CVE-2021-0466

CVE-2021-0466 is an Android 10 information-disclosure vulnerability. It resides in startIpClient of ClientModeImpl.java and could expose a device identifier to a proximal attacker without remote code execution or user interaction. The Red Hat and NVD entries confirm the issue affects Android 10 a...

CVE-2021-0472

CVE-2021-0472 concerns a local elevation-of-privilege in Android 9–11 due to a permissions bypass in shouldLockKeyguard (LockTaskController.java) that could allow exiting App Pinning without a PIN and without user interaction. The issue is limited to the Framework component and is described as en...

CVE-2021-0603

The CVE-2021-0603 entry describes a local elevation-of-privilege vulnerability in Android 11 affecting the ContactSelectionActivity.java onCreate path. A tapjacking/overlay scenario could allow a non-privileged app to gain access to contacts without user-permission, requiring user interaction for...

CVE-2021-0799

CVE-2021-0799 affects Android 12. In ActivityThread.java, there is a reported vulnerability allowing collision of the content provider’s authorities, enabling local elevation of privilege with no extra execution privileges required. Impact is described as local privilege escalation; exploitation ...

CVE-2021-0879

CVE-2021-0879 involves the PVRSRVBridgeRGXTDMSubmitTransfer path of the PowerVR kernel driver. A missing size check enables a potential integer overflow, leading to out-of-bounds heap access. This could allow local escalation of privilege without additional execution privileges and without user i...

CVE-2021-0926

CVE-2021-0926 is a vulnerability in the Android NFC path found in onCreate of NfcImportVCardActivity.java, where a missing permission check enables adding a contact without user consent. This constitutes a local elevation of privilege because it does not require additional execution privileges an...

CVE-2021-39719

CVE-2021-39719 affects the Android kernel, specifically the lwis subsystem (lwis_top_register_io in lwis_device_top.c). The issue is described as a possible out-of-bounds write caused by an integer overflow, leading to local elevation of privilege with System execution privileges required. User i...

CVE-2021-39792

CVE-2021-39792 concerns the Android kernel, specifically the function usb_gadget_giveback_request in core.c. It describes a race condition that can cause a use-after-free and an out-of-bounds read, potentially leading to local information disclosure with SYSTEM privileges required. No user intera...

CVE-2022-20105

CVE-2022-20105 concerns MediaTek MM service vulnerable to a stack-based buffer overflow causing an out-of-bounds write, enabling local privilege escalation with SYSTEM-level execution privileges required by the exploit. All sources consistently describe the flaw as a local, no-user-interaction vu...

CVE-2022-20388

CVE-2022-20388 affects Android SoC Unisoc components (Android platform) with high severity (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The Unisoc Android entry indicates this is an Android SoC issue with no public exploit details provided in the connected docs. The CVE is listed under the 20...

CVE-2022-20439

CVE-2022-20439 affects Android Messaging. The description indicates an unauthorized provider in Messaging could cause a Local Denial of Service, with a base CVSS v3.1 score of 5.5 (Local, Low attack complexity, Privileges required: Low, user interaction: None, availability impact: High). The avai...

CVE-2022-32596

CVE-2022-32596 describes an out-of-bounds write in Widevine caused by an incorrect bounds check, enabling possible local escalation to System privileges. Exploitation is described as requiring no user interaction (ATT&CK-like vector: local) with high confidentiality, integrity, and availability i...

CVE-2022-39130

CVE-2022-39130 describes a possible out-of-bounds write in the face detect driver due to a missing bounds check, which could lead to local denial of service in the kernel. Public references in the provided documents identify the vulnerability across multiple sources (NVD entry and CVE record), wi...

CVE-2022-42754

CVE-2022-42754 affects the npu driver, where a use-after-free leads to memory corruption that could cause local denial of service in the kernel. The available documents consistently describe a local-privilege-agnostic, local-execution scenario due to memory-management flaw in the npu component. N...

CVE-2023-40130

CVE-2023-40130 affects Android’s CallRedirectionProcessor (notifyTimeout). The issue is a logic error allowing a local elevation of privilege with no extra execution privileges required and no user interaction. The documentation explicitly states the vulnerability as a permission bypass in the Ca...

CVE-2024-22007

CVE-2024-22007 involves a bound-check omission in the constraint_check path of fvp.c, causing a possible out-of-bounds read and local information disclosure without requiring user interaction. The issue is documented across multiple sources (NVD/Red Hat/PRION/CVE lists) and is associated with Goo...

CVE-2024-27210

CVE-2024-27210 involves an out-of-bounds write in the policy_check function of fvp.c that can enable local privilege escalation with no user interaction. The vulnerability is associated with Google Pixel/Android components per multiple sources, but none of the connected documents provide concrete...

CVE-2024-27219

CVE-2024-27219 concerns a vulnerability in the tmu_set_pi function of tmu.c where a missing bounds check allows an out-of-bounds write. The issue enables local privilege escalation with no additional execution privileges required and does not require user interaction. Public technical details in ...

CVE-2024-31311

CVE-2024-31311 affects Google Android; the flaw is an out-of-bounds write in the function increment_annotation_count within stats_event.c, caused by a missing bounds check. This can enable local elevation of privilege with no additional execution privileges and without user interaction. Affected ...

CVE-2024-34720

CVE-2024-34720 affects Google Android: a logic error in com_android_internal_os_ZygoteCommandBuffer.cpp (ZygoteCommandBuffer.nativeForkRepeatedly) may enable arbitrary code execution in any app’s zygote processes, causing local privilege escalation with no extra privileges or user interaction req...

CVE-2024-34734

CVE-2024-34734 describes an Elevation of Privilege in Android related to FooterActionsViewModel.kt (onForegroundServiceButtonClicked): an insecure default value could allow disabling the active VPN from the lockscreen with local impact and no user interaction. The vulnerability is tracked in mult...

CVE-2024-40655

CVE-2024-40655 is an Android framework issue in the CallScreeningServiceHelper.java, where a permissions bypass could allow maintaining a while-in-use permission in the background, enabling local elevation of privilege with no extra execution privileges. Exploitation requires user interaction. Th...

CVE-2024-40662

CVE-2024-40662 affects the Android framework Uri.java, where improper input validation in the scheme handling can allow crafting a malformed Uri object. The result is local privilege escalation with no additional privileges or user interaction required. The CVSS v3.1 score is 7.8 (HIGH) with LOCA...

CVE-2024-40670

CVE-2024-40670 affects PowerVR-GPU (Imagination Technologies) as documented in the Android bulletin. The issue is described as a use-after-free caused by a race condition, enabling local elevation of privilege with no user interaction. The CVSS v3.1 base score is 8.4 (HIGH) with local attack vect...

CVE-2024-43082

CVE-2024-43082 concerns an information-disclosure flaw in Android involving the onActivityResult path of the EditUserPhotoController.java. The root cause is a confused deputy leading to a cross-user media read, enabling local information disclosure without extra execution privileges. The exploit ...

CVE-2024-43083

Modes C: CVE-2024-43083 affects Google Android WiFi stack. The vulnerability is in the validate() function of WifiConfigurationUtil.java and can cause a persistent denial of service via resource exhaustion, leading to local DoS with no required user interaction. Documented impact is DoS with avai...

CVE-2020-0016

CVE-2020-0016 concerns Broadcom Nexus firmware where an insecure default password in the Broadcom middleware could permit local escalation of privilege in the kernel without user interaction. Affected context is tied to Android devices/SoCs using this firmware; exploitation is described as local,...

CVE-2020-0249

CVE-2020-0249 is an Android Framework information-disclosure flaw present in postInstantAppNotif of InstantAppNotifier.java, caused by a PendingIntent error that can enable a local attacker to bypass permissions and access local information. Affected Android versions include 8.0, 8.1, 9, and 10. ...

CVE-2020-0250

CVE-2020-0250 affects Android 10 (Dialed in by CVE entry: In requestCellInfoUpdateInternal of PhoneInterfaceManager.java, a missing permission check allows local information disclosure of location data without extra execution privileges or user interaction). Connected sources confirm details acro...

CVE-2020-0399

The CVE-2020-0399 issue affects Android devices and stems from an unsafe PendingIntent in NotificationMgr.java’s showLimitedSimFunctionWarningNotification. This could allow a local permission bypass and local information disclosure without user interaction, affecting Android 8.0–11. The NVD entry...

CVE-2021-0331

CVE-2021-0331 describes an overlay/tapjacking-type vulnerability in Android’s NotificationAccessConfirmationActivity.java. In onCreate, an insecure default value enables a possible overlay attack that could lead to local elevation of privilege and notification access with User execution privilege...

CVE-2021-0395

CVE-2021-0395 affects Android 11 in StopServicesAndLogViolations (reboot.cpp): memory corruption via use-after-free, enabling local privilege escalation with no additional execution privileges and no user interaction. Exploitation status not detailed in the provided documents. The issue is addres...

CVE-2021-0431

CVE-2021-0431 : A vulnerability in Android’s Bluetooth AVRCP API (avrc_api.cc) enables an out-of-bounds read in avrc_msg_cback due to a missing bounds check. This could allow a remote attacker controlling a paired device to disclose memory contents without executing code or requiring user interac...

CVE-2021-0443

CVE-2021-0443 : Apple Android flaw affecting ScreenshotHelper.java and related files where a race condition can cause an incorrectly saved screenshot, enabling local information disclosure across user profiles. Exploitation requires user interaction; impact is information disclosure with no extra...

CVE-2021-0650

CVE-2021-0650 : In WT_InterpolateNoLoop of eas_wtengine.c, an incorrect bounds check allows an out-of-bounds read, potentially enabling remote information disclosure without extra privileges. Affected: Android 9–11 (as listed). Exploitation requires user interaction. No exploit details provided; ...

CVE-2021-0693

CVE-2021-0693 pertains to Android 11 and involves the HeapDumpProvider.java openFile path, where an unprotected provider could allow retrieving generated heap dumps from debuggable apps. This creates a local information disclosure risk without requiring privileges or user interaction. The vulnera...

CVE-2021-0703

CVE-2021-0703 is an Android 11 vulnerability in the Android runtime component (SecondStageMain in init.cpp) caused by incorrect shared_ptr usage, leading to a use-after-free and local escalation of privilege when an attacker has physical access to the device (no user interaction required). Docume...

CVE-2021-0938

CVE-2021-0938 is described as a by-design bypass in memzero_explicit of compiler-clang.h, enabling a local information disclosure due to uninitialized data in the kernel/Android context. The issue is exploitable with local access and does not require user interaction, per the description. The Con...

CVE-2021-0945

CVE-2021-0945 concerns the PowerVR kernel driver (Imagination Technologies) where a missing bounds check in PMRCreate can overwrite heap memory via PhysmemNewRamBackedPMR. This vulnerability could enable local escalation of privilege with no extra execution privileges required and no user interac...

CVE-2021-39730

CVE-2021-39730 affects the Android kernel as described in multiple sources. The vulnerability is an out-of-bounds read caused by a missing bounds check, potentially allowing local information disclosure with system execution privileges. Exploitation requires local access; no user interaction is r...

CVE-2022-20434

CVE-2022-20434 is a local Elevation of Privilege in Android related to a missing authorization check in a system service. The vulnerability is associated with UNISOC components listed in the Android 2022-10-01/10-05 patch cycles (as shown in the Android bulletin mappings), affecting Android Telep...

CVE-2022-20438

CVE-2022-20438 affects the Android Messaging component. The issue is an unauthorized broadcast in Messaging that can cause a Local Denial of Service. According to the CVE entry, the vulnerability is exploitable with local access (attack vector: LOCAL), requires low privileges, and does not requir...

CVE-2022-32599

In CVE-2022-32599, a logic error in MediaTek’s rpmb component could cause an out-of-bounds write, leading to local escalation of privilege with System execution privileges required. The issue is described as a local, non-user-interaction vulnerability with a high-impact potential (confidentiality...

CVE-2022-32620

CVE-2022-32620 affects MediaTek’s mpu component, caused by a logic error that can cause memory corruption. This may enable local escalation of privilege to System level with no user interaction required. Patch ALPS07541753 (Issue ALPS07541753) is referenced; exploitation status is not detailed in...

CVE-2022-44428

CVE-2022-44428 affects the wlan driver and is tied to a missing bounds check, enabling local denial of service in wlan services. Documents consistently describe the vulnerability as a local issue with a base score of 5.5 (MEDIUM) and local attack vector, but do not provide concrete exploit detail...

CVE-2023-21054

CVE-2023-21054 affects the Android kernel, specifically the EUTRAN_LCS_ConvertLCS_MOLRReq path in LPP_CommonUtil.c. A logic error can cause an out-of-bounds write, which could lead to remote code execution with System-level privileges. No user interaction is required. Exploitation status and in-t...

CVE-2023-21058

CVE-2023-21058 concerns the Android kernel component lcsm_bcm_assist.c (function lcsm_SendRrAcquiAssist ). A missing bounds check can cause an out-of-bounds write, leading to remote code execution with no additional privileges and no user interaction required. The description in the connected OSV...

CVE-2023-21241

CVE-2023-21241 describes an out-of-bounds write caused by an integer overflow in rw_i93_send_to_upper() within rw_i93.cc, enabling local privilege escalation with no extra execution privileges or user interaction. Public docs consistently tie this to Android components and patch-level fixes. The ...

CVE-2023-40083

CVE-2023-40083 describes an out-of-bounds read in the Android utility function parse_gap_data (utils.cc). The underlying issue is a missing bounds check, enabling potential local information disclosure. Exploitation requires user privileges but does not require user interaction. Public references...

CVE-2023-40089

CVE-2023-40089 concerns Android’s DevicePolicyManagerService.java, where getCredentialManagerPolicy can let a user select credential providers without proper permission checks. This enables local elevation of privilege with no extra execution privileges and no user interaction required. The Andro...