CVE-2024-40654

CVE-2024-40654 is an Android issue described across multiple sources as a privilege bypass (confused deputy) that could enable local escalation of privilege. Exploitation is noted to require user interaction in at least one description, with impact described as high (confidentiality, integrity, a...

CVE-2024-43082

CVE-2024-43082 concerns an information-disclosure flaw in Android involving the onActivityResult path of the EditUserPhotoController.java. The root cause is a confused deputy leading to a cross-user media read, enabling local information disclosure without extra execution privileges. The exploit ...

CVE-2020-0389

CVE-2020-0389 affects Android 10/11 in the Framework area, specifically via RecordingService.java createSaveNotification. The issue is a permission bypass caused by an unsafe PendingIntent, enabling local information disclosure with user privileges and no user interaction needed. Public details i...

CVE-2020-0437

CVE-2020-0437 affects Android's CellBroadcastReceiver: a missing permission check in the intent handlers can allow a local attacker to cause a denial of service of emergency alerts without extra privileges or user interaction. The vulnerability is listed against Android versions 8.0–11. Exploitat...

CVE-2021-0335

CVE-2021-0335 affects Google's Android 11 Media Framework. The vulnerability arises from an out-of-bounds write in C2SoftHevcDec.cpp caused by a use-after-free, enabling remote information disclosure without additional execution privileges. Exploitation requires user interaction. The issue is doc...

CVE-2021-0394

CVE-2021-0394 is an out-of-bounds read in android_os_Parcel_readString8 caused by a missing bounds check, enabling local information disclosure without extra privileges. Affected: Android 11, 10, 9, 8.1; exploitation is local and does not require user interaction. Mitigation per the Android Secur...

CVE-2021-0400

CVE-2021-0400 affects Android 9–11 in GnssLocationProvider.java. In injectBestLocation and handleUpdateLocation, there is improper input validation that could cause the device to report location data to emergency services incorrectly. Exploitation is local (attack vector: LOCAL) with no user inte...

CVE-2021-0439

CVE-2021-0439 affects Android 11 and is tied to a vulnerability in setPowerModeWithHandle in com_android_server_power_PowerManagerService.cpp. The issue is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with no additional execution privileges and w...

CVE-2021-0504

CVE-2021-0504 describes an out-of-bounds read in the Bluetooth AVRCP parser (avrc_pars_browse_rsp in avrc_pars_ct.cc) due to a missing bounds check. This could enable remote information disclosure on Android 11 devices without additional execution privileges and with no user interaction (attack v...

CVE-2021-0523

CVE-2021-0523 affects Android (notably Android-10/Android-11) via a tapjacking/overlay fault in WifiScanModeActivity.java that could enable Wi‑Fi scanning without consent, leading to local elevation of privilege with user execution required. Documents confirm the root cause (overlay/tapjacking in...

CVE-2021-0932

CVE-2021-0932 affects Android 10 via an unsafe PendingIntent in showNotification (NavigationModeController.java), enabling a possible confused deputy and local elevation of privilege with actions executed as the System UI, without user interaction. Public details consistently reference the same r...

CVE-2021-39687

Summary: CVE-2021-39687 affects Android kernel code in the driver path, specifically the HandleTransactionIoEvent in the actuator_driver.cc. The issue is a possible out-of-bounds read caused by a heap buffer overflow, which can lead to a local information disclosure without requiring user interac...

CVE-2021-39749

CVE-2021-39749 affects Android 12L WindowManager; it allows starting non-exported/protected activities due to a missing permission check, enabling local privilege escalation with no additional privileges and no user interaction. A PoC demonstrates cross-app activity startup via TaskFragment/Choos...

CVE-2021-39792

CVE-2021-39792 concerns the Android kernel, specifically the function usb_gadget_giveback_request in core.c. It describes a race condition that can cause a use-after-free and an out-of-bounds read, potentially leading to local information disclosure with SYSTEM privileges required. No user intera...

CVE-2022-20033

CVE-2022-20033 affects the camera driver in MediaTek-based devices. The root cause is an incorrect bounds check that enables an out-of-bounds read, leading to local information disclosure and potential System-level execution privileges. Exploitation reportedly does not require user interaction. A...

CVE-2022-20170

CVE-2022-20170 affects Google Pixel modem/Kernel stack (Pixel modem) and enables a remote code execution via a zero-click attack that could downgrade the device to 2G and seize control of the handset. Publicly documented as a critical, network-exposed vulnerability (CVSS v3.1 score 9.8). Google p...

CVE-2022-20389

CVE-2022-20389 is tied to Android SoC/Unisoc components. The connected documents specify affected areas as Android SoC and Unisoc Android components, with a high severity rating (CVE-2022-20389) and no publicly disclosed exploit details in the provided sources. There are no vendor/product version...

CVE-2022-20459

CVE-2022-20459 affects the Android kernel’s Titan M component on Google Pixel devices. The issue is described as improper input validation that can redirect code execution, enabling local escalation of privilege with system-level privileges and no user interaction required. The vulnerability is c...

CVE-2022-21759

CVE-2022-21759 describes an out-of-bounds write in the power service caused by a missing bounds check, enabling local privilege escalation to System privileges without user interaction. Multiple sources (NVD, Red Hat, PRION, CVE lists) confirm the issue and states a patch is available (Patch ID A...

CVE-2022-38672

CVE-2022-38672 affects the face detect driver and involves a missing bounds check that enables a local out-of-bounds write. This can lead to local denial of service in the kernel. Connected documents (OSV/NVD) confirm the same description; no exploit details, affected firmware versions, or patche...

CVE-2022-42530

CVE-2022-42530 affects Pixel firmware, where an out-of-bounds read results from a missing bounds check. The vulnerability enables local information disclosure with System-level privileges, and does not require user interaction. The described impact and conditions are consistent with Android Pixel...

CVE-2022-44426

CVE-2022-44426 describes a local denial-of-service condition due to a missing bounds check in the WLAN driver. The primary impact is local DoS in WLAN services; exploitation details are not provided in the sources. CVSSv3.1 metrics from the NVD indicate a base score of 5.5 (Medium) with LOCAL acc...

CVE-2022-48455

CVE-2022-48455 is a local vulnerability described as a possible out-of-bounds write in the wifi service due to a missing bounds check, leading to local denial of service without extra privileges. The primary sources (NVD/NVD-derived entries) show a CVSS v3.1 base score of 5.5 (Medium) with Local ...

CVE-2023-20654

CVE-2023-20654 affects MediaTek keyinstall: an out-of-bounds write due to a missing bounds check can cause local elevation of privilege with system execution privileges. No user interaction is required. Affected item is keyinstall (MediaTek ALPS family); patch ALPS07628168 is referenced, with Iss...

CVE-2023-21241

CVE-2023-21241 describes an out-of-bounds write caused by an integer overflow in rw_i93_send_to_upper() within rw_i93.cc, enabling local privilege escalation with no extra execution privileges or user interaction. Public docs consistently tie this to Android components and patch-level fixes. The ...

CVE-2023-32834

CVE-2023-32834 describes a memory corruption due to a type confusion in the secmem module, potentially enabling local privilege escalation to SYSTEM. The entry is associated with MediaTek ALPS (ALPS08161762 patch/issue IDs). The vulnerability is reported as exploitable without user interaction, w...

CVE-2024-20057

A missing bounds check in the keyInstall module of MediaTek chips can lead to an out-of-bounds write . This vulnerability allows for local escalation of privilege and requires System execution privileges to exploit. No user interaction is required. The issue is addressed in the 2024-05-05 securit...

CVE-2024-23698

CVE-2024-23698 affects the Android/Linux kernel code path RGXFWChangeOSidPriority in rgxfwutils.c, where a missing bounds check could enable arbitrary code execution and local escalation of privilege with no user interaction. The issue is described consistently across multiple sources (Android An...

CVE-2024-27225

A heap buffer overflow in the sendHciCommand function of bluetooth_hci.cc leads to a possible out-of-bounds read . This vulnerability can result in local information disclosure and requires System execution privileges for exploitation. No user interaction is required. The issue affects the Broadc...

CVE-2024-27226

A critical Elevation of Privilege (EoP) vulnerability exists in the ACPM component of Google Pixel devices. The flaw is caused by a missing bounds check in the tmu_config_gov_params function, which allows for an out-of-bounds write . This could enable a local attacker to escalate privileges witho...

CVE-2024-43080

CVE-2024-43080 affects Android’s AppRestrictionsFragment.java, where unsafe deserialization can lead to a local escalation of privilege. The issue enables privilege elevation with no extra execution privileges, and exploitation requires user interaction. The CVE entry provides a high impact asses...

CVE-2024-44096

CVE-2024-44096 affects Google Pixel devices (Android) and is caused by an insecure default value that enables an arbitrary read, potentially leading to local information disclosure with system execution privileges. Exploitation does not require user interaction. The issue is listed in the Pixel s...

CVE-2014-7914

The CVE-2014-7914 entry concerns the Android Bluetooth stack (btif_dm.c) prior to version 5.1. The root cause is improper enforcement of the temporary nature of Bluetooth pairing, which can be bypassed by an attacker via crafted Bluetooth packets after a user taps a crafted NFC tag. Documented im...

CVE-2015-3100

Adobe Flash Player and related components are affected by a stack-based buffer overflow (CVE-2015-3100) that enables arbitrary code execution. Affected product/version range includes Flash Player prior to 13.0.0.292 and 14.x through 18.x prior to 18.0.0.160 on Windows/macOS, and prior to 11.2.202...

CVE-2015-5567

CVE-2015-5567 describes a stack memory corruption vulnerability in Adobe Flash Player and Adobe AIR that could allow remote code execution or a denial of service. Affected software and versions (as stated): Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows/OS X; Flash on Linux ...

CVE-2018-9415

CVE-2018-9415 affects the Android kernel’s bus.c, specifically in driver_override_store and driver_override_show, where a double free can occur due to improper locking. This can enable local escalation of privilege to SYSTEM without user interaction. The vulnerability follows from upstream kernel...

CVE-2020-0438

CVE-2020-0438 affects Android via the AIBinder_Class constructor in ibinder.cpp (libbinder_ndk). It enables potential arbitrary code execution and local privilege escalation without user interaction, when a vulnerable process uses the component. Documented impact includes local escalation of priv...

CVE-2020-0457

CVE-2020-0457 is an out-of-bounds write due to a missing bounds check affecting Android devices, with a specific association to MediaTek components (vcu) in the 2020 Android security bulletin set. Connected sources indicate the issue is documented across NVD, Red Hat, CVE records, and OSV entries...

CVE-2020-25279

CVE-2020-25279 describes a buffer overflow in the baseband on Samsung mobile devices (Exynos) running O(8.x), P(9.0), and Q(10.0) via an abnormal SETUP message, enabling arbitrary code execution. Affected component: baseband firmware; root cause: buffer overflow. Impact: high across confidentiali...

CVE-2021-0635

CVE-2021-0635 affects the Video component (Unisoc/Android 10) where extracting an incorrectly formatted FLV file can corrupt memory, causing a crash and video playback failure. The Red Hat/NVD entries describe potential for malicious code execution leading to loss of user rights, with CVSS 3.1 ba...

CVE-2021-0686

CVE-2021-0686 affects Android 10/11 and involves RoleManagerService.getDefaultSmsPackage. A missing permission check could allow a local attacker to disclose information about the default SMS app for a different device user without user interaction. The vulnerability enables local information dis...

CVE-2021-0697

CVE-2021-0697 is a race-condition vulnerability in the PVRSRVRGXSubmitTransferKM path of rgxtransfer.c (PowerVR GPU) on Android SoCs. It enables a possible user-after-free leading to local escalation of privilege with no additional execution privileges required and no user interaction. Exploit st...

CVE-2021-0923

CVE-2021-0923 affects Google Android 12, described as an elevation of privilege in Framework: in Permission.java createOrUpdate there is a missing permission check that could allow a local attacker to gain internal permissions without additional execution privileges and without user interaction. ...

CVE-2021-25387

The CVE-2021-25387 issue affects Samsung’s libsflacextractor library, specifically the sflacfd_get_frm() function. The root cause is improper input validation in sflacfd_get_frm(), which can lead to arbitrary code execution in the mediaextractor process. Affected software is the libsflacextractor...

CVE-2022-20149

CVE-2022-20149 is listed in the Pixel Update Bulletin as a Modem-component vulnerability with Type: ID (information disclosure) and Moderate severity. The connected Pixel bulletin entry confirms the issue is mapped to the Modem and labeled as an information-disclosure (ID) vulnerability, but does...

CVE-2022-20172

CVE-2022-20172 concerns the Android kernel component ShannonRcsService.java, where the onbind method lacks a necessary permission check. This can enable local information disclosure without requiring additional execution privileges or user interaction, per multiple sources. Affected context is de...

CVE-2022-20378

CVE-2022-20378 affects Android kernel and Pixel modem. The Pixel security bulletin lists it under the Kernel/Modem category as an Elevation of Privilege (EoP) issue with “Modem” as the component and indicates a high-severity impact, corroborated by NVD’s CVSS v3.1 base score of 9.8 (CRITICAL) wit...

CVE-2022-20436

CVE-2022-20436 is an elevation-of-privilege vulnerability in Android involving an unauthorized service in the system service, where a component lacks permission checks, enabling Local EoP. The core issue is described across multiple sources as an Android/UNISOC Android component vulnerability aff...

CVE-2022-21743

CVE-2022-21743 affects the component referenced as ion , where an integer overflow can trigger a use-after-free vulnerability. This leads to potential local privilege escalation without requiring additional execution privileges or user interaction (per the provided descriptions). The issue is doc...

CVE-2022-38669

CVE-2022-38669 describes a privilege-escalation issue in the soundrecorder service that lacks a required permission check, enabling elevation of privilege in the contacts service without extra execution privileges. Multiple sources (NVD, Red Hat, OSV) corroborate the core flaw and its local attac...