CVE-2023-21241

CVE-2023-21241 describes an out-of-bounds write caused by an integer overflow in rw_i93_send_to_upper() within rw_i93.cc, enabling local privilege escalation with no extra execution privileges or user interaction. Public docs consistently tie this to Android components and patch-level fixes. The ...

CVE-2023-40089

CVE-2023-40089 concerns Android’s DevicePolicyManagerService.java, where getCredentialManagerPolicy can let a user select credential providers without proper permission checks. This enables local elevation of privilege with no extra execution privileges and no user interaction required. The Andro...

CVE-2024-25985

The CVE-2024-25985 issue affects the bigo_unlocked_ioctl path in bigo.c, described as a Use-After-Free caused by a missing bounds check. The impact is local privilege escalation with high severity (CVSS: LOCAL, NONE user interaction). Documents in multiple feeds (NVD, Red Hat, PRION, OSV) consist...

CVE-2024-27226

CVE-2024-27226 describes an out-of-bounds write in tmu_config_gov_params, caused by a missing bounds check. The vulnerability allows local privilege escalation with no additional privileges or user interaction required. Public references/entries across multiple sources (NVD, Red Hat, CVE list, OS...

CVE-2024-27234

CVE-2024-27234 describes an out-of-bounds read in the function family 'fvp_set_target' in fvp.c due to a missing bounds check. This leads to potential local information disclosure without extra execution privileges or user interaction. The provided documents do not specify affected product versio...

CVE-2024-34721

CVE-2024-34721 describes an information-disclosure in Android’s MediaProvider.java, in ensureFileColumns, where improper input validation may allow a user to disclose files owned by another user. This is a local disclosure with no extra execution privileges required and does not require user inte...

CVE-2024-34730

CVE-2024-34730 describes a logic error in multiple locations that allows bypassing user consent to enable new Bluetooth HID devices, leading to local elevation of privilege with no additional execution privileges or user interaction required. Connected sources consistently state the impact as loc...

CVE-2024-40661

CVE-2024-40661 affects Android’s mayAdminGrantPermission in AdminRestrictedPermissionsUtils.java, enabling access to the microphone and leading to local elevation of privilege with no extra execution privileges required. Exploitation is local and does not require user interaction. Android bulleti...

CVE-2019-2006

CVE-2019-2006 affects Android 9 where a memory corruption via use-after-free in the HalDeathHandlerHidl.cpp serviceDied can lead to local escalation of privilege in the audio server. Exploitation requires no user interaction; privileges required are NONE. The issue is categorized as Elevation of ...

CVE-2020-0390

CVE-2020-0390 affects Android where the zygote SE Policy has a permissions bypass, enabling local information disclosure without extra privileges. Affected: Android-10 and Android-11, with the issue categorized as an Information Disclosure (ID) vulnerability in the Framework/zygote policy. Impact...

CVE-2020-0393

CVE-2020-0393 affects Android during 9–11 in the Media Framework: decrypt and decrypt_1_2 in CryptoPlugin.cpp allow an out-of-bounds read due to a missing bounds check, enabling local information disclosure without user interaction. The issue is documented in multiple sources (NVD/NVD CVSS detail...

CVE-2020-13843

Technical details about CVE-2020-13843 are not provided in the supplied documents; monitor for updates.

CVE-2021-0446

CVE-2021-0446 affects Android 11, specifically the ImportVCardActivity. The vulnerability allows bypassing user consent via a tapjacking/overlay attack, enabling local escalation of privilege with user-execution privileges needed. The exploit requires user interaction. Root cause is an overlay-ba...

CVE-2021-0649

CVE-2021-0649 affects Android 11: In Vpn.java’s stopVpnProfile, there is a permissions bypass leading to a possible VPN profile reset and local elevation of privilege (CONTROL_ALWAYS_ON_VPN) with no user interaction. The issue is classified as a local elevation of privilege; patches are reference...

CVE-2021-0697

CVE-2021-0697 is a race-condition vulnerability in the PVRSRVRGXSubmitTransferKM path of rgxtransfer.c (PowerVR GPU) on Android SoCs. It enables a possible user-after-free leading to local escalation of privilege with no additional execution privileges required and no user interaction. Exploit st...

CVE-2021-0703

CVE-2021-0703 is an Android 11 vulnerability in the Android runtime component (SecondStageMain in init.cpp) caused by incorrect shared_ptr usage, leading to a use-after-free and local escalation of privilege when an attacker has physical access to the device (no user interaction required). Docume...

CVE-2022-20436

CVE-2022-20436 is an elevation-of-privilege vulnerability in Android involving an unauthorized service in the system service, where a component lacks permission checks, enabling Local EoP. The core issue is described across multiple sources as an Android/UNISOC Android component vulnerability aff...

CVE-2022-20439

CVE-2022-20439 affects Android Messaging. The description indicates an unauthorized provider in Messaging could cause a Local Denial of Service, with a base CVSS v3.1 score of 5.5 (Local, Low attack complexity, Privileges required: Low, user interaction: None, availability impact: High). The avai...

CVE-2022-23728

CVE-2022-23728 concerns an LG smartphone vulnerability where an attacker can reset the device using AT Command during the reboot process (LG ID LVE-SMP-210011). The CVSSv3.1 vector indicates physical access, low complexity, no privileges required, and no user interaction, with impact on integrity...

CVE-2022-42520

CVE-2022-42520: Use-after-free in Android’s ServiceInterface::HandleRequest (serviceinterface.cpp) can lead to local escalation of privilege to system level. Affected component: Android kernel/service interface; exploitation described as LOCAL with HIGH privileges required and no user interaction...

CVE-2022-47338

CVE-2022-47338 describes a missing permission check in the telecom service, leading to a local Denial of Service. Public sources consistently state the issue affects UNISOC/Android telecom components, with the impact described as local DoS and no remote exploit details provided in the supplied do...

CVE-2023-21243

CVE-2023-21243 is a buffer overflow in the Android PasspointConfiguration.java code path (validateForCommonR1andR2) that can inflate a config file’s size without limits, enabling a local denial-of-service condition. Exploitation requires user interaction, and exploitation status is not indicated ...

CVE-2023-40083

CVE-2023-40083 describes an out-of-bounds read in the Android utility function parse_gap_data (utils.cc). The underlying issue is a missing bounds check, enabling potential local information disclosure. Exploitation requires user privileges but does not require user interaction. Public references...

CVE-2024-20011

The CVE-2024-20011 issue affects MediaTek’s alac decoder, caused by an incorrect bounds check that enables information disclosure and could lead to remote code execution without user interaction. The vulnerability is rated high/critical with network access and no privileges required. A patch is r...

CVE-2024-20020

OP-TEE (Trusted Execution Environment) vulnerability CVE-2024-20020 involves an out-of-bounds write caused by an incorrect bounds check. This could enable local information disclosure with System execution privileges required, and no user interaction is needed. The issue is tracked with patch ALP...

CVE-2024-23711

CVE-2024-23711 describes a logic error in DevmemXIntUnreserveRange within devicemem_server.c that enables arbitrary code execution and local kernel privilege escalation without extra privileges or user interaction. Multiple sources (NVD, Red Hat, OSV) corroborate the same root cause. Impact is hi...

CVE-2024-27204

CVE-2024-27204 involves an out-of-bounds write in tmu_set_gov_active of tmu.c caused by a missing bounds check. The issue allows local escalation of privilege with no additional privileges required and does not require user interaction. Connected sources confirm the vulnerability in media/firmwar...

CVE-2024-27225

The CVE-2024-27225 entry concerns Google Pixel devices. In the Bluetooth HCI code path (bluetooth_hci.cc, sendHciCommand) there is an out-of-bounds read due to a heap buffer overflow. This can cause local information disclosure with system execution privileges; no user interaction is required for...

CVE-2024-27237

CVE-2024-27237 involves a logic error in wipe_ns_memory() within nsmemwipe.c that can cause an incorrect size calculation. This flaw permits local information disclosure without requiring elevated privileges or user interaction. The vulnerability is described across multiple sources (NVD/Red Hat/...

CVE-2015-3104

CVE-2015-3104 is an integer overflow in Adobe Flash Player (Windows, macOS, Linux) and related Adobe AIR/SDK components. The flaw allows arbitrary code execution via unspecified vectors and affects Flash Player versions prior to 13.0.0.292, 14.x up to 18.x before 18.0.0.160 (Windows/macOS) and pr...

CVE-2020-0096

CVE-2020-0096 is an Android local privilege-escalation (StrandHogg 2.0) rooted in startActivities of ActivityStartController.java. The flaw allows a confused deputy to execute code with a privileged context on Android 8.0–9.0, with no user interaction required. Affected products/versions are Andr...

CVE-2020-0389

CVE-2020-0389 affects Android 10/11 in the Framework area, specifically via RecordingService.java createSaveNotification. The issue is a permission bypass caused by an unsafe PendingIntent, enabling local information disclosure with user privileges and no user interaction needed. Public details i...

CVE-2020-0438

CVE-2020-0438 affects Android via the AIBinder_Class constructor in ibinder.cpp (libbinder_ndk). It enables potential arbitrary code execution and local privilege escalation without user interaction, when a vulnerable process uses the component. Documented impact includes local escalation of priv...

CVE-2021-0335

CVE-2021-0335 affects Google's Android 11 Media Framework. The vulnerability arises from an out-of-bounds write in C2SoftHevcDec.cpp caused by a use-after-free, enabling remote information disclosure without additional execution privileges. Exploitation requires user interaction. The issue is doc...

CVE-2021-0432

The CVE-2021-0432 issue affects Android 11, related to ClearPullerCacheIfNecessary and ForceClearPullerCache in StatsPullerManager.cpp. The root cause is a race condition causing a use-after-free, enabling local escalation of privilege with no extra execution privileges required and no user inter...

CVE-2021-0577

CVE-2021-0577 affects the Android flv extractor component. The issue is described as an out-of-bounds write caused by a heap buffer overflow, leading to local privilege escalation with no additional execution privileges required and no user interaction needed. The vulnerability is labeled high se...

CVE-2021-0686

CVE-2021-0686 affects Android 10/11 and involves RoleManagerService.getDefaultSmsPackage. A missing permission check could allow a local attacker to disclose information about the default SMS app for a different device user without user interaction. The vulnerability enables local information dis...

CVE-2021-0693

CVE-2021-0693 pertains to Android 11 and involves the HeapDumpProvider.java openFile path, where an unprotected provider could allow retrieving generated heap dumps from debuggable apps. This creates a local information disclosure risk without requiring privileges or user interaction. The vulnera...

CVE-2021-0927

CVE-2021-0927 describes a local elevation-of-privilege in Android’s TvInputManagerService, triggered by a logic error in requestChannelBrowsable. The vulnerability affects Android 8.1, 9, 10, 11 and 12 and could allow a local attacker to bypass permissions with no user interaction. Public documen...

CVE-2021-39687

Summary: CVE-2021-39687 affects Android kernel code in the driver path, specifically the HandleTransactionIoEvent in the actuator_driver.cc. The issue is a possible out-of-bounds read caused by a heap buffer overflow, which can lead to a local information disclosure without requiring user interac...

CVE-2022-20205

CVE-2022-20205 describes an information-disclosure issue in Android where isFileUri in FileUtil.java may bypass the file:// scheme check due to improper input validation. The vulnerability allows local information disclosure without extra privileges, with exploitation not requiring user interacti...

CVE-2022-20535

CVE-2022-20535 affects Android 13 via a side-channel in WifiManager.registerLocalOnlyHotspotSoftApCallback that can reveal whether an app is installed without query permissions, enabling local information disclosure. Exploitation requires local access; no user interaction is needed. The issue is ...

CVE-2022-38669

CVE-2022-38669 describes a privilege-escalation issue in the soundrecorder service that lacks a required permission check, enabling elevation of privilege in the contacts service without extra execution privileges. Multiple sources (NVD, Red Hat, OSV) corroborate the core flaw and its local attac...

CVE-2022-44426

CVE-2022-44426 describes a local denial-of-service condition due to a missing bounds check in the WLAN driver. The primary impact is local DoS in WLAN services; exploitation details are not provided in the sources. CVSSv3.1 metrics from the NVD indicate a base score of 5.5 (Medium) with LOCAL acc...

CVE-2023-20657

CVE-2023-20657 affects MediaTek’s mtee with an out-of-bounds write caused by a missing bounds check, enabling local privilege escalation without user interaction. The issue is documented across multiple sources (e.g., NVD/Red Hat bulletin entries) and is associated with patch ALPS07571485 (Issue ...

CVE-2023-40638

CVE-2023-40638 affects UNISOC chipsets (Android Telecom service) where a missing permission check could allow a local Denial of Service with SYSTEM privileges required. The Red Hat/Android-related entries corroborate a local-impact scenario but do not provide explicit vulnerable versions or a con...

CVE-2024-20057

CVE-2024-20057 is a MediaTek keyInstall vulnerability caused by a missing bounds check that enables an out-of-bounds write, potentially leading to local privilege escalation with SYSTEM privileges. Exploitation is reported as not requiring user interaction. The issue is associated with MediaTek r...

CVE-2024-20091

CVE-2024-20091 affects MediaTek’s vdec component in the ALPS platform (ALPS09028313) due to a missing bounds check, enabling an out-of-bounds read that could lead to local information disclosure with system execution privileges and no user interaction required. Patch and issue IDs (MSV-1701) are ...

CVE-2024-20101

CVE-2024-20101 affects the MediaTek WLAN stack; the vulnerability arises from improper input validation in the WLAN driver, causing an out-of-bounds write that could enable remote code execution with no privileges and no user interaction required. Public references in NVD/Red Hat and related bull...

CVE-2024-20140

CVE-2024-20140 concerns MediaTek power module code with a missing bounds check, causing an out-of-bounds write. This can enable local escalation of privilege to System level without user interaction, as described across NVD/Red Hat/OSV/NCSC and related advisories. The root cause is an out-of-boun...