CVE-2022-26461

CVE-2022-26461 affects the vow component; it involves undefined behavior caused by API misuse that could enable local privilege escalation with system execution privileges required. No user interaction is needed. The vulnerability is associated with patch ALPS07032604 (Issue ALPS07032604). Multip...

CVE-2018-9568

This CVE-2018-9568 entry concerns the Linux kernel socket code: In sk_clone_lock of sock.c, a memory corruption due to type confusion could allow local privilege escalation without user interaction. Affected product/version in the initial doc is Android kernel; connected MiracleLinux advisory con...

CVE-2020-0466

CVE-2020-0466 is a use-after-free in eventpoll.c (do_epoll_ctl and ep_loop_check_proc) that can enable local privilege escalation without user interaction. Publicly documented in multiple advisories linked to kernel packages (Unity Linux UTSA-2026-004002/004258, MiracleLinux AXSA advisories, Cent...

CVE-2024-31317

CVE-2024-31317 is a Zygote command-injection vulnerability affecting Android 9–13, enabling a non-privileged app with WRITE_SECURE_SETTINGS to trigger code execution in the Zygote process via unsafe deserialization and manipulated Zygote arguments (e.g., runtime-flags, hidden_api_blacklist_exempt...

CVE-2024-50302

CVE-2024-50302 affects the Linux kernel HID core by leaving the HID report buffer potentially uninitialized, enabling possible memory leakage via crafted reports. The fixed behavior is to zero-initialize the report buffer at allocation time. Public advisories (including AstraLinux and AlmaLinux f...

CVE-2017-0785

CVE-2017-0785 is an Android Bluetooth SDP information-disclosure vulnerability in the Bluetooth stack. The SDP server can leak memory/allow an out-of-bounds read by manipulating the SDP continuation state in requests, enabling information disclosure. Affected Android versions include 4.4.4–8.0 (a...

CVE-2019-9455

CVE-2019-9455: In the Android kernel video driver, there is a kernel pointer leak caused by a WARN_ON statement, leading to local information disclosure with System execution privileges needed. Local exploitation is possible without user interaction. The connected Nessus advisories corroborate th...

CVE-2025-22441

CVE-2025-22441 concerns a Confused Deputy in Android RemoteViews loading path. The vulnerability arises when RemoteViews.mApplication can influence LoadedApk via getContextForResourcesEnsuringCorrectCachedApkPaths, leading to checkAndUpdateApkPaths potentially altering the LoadedApk state and Loa...

CVE-2025-22429

CVE-2025-22429 affects Android Framework. A logic error in multiple locations could allow local elevation of privilege with no user interaction required. Exploitation status isn’t detailed in the provided documents. Android security bulletin entries associate this CVE with the 2025-04 patch level...

CVE-2025-26440

CVE-2025-26440 affects Android, stemming from issues in CameraService.cpp that can enable background camera use via a permissions bypass. This allows local elevation of privilege with no extra execution privileges and no user interaction required. Documented across multiple sources (Red Hat, NVD,...

CVE-2025-26436

CVE-2025-26436 refers to a BAL bypass in Android’s PendingIntentRecord.clearAllowBgActivityStarts, enabling an application to launch an activity from the background and achieve local elevation of privilege without user interaction. Affected component: Android Framework (PendingIntentRecord.java)....

CVE-2025-26455

The CVE-2025-26455 entry describes an out-of-bounds write in NdkMediaCodec.cpp caused by a heap buffer overflow, enabling local privilege escalation with no additional execution privileges and no user interaction required. The connected documents do not provide exploitation details or concrete pa...

CVE-2022-22265

Technical details about CVE-2022-22265 are not publicly provided in the connected documents. The sources mention the vulnerability at a high level; monitor official advisories for patches affecting Samsung NPU drivers.

CVE-2025-26444

CVE-2025-26444 affects Android’s VoiceInteractionManagerService (onHandleForceStop). A logic error can cause a user-selected assistant to be forcibly stopped, causing the system to revert to the default assistant and locally escalate privileges by granting ROLE_ASSISTANT to the default app with n...

CVE-2025-22434

The CVE-2025-22434 issue affects Android Framework, specifically in handleKeyGestureEvent within PhoneWindowManager.java, enabling local privilege escalation without user interaction due to a logic error. The connected Android Security Bulletin entries assign this CVE to an EoP (High) impact in t...

CVE-2020-0427

CVE-2020-0427 is confirmed in the connected documents as an Android kernel issue affecting the pinctrl subsystem (core.c). The vulnerability arises in create_pinctrl, where an out-of-bounds read can occur due to a use-after-free, potentially allowing local information disclosure without extra exe...

CVE-2023-35657

CVE-2023-35657 affects the Bluetooth stack component bta_av_config_ind in bta_av_aact.cc, where a type confusion can cause an out-of-bounds read leading to local information disclosure without extra privileges or user interaction. Public references indicate this vulnerability is tracked in Androi...

CVE-2025-22437

CVE-2025-22437 is tied to a logic error in Android’s setMediaButtonReceiver across multiple files, enabling a background process to launch arbitrary activities and cause local privilege escalation without extra execution privileges or user interaction. The vulnerability is categorized as Elevatio...

CVE-2025-26421

CVE-2025-26421 affects the Android platform System component. The issue is a logic error that enables local escalation of privilege via a lock-screen bypass, with no user interaction required. Impact is described as Elevation of Privilege (EoP) on the device. AOSP patches update the System compon...

CVE-2021-0326

CVE-2021-0326 affects wpa_supplicant (P2P/Wi-Fi Direct) where a missing bounds check in p2p_copy_client_info can cause an out-of-bounds write. The flaw may enable remote code execution or other impacts when a device participates in P2P group info processing and is within radio range; no user inte...

CVE-2025-26443

CVE-2025-26443 affects Android’s HtmlToSpannedParser.parseHtml, where a logic error could permit installing apps without enabling installation from unknown sources. This is a local privilege escalation vulnerability (local vector, requires user interaction). The issue is tied to the parseHtml pat...

CVE-2025-22419

Android framework vulnerability (CVE-2025-22419) where a tapjacking/overlay attack could mislead a user into enabling malicious phone call forwarding, enabling local privilege escalation with user interaction required. Public details point to patches in the 2025-04-01/04-05 security levels; remed...

CVE-2025-22433

CVE-2025-22433 affects Android Framework: a logic error in canForward() of IntentForwarderActivity.java may bypass the cross-profile intent filter used in Work Profiles, enabling local privilege escalation without extra privileges or user interaction. Documents cite affected component and impact;...

CVE-2024-49728

CVE-2024-49728 affects Android Bluetooth code via generateFileInfo in BluetoothOppSendFileInfo.java, enabling a confused deputy to cause cross-user media disclosure. The issue yields local information disclosure without additional privileges and does not require user interaction to exploit, per t...

CVE-2019-9278

CVE-2019-9278 affects libexif. The vulnerability is an out-of-bounds write caused by an integer overflow in libexif, leading to remote escalation of privilege in the media content provider. Exploitation requires user interaction. Affected versions include Android-10 (and related platforms in the ...

CVE-2022-22292

CVE-2022-22292 affects Samsung Telecom dynamic receiver functionality; an unprotected dynamic receiver in Telecom prior to SMR Feb-2022 Release 1 allows untrusted apps to launch arbitrary activity. CVSSv3.1 basis: LOCAL, LOW privileges, HIGH impact on confidentiality/integrity, and HIGH impact on...

CVE-2025-32312

CVE-2025-32312 affects Android’s PackageParser.java, specifically the function createIntentsList. Root cause: unsafe deserialization that bypasses lazy bundle hardening, allowing modified data to flow to the next process. Impact: local privilege escalation with no additional privileges required; ...

CVE-2025-22421

CVE-2025-22421 affects Android; a logic error in ContentDescForNotification (NotificationContentDescription.kt) may leak notification content on the lockscreen. This enables local information disclosure with no user interaction. The issue is documented across multiple sources (NVD/Red Hat/CVE dat...

CVE-2025-22430

CVE-2025-22430 affects Android framework code where isInSignificantPlace missing a permission check could disclose local information. Impact is information disclosure without extra privileges; exploitation is local and requires no user interaction. Connected sources (Android Security Bulletin ent...

CVE-2025-26429

CVE-2025-26429 is an Android vulnerability where the collectOps path in AppOpsService.java allows a local DoS due to improper input validation. Exploitation is local with no user interaction and no extra privileges required. The connected advisories reference Android security bulletins and vendor...

CVE-2025-22439

CVE-2025-22439 involves a vulnerability in Android’s ActionHandler.java: in onLastAccessedStackLoaded, a missing permission check could bypass storage restrictions across apps, enabling local elevation of privilege with user interaction required. Exploitation details and risk are described across...

CVE-2023-21108

CVE-2023-21108 affects Android 11–13 via the Bluetooth SDP discovery path: in sdpu_build_uuid_seq of sdp_discovery.cc, an out-of-bounds write caused by a use-after-free can lead to remote code execution if Hands Free Profile (HFP) is enabled. No user interaction is required. The vulnerability is ...

CVE-2025-22417

CVE-2025-22417 affects Android where finishTransition in Transition.java can bypass touch filtering via a tapjacking/overlay attack, enabling local elevation of privilege with no extra execution privileges required. Exploitation requires user interaction. Documents consistently describe this as a...

CVE-2025-22422

Technical details for CVE-2025-22422 are not publicly provided in the connected documents. Monitor for updates from referenced sources; current materials describe a logic-error elevation of privilege without detail on affected products or fixes.

CVE-2025-26449

CVE-2025-26449 is a Google Android DoS vulnerability due to resource exhaustion causing local denial of service with no user interaction. Public documents corroborate a local impact and DoS classification across Android components; the Android bulletin notes patch levels 2025-06-01 and 2025-06-05...

CVE-2025-26423

CVE-2025-26423 is tied to Android’s WifiConfigurationUtil.java, in the function validateIpConfiguration . The issue arises from a missing bounds check that can be triggered to cause a permanent DoS and potentially enable a local escalation of privilege with no extra privileges required. The CVE d...

CVE-2025-22425

CVE-2025-22425 : Android framework issue in InstallStart.java onCreate causing a local elevation of privilege due to improper input validation. The vulnerability enables a permissions bypass with only local access and requires user interaction to exploit. Exploitation context is supported by mult...

CVE-2025-26435

CVE-2025-26435 affects ContentProtectionTogglePreferenceController.java and is due to a logic error in updateState that could allow a secondary user to disable the primary user's app scanning setting, enabling local privilege escalation without additional privileges or user interaction. The entry...

CVE-2025-26456

CVE-2025-26456 affects DexUseManagerLocal.java in Android; a logic error can crash the system server, leading to local, permanent denial of service without extra privileges or user interaction. Exploitation / patch details are not provided in the supplied documents; no explicit remediation versio...

CVE-2025-22431

CVE-2025-22431 is an Android Framework DoS vulnerability arising from a logic error in multiple locations that can prevent dialing emergency services under limited circumstances. The impact is local denial of service until reboot, with exploitation not requiring user interaction. The Android Secu...

CVE-2025-26428

CVE-2025-26428 affects Android’s LockTaskController.java, specifically startLockTaskMode. A logic error can enable a lock screen bypass, causing elevation of privilege with no extra execution privileges, requiring user interaction to exploit. The issue is reported across multiple feeds (Red Hat, ...

CVE-2025-26452

CVE-2025-26452 affects Android Framework via the ResourcesImpl.java: loadDrawableForCookie path, where a confused deputy may allow an app’s task snapshots to be accessed, enabling local elevation of privilege without extra execution privileges or user interaction. Public sources (Android bulletin...

CVE-2025-22428

The CVE describes a logic error in AppInfoBase.java hasInteractAcrossUsersFullPermission that could allow granting permissions to a secondary user from the primary user, enabling local privilege escalation without user interaction. Affected component: Android framework/AppInfoBase.java. Impact: l...

CVE-2025-26416

The CVE-2025-26416 issue affects SkBmpStandardCodec.cpp in the initializeSwizzler path, described as a heap buffer overflow that causes an out-of-bounds write. The practical result is remote elevation of privilege with no additional execution privileges required and without user interaction. Publ...

CVE-2025-26427

CVE-2025-26427 affects Google Android Framework; a path traversal error in multiple locations can grant local escalation of privilege. Exploitation requires user interaction, with no additional execution privileges needed. According to the Android bulletin, this issue is addressed in patch levels...

CVE-2024-49739

CVE-2024-49739 describes an out-of-bounds write in the function MMapVAccess within pmr_os.c, caused by insufficient input validation. This could enable local privilege escalation with no required user interaction. The CVE is reflected across multiple sources (NVD, Red Hat, OSV) and is associated ...

CVE-2024-56189

CVE-2024-56189 describes an out-of-bounds read in SAEMM_DiscloseMsId of SAEMM_RadioMessageCodec.c due to a missing bounds check. The available sources indicate this could allow remote information disclosure after authentication with no additional execution privileges and no user interaction requi...

CVE-2025-0077

CVE-2025-0077 affects Android’s framework with a race condition in multiple functions of UserController.java. The issue is a buffer copy flaw that lacks input size validation, potentially enabling a local elevation of privilege (EoP) without extra execution privileges and without user interaction...

CVE-2025-26438

CVE-2025-26438 is a vulnerability in Android Bluetooth SMP authentication due to an incorrect implementation in smp_process_secure_connection_oob_data (smp_act.cc). The issue enables remote elevation of privilege with network access and no user interaction, as described in multiple sources. Conne...

CVE-2025-26441

CVE-2025-26441 affects Google Android: an out-of-bounds read in the add_attr path of sdp_discovery.cc can cause remote information disclosure without extra privileges or user interaction. The issue is described across NVD, Red Hat, OSV, and CNVD/CVE aggregations, all citing a missing bounds check...