry describes a local elevation-of-privilege in Android related to GpsNetInitiatedHandler.setNiNotification. The underlying issue is an empty mutable PendingIntent that permits a permissions bypass. Affected Android versions are 8.1, 9, and 10. Exploitation is described as pos...

CVE-2021-0429

CVE-2021-0429 affects Android and stems from a use-after-free in ALooper.cpp (function pollOnce), causing memory corruption that could enable local escalation of privilege without requiring user interaction. Reported impact notes indicate affected Android versions include Android-9, Android-10, A...

CVE-2021-0441

CVE-2021-0441 affects the Android 11 Framework: a permission bypass in onCreate of PermissionActivity.java caused by a confusing UI, enabling local elevation of privilege. The vulnerability targets the Framework component and, per the CVSS data, can require user interaction (UI) for exploitation ...

CVE-2021-0444

CVE-2021-0444 affects Android devices (Android-11, Android-8.1, Android-9, Android-10). In QuickContactActivity.java, onActivityResult returns an extra Intent unnecessarily, leading to local information disclosure of contact data without elevated privileges. Exploitation requires user interaction...

CVE-2021-0484

CVE-2021-0484: In readVector of IMediaPlayer.cpp there is a missing bounds check allowing a read of uninitialized heap data, leading to local information disclosure without extra privileges. Affected: Android 8.1, 9, 10, 11. Exploitation does not require user interaction; mitigation in the linked...

CVE-2021-0485

CVE-2021-0485 : In Android 11, the getMinimalSize path in PipBoundsAlgorithm.java allows a permissions bypass that could bypass restrictions on background processes, enabling local escalation of privilege with no additional execution privileges and no user interaction required. The issue is docum...

CVE-2021-0505

CVE-2021-0505 affects Android 11 (Settings) with a missing permission check that could allow disabling an always-on VPN, enabling local elevation of privilege without user interaction. Documents consistently describe a local, low-exploitability EoP risk; no explicit exploit details or fixes are p...

CVE-2021-0574

The vulnerability CVE-2021-0574 affects the asf extractor in Android (MediaTek components) where an out-of-bounds write occurs due to a missing bounds check. This can lead to local elevation of privilege with no user interaction required; exploitation details are not provided in the documents. Re...

CVE-2021-0699

Summary (CVE-2021-0699) An out-of-bounds write in HTBLogKM of TBD can lead to local kernel privilege escalation with no user interaction required. Connected sources indicate this vulnerability affects Imagination Technologies’ PowerVR-GPU components (PowerVR-GPU CVE-2021-0699) and is rated High s...

CVE-2022-20158

CVE-2022-20158 affects the Android kernel in the backing-dev.c component (bdi_put and bdi_unregister). The issue is a use-after-free leading to memory corruption, with the documented impact of local privilege escalation to SYSTEM level. Exploitation is described as local (AV:L, UI:N) with no user...

CVE-2022-20168

Summary: CVE-2022-20168 is listed in the Pixel 2022-06 bulletin as a DoS issue affecting the Modem component in Android devices (Pixel). The underlying document set identifies the issue under the Pixel Security patches with the DoS impact in the Modem area. Affected context (as per provided sourc...

CVE-2022-26472

The CVE-2022-26472 entry describes a local elevation of privilege in MediaTek IMS due to a parcel format mismatch. Affected component: ims on MediaTek chips; root cause: parcel format mismatch enabling local EoP with no user interaction and no additional execution privileges required (per the ini...

CVE-2022-32601

CVE-2022-32601 is a MediaTek telephony vulnerability caused by a parcel format mismatch that enables local escalation of privilege with no extra execution privileges required. Exploitation is described as local (AV:L, AC:L, PR:L) with no user interaction, and the impact is elevated privileges to ...

CVE-2023-3781

CVE-2023-3781 describes a use-after-free write from improper locking in a kernel component, enabling local elevation of privilege without user interaction. The threat is local access required (attack vector LOCAL) with a high impact on confidentiality, integrity, and availability as per CVSS. The...

CVE-2023-45781

CVE-2023-45781 is described across multiple connected sources as an information-disclosure vulnerability in Google Android, caused by an out-of-bounds read in parse_gap_data() within utils.cc. Exploitation requires local access (local Vector) with low privileges and does not require user interact...

CVE-2023-48398

CVE-2023-48398 affects the ProtocolNetAcBarringInfo::ProtocolNetAcBarringInfo() function in protocolnetadapter.cpp, where a missing bounds check can cause an out-of-bounds read. This can lead to remote information disclosure and requires baseband firmware compromise, with no user interaction need...

CVE-2024-20140

A security vulnerability exists in MediaTek chipsets due to a missing bounds check in the power module, which could lead to an out-of-bounds write . This flaw may allow a malicious actor who has already obtained System privilege to achieve a local escalation of privilege . The vulnerability requi...

CVE-2024-27219

The Linux Kernel is vulnerable to an out-of-bounds write in the tmu_set_pi function of the tmu.c file. The root cause is a missing bounds check , which could allow for local escalation of privilege without requiring additional execution privileges or user interaction. While the issue is associate...

CVE-2024-27233

A permission bypass vulnerability exists in the ppcfw.c file within the ppcfw_init_secpolicy function. The flaw is caused by uninitialized data , which could allow for local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. This issue specificall...