CVE-2020-0466

CVE-2020-0466 is a use-after-free in eventpoll.c (do_epoll_ctl and ep_loop_check_proc) that can enable local privilege escalation without user interaction. Publicly documented in multiple advisories linked to kernel packages (Unity Linux UTSA-2026-004002/004258, MiracleLinux AXSA advisories, Cent...

CVE-2024-43769

A logic error in the isPackageDeviceAdmin function of PackageManagerService.java within Google Android creates a possible edge case that could prevent the uninstallation of CloudDpc . This vulnerability allows for local escalation of privilege without requiring additional execution privileges or ...

CVE-2020-0404

CVE-2020-0404 affects the Android kernel via a vulnerability in uvc_scan_chain_forward() in uvc_driver.c, where an unusual root cause can cause linked list corruption and local privilege escalation without user interaction. Upstream kernel reports indicate this is a kernel linked-list corruption ...

CVE-2024-50302

CVE-2024-50302 affects the Linux kernel HID core by leaving the HID report buffer potentially uninitialized, enabling possible memory leakage via crafted reports. The fixed behavior is to zero-initialize the report buffer at allocation time. Public advisories (including AstraLinux and AlmaLinux f...

CVE-2022-26461

CVE-2022-26461 affects the vow component; it involves undefined behavior caused by API misuse that could enable local privilege escalation with system execution privileges required. No user interaction is needed. The vulnerability is associated with patch ALPS07032604 (Issue ALPS07032604). Multip...

CVE-2025-22441

The Android operating system is vulnerable to a confused deputy flaw in RemoteViews.java within the getContextForResourcesEnsuringCorrectCachedApkPaths method. An attacker can provide an untrusted ApplicationInfo object through RemoteViews (used for home screen widgets , notifications , and autof...

CVE-2017-0785

CVE-2017-0785 is an Android Bluetooth SDP information-disclosure vulnerability in the Bluetooth stack. The SDP server can leak memory/allow an out-of-bounds read by manipulating the SDP continuation state in requests, enabling information disclosure. Affected Android versions include 4.4.4–8.0 (a...

CVE-2019-9455

CVE-2019-9455: In the Android kernel video driver, there is a kernel pointer leak caused by a WARN_ON statement, leading to local information disclosure with System execution privileges needed. Local exploitation is possible without user interaction. The connected Nessus advisories corroborate th...

CVE-2025-26436

CVE-2025-26436 refers to a BAL bypass in Android’s PendingIntentRecord.clearAllowBgActivityStarts, enabling an application to launch an activity from the background and achieve local elevation of privilege without user interaction. Affected component: Android Framework (PendingIntentRecord.java)....

CVE-2025-22429

Google Android , a Linux-based open-source operating system, is affected by an elevation of privilege vulnerability. The flaw stems from a logic error present in multiple locations within the code, which may allow an attacker to execute arbitrary code . This could lead to a local escalation of pr...

CVE-2025-26440

A privilege bypass vulnerability exists in multiple functions of CameraService.cpp within the Android Framework component. This flaw allows an attacker to bypass permissions to use the camera from the background, potentially leading to a local escalation of privilege without requiring additional ...

CVE-2022-22265

Technical details about CVE-2022-22265 are not publicly provided in the connected documents. The sources mention the vulnerability at a high level; monitor official advisories for patches affecting Samsung NPU drivers.

CVE-2025-22434

Google Android is affected by a local elevation of privilege vulnerability (CWE-693) caused by a logic error in the handleKeyGestureEvent function within PhoneWindowManager.java. This flaw allows an attacker to bypass the lock screen without requiring additional execution privileges or user inter...

CVE-2025-26455

Google Android is impacted by a heap-based buffer overflow in multiple functions of NdkMediaCodec.cpp . This vulnerability allows for a local out-of-bounds write , which could lead to local escalation of privilege without requiring additional execution privileges or user interaction. While the ro...

CVE-2025-26444

A logic error in the VoiceInteractionManagerService.java component of the Android operating system, specifically within the onHandleForceStop function, allows for a local escalation of privilege. When a user-selected assistant is forcibly stopped, the system may incorrectly revert to the default ...

CVE-2025-26421

A logic error in the System component of the Android operating system allows for a lock screen bypass , which can lead to local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. This vulnerability is addressed in security patch levels of 2025-05-...

CVE-2020-0427

CVE-2020-0427 is confirmed in the connected documents as an Android kernel issue affecting the pinctrl subsystem (core.c). The vulnerability arises in create_pinctrl, where an out-of-bounds read can occur due to a use-after-free, potentially allowing local information disclosure without extra exe...

CVE-2021-0326

CVE-2021-0326 affects wpa_supplicant (P2P/Wi-Fi Direct) where a missing bounds check in p2p_copy_client_info can cause an out-of-bounds write. The flaw may enable remote code execution or other impacts when a device participates in P2P group info processing and is within radio range; no user inte...

CVE-2023-35657

A type confusion vulnerability exists in the bta_av_config_ind function of bta_av_aact.cc , which can lead to an out-of-bounds read . This flaw could result in local information disclosure without requiring additional execution privileges or user interaction. This issue is addressed in Android 13...

CVE-2025-26443

A logic error in the parseHtml method of HtmlToSpannedParser.java within the Google Android operating system allows for a local escalation of privilege. An attacker can exploit this vulnerability to install applications even when the system is configured to block installations from unknown source...

CVE-2022-22292

CVE-2022-22292 affects Samsung Telecom dynamic receiver functionality; an unprotected dynamic receiver in Telecom prior to SMR Feb-2022 Release 1 allows untrusted apps to launch arbitrary activity. CVSSv3.1 basis: LOCAL, LOW privileges, HIGH impact on confidentiality/integrity, and HIGH impact on...

CVE-2022-20141

CVE-2022-20141 (Android kernel) : In igmp.c, the function ip_check_mc_rcu has a use-after-free due to improper locking, enabling local escalation of privilege when opening/closing inet sockets without extra privileges. This vulnerability is associated with the Android kernel and upstream referenc...

CVE-2023-21282

CVE-2023-21282 affects Google Android components via TRANSPOSER_SETTINGS in lpp_tran.h, with an out-of-bounds write caused by an incorrect bounds check. The impact is remote code execution with user interaction required, as stated in the CVE description and mirrored by multiple advisories (NVD en...

CVE-2024-49728

Google Android is affected by an information disclosure vulnerability in the BluetoothOppSendFileInfo.java file within the generateFileInfo function. The root cause is a confused deputy issue, which allows for cross-user media disclosure . This vulnerability can lead to local information disclosu...

CVE-2025-22437

Google Android is affected by an elevation of privilege vulnerability (EoP) caused by a logic error in the setMediaButtonReceiver component across multiple files. An attacker can exploit this flaw to launch arbitrary activities from the background, leading to a local escalation of privilege witho...

CVE-2025-26449

Google Android is susceptible to a denial-of-service vulnerability caused by uncontrolled resource consumption . An attacker can exploit this flaw to cause a local denial of service without requiring additional execution privileges or user interaction. While the provided documents confirm the vul...

CVE-2025-32312

Google Android is affected by a high-severity elevation of privilege vulnerability (CVE-2025-32312) within the Framework component. The flaw exists in PackageParser.java within the createIntentsList function, where unsafe deserialization allows for a bypass of lazy bundle hardening . This enables...

CVE-2025-22439

Google Android is subject to a local elevation of privilege vulnerability due to a missing permission check in the onLastAccessedStackLoaded function within ActionHandler.java. This flaw allows an attacker to bypass storage restrictions across applications, potentially leading to a local escalati...

CVE-2025-26423

The WiFi component in Google Android is vulnerable to a local elevation of privilege (EoP) and a permanent denial of service (DoS) due to a missing bounds check in the validateIpConfiguration function of WifiConfigurationUtil.java. Exploitation does not require additional execution privileges or ...

CVE-2023-21108

CVE-2023-21108 affects Android 11–13 via the Bluetooth SDP discovery path: in sdpu_build_uuid_seq of sdp_discovery.cc, an out-of-bounds write caused by a use-after-free can lead to remote code execution if Hands Free Profile (HFP) is enabled. No user interaction is required. The vulnerability is ...

CVE-2025-22433

A logic error in the canForward function of IntentForwarderActivity.java within the Google Android operating system allows for a bypass of the cross-profile intent filter , which is primarily used in Work Profile scenarios. This vulnerability can result in a local escalation of privilege without ...

CVE-2020-0444

CVE-2020-0444 affects the Android kernel. The issue is in audit_free_lsm_field in auditfilter.c, caused by a logic error in audit_data_to_entry that may allow local escalation of privilege with no extra privileges or user interaction. The connected Nessus advisories (Unity Linux UTSA-2026-004184/...

CVE-2023-21265

CVE-2023-21265 affects Android’s trust management by listing multiple root CA certificates that must be disabled. The underlying issue enables remote information disclosure without additional execution privileges and requires no user interaction. Public documents describe the affected area as the...

CVE-2025-22419

Google Android is affected by an elevation of privilege vulnerability (CVE-2025-22419 ) where an attacker can use a tapjacking or overlay attack to mislead users into enabling malicious phone call forwarding. This vulnerability requires user interaction and User execution privileges for exploitat...

CVE-2019-9278

CVE-2019-9278 affects libexif. The vulnerability is an out-of-bounds write caused by an integer overflow in libexif, leading to remote escalation of privilege in the media content provider. Exploitation requires user interaction. Affected versions include Android-10 (and related platforms in the ...

CVE-2025-22417

Google Android is affected by an elevation of privilege vulnerability in the Framework component. The flaw exists in the finishTransition function of Transition.java, where a tapjacking/overlay attack can bypass touch filtering restrictions. Exploitation requires user interaction and could allow ...

CVE-2025-22422

A logic error in the Framework component of Google Android allows an attacker to mislead users into approving an authentication prompt for one app when the result is utilized by another. This vulnerability enables local escalation of privilege without requiring additional execution privileges or ...

CVE-2025-22430

A security vulnerability exists in Google Android due to a missing permission check in the isInSignificantPlace function across multiple files. This flaw allows an attacker to access sensitive information , resulting in local information disclosure . The vulnerability can be exploited without req...

CVE-2025-22421

A logic error in the contentDescForNotification function of NotificationContentDescription.kt within the Framework component of Google Android can lead to a notification content leak through the lockscreen. This vulnerability allows for local information disclosure without requiring additional ex...

CVE-2025-26429

Google Android is vulnerable to a local denial of service (DoS) condition due to improper input validation in the collectOps function of AppOpsService.java . An attacker can exploit this flaw to cause a permanent DoS without requiring additional execution privileges or user interaction. While the...

CVE-2025-22431

Google Android is affected by a denial of service vulnerability caused by a logic error in the code at multiple locations. A malicious app could exploit this flaw to prevent a user from dialing emergency services under specific circumstances. The impact is a local denial of service that persists ...

CVE-2025-26437

Google Android is vulnerable to a missing permission check within the CredentialManagerServiceStub of CredentialManagerService.java . An attacker can exploit this flaw to retrieve candidate credentials, potentially leading to local information disclosure . This vulnerability does not require addi...

CVE-2016-0728

The CVE-2016-0728 issue affects the Linux kernel up to version 4.4.1, specifically in the keyring handling path join_session_keyring() within security/keys/process_keys.c. A flaw in object reference management in an error path can allow a local, unprivileged user to escalate privileges or cause a...

CVE-2024-56189

A vulnerability exists in the Modem component of Google Pixel devices due to a missing bounds check in the SAEMM_DiscloseMsId function within SAEMM_RadioMessageCodec.c. This out-of-bounds read can lead to remote information disclosure after authentication, requiring no additional execution privil...

CVE-2025-26441

A missing bounds check in the add_attr function of sdp_discovery.cc within the Google Android operating system leads to a possible out-of-bounds read . This vulnerability can be exploited to cause remote information disclosure without requiring additional execution privileges or user interaction....

CVE-2025-22425

The Android Framework component is vulnerable to a local elevation of privilege due to a buffer copy flaw caused by improper input validation in the onCreate function of InstallStart.java . An attacker can exploit this flaw to escalate privileges without requiring additional execution privileges,...

CVE-2025-26456

A logic error in multiple functions of DexUseManagerLocal.java within the Android Runtime (specifically the ART Project Mainline component) allows for a local permanent denial of service . An attacker can exploit this to crash the system server without requiring additional execution privileges or...

CVE-2025-22428

A logic error in the hasInteractAcrossUsersFullPermission function within AppInfoBase.java in Google Android allows a primary user to grant permissions to an application on a secondary user's profile. This vulnerability facilitates a local escalation of privilege without requiring additional exec...

CVE-2025-26438

Google Android is affected by an incorrect protocol implementation vulnerability within the System component. Specifically, a flaw in the smp_process_secure_connection_oob_data function of smp_act.cc allows an attacker to bypass SMP authentication . This can lead to a remote elevation of privileg...

CVE-2024-49739

A security vulnerability exists in Google Android involving an out-of-bounds write within the MMapVAccess function of pmr_os.c . This flaw stems from improper input validation and allows a local attacker to achieve local escalation of privilege without requiring additional execution privileges or...