CVE-2025-0077

A race condition exists in multiple functions of UserController.java within Google Android , which can be exploited to bypass the lock screen . This vulnerability allows for local escalation of privilege without requiring additional execution privileges or user interaction. Exploitation details a...

CVE-2025-26435

CVE-2025-26435 affects ContentProtectionTogglePreferenceController.java and is due to a logic error in updateState that could allow a secondary user to disable the primary user's app scanning setting, enabling local privilege escalation without additional privileges or user interaction. The entry...

CVE-2023-21264

CVE-2023-21264 affects the Linux kernel (ARM64 KVM) where a memory access check in mem_protect.c can permit access to hypervisor memory due to the check being in the wrong place. The result is local elevation of privilege to System execution level, with exploitation not requiring user interaction...

CVE-2025-26427

A path traversal error in multiple locations within the Android operating system allows for local escalation of privilege (EoP) without requiring additional execution privileges. Exploitation requires user interaction . This vulnerability affects the Framework component and the Documents UI subco...

CVE-2025-26428

Google Android is affected by a lock screen bypass vulnerability caused by a logic error in the startLockTaskMode function within LockTaskController.java . This flaw could allow for a physical escalation of privilege without requiring additional execution privileges. Exploitation requires user in...

CVE-2019-9453

CVE-2019-9453 corresponds to an out-of-bounds read in the Android kernel F2FS touch driver, caused by improper input validation. This can enable local information disclosure and could potentially allow system-level privileges; exploitation requires local access with no user interaction. Publicly ...

CVE-2023-20938

CVE-2023-20938 affects the Android kernel via binder_transaction_buffer_release in binder.c, causing a use-after-free due to improper input validation. This can enable local privilege escalation with no extra execution privileges required and without user interaction; the advisory consistently no...

CVE-2025-26416

A heap buffer overflow exists in the initializeSwizzler function of SkBmpStandardCodec.cpp within the Skia graphics library. This vulnerability allows for an out of bounds write , which could lead to remote escalation of privilege without requiring additional execution privileges or user interact...

CVE-2025-26442

The CVE-2025-26442 issue affects Android’s NotificationAccessConfirmationActivity.java (onCreate). Root cause: a logic error in the NLS int ent filter verification leading to information disclosure. Impact: local information disclosure without privilege/UI interaction. Exploitability: LOCAL, with...

CVE-2025-26452

Google Android is susceptible to a local elevation of privilege vulnerability located in the loadDrawableForCookie function of ResourcesImpl.java. This flaw arises from a confused deputy issue, which allows an attacker to access task snapshots belonging to other applications. Exploitation of this...

CVE-2025-26463

A denial of service vulnerability exists in Google Android due to uncontrolled resource consumption. Specifically, the allowPackageAccess function in multiple files can be triggered to exhaust resources when an attacker repeatedly adds allowed packages. This vulnerability allows for a local persi...

CVE-2025-26453

A logic error in the isContentUriForOtherUser function within BluetoothOppSendFileInfo.java on Google Android can lead to a cross-user data leak . This vulnerability allows for local information disclosure without requiring additional execution privileges or user interaction. No specific affected...

CVE-2025-22423

A missing bounds check in the ParseTag function of dng_ifd.cpp within the System component of Google Android can lead to a crash of the image renderer. This vulnerability can be exploited remotely to cause a denial of service (DoS) without requiring additional execution privileges or user interac...

CVE-2025-22416

Google Android is affected by an elevation of privilege vulnerability (CWE-441) caused by a confused deputy issue within ChooserActivity.java . This flaw allows an attacker to view images belonging to other users, potentially leading to a local escalation of privilege without requiring additional...

CVE-2025-26420

A vulnerability in the Permission Controller component of Android allows for local elevation of privilege (EoP) without requiring additional execution privileges or user interaction. The issue stems from permission overload in multiple functions of GrantPermissionsActivity.java , which can trick ...

CVE-2025-26432

CVE-2025-26432: A DoS vulnerability in Google Android arises from missing length checks in multiple locations, allowing local denial of service with no extra privileges and no user interaction. The issue is described across multiple CVE feeds; Android bulletin details assignability to patch level...

CVE-2025-26450

A high-severity Elevation of Privilege (EoP) vulnerability exists in the Android Framework component within IInputMethodSessionWrapper.java. Due to a missing permission check in the onInputEvent function, an untrusted application can inject key and motion events into the default Input Method Edit...

CVE-2025-26462

CVE-2025-26462 corresponds to a logic error in AccessibilityServiceConnection.java that can cause a background activity launch and local privilege escalation without user interaction. Multiple trusted sources (NVD, Red Hat, OSV) confirm the Issue, with CVSS v3.1: Local, Low UI, High impact on con...

CVE-2025-22438

Google Android is affected by a use after free vulnerability in the InputDispatcher.cpp component, specifically within the afterKeyEventLockedInterruptable function. An attacker can exploit this issue to achieve local escalation of privilege without requiring additional execution privileges or us...

CVE-2025-22442

A race condition in multiple functions of DevicePolicyManagerService.java allows for the installation of unauthorized applications into a newly created work profile on Android (affecting versions 13–15). An attacker can exploit this flaw to achieve local escalation of privilege without requiring ...

CVE-2025-26425

A logic error in multiple functions of RoleService.java in Android causes a permission squatting vulnerability. This can lead to local elevation of privilege on versions where android.permission.MANAGE_DEFAULT_APPLICATIONS was not defined. Exploitation does not require user interaction. The issue...

CVE-2024-40653

A logic error in ConnectionServiceWrapper.java within the System component of Google Android allows for the indefinite retention of a permission in the background. This vulnerability could lead to a local elevation of privilege without requiring additional execution privileges, though user intera...

CVE-2024-49722

Google Android is impacted by an information disclosure vulnerability (CWE-610) within the showAvatarPicker function of EditUserPhotoController.java. The root cause is a confused deputy issue involving an obfuscated proxy, which allows for cross-user image disclosure . An attacker can exploit thi...

CVE-2024-49730

Google Android is impacted by a memory corruption vulnerability in FuseDaemon.cpp , where an out-of-bounds write can occur. This flaw allows an attacker to achieve a local escalation of privilege without requiring additional execution privileges or user interaction. Remediation involves updating ...

CVE-2018-5383

Bluetooth firmware or operating system software drivers in macOS (before 10.13, High Sierra), iOS (before 11.4), and Android (before the 2018-06-05 patch) fail to sufficiently validate elliptic curve parameters during a Diffie-Hellman key exchange . This flaw may allow a remote attacker to obtain...

CVE-2025-22418

The Google Android operating system is affected by an elevation of privilege vulnerability (CVE-2025-22418) caused by intent redirection in multiple locations, which can result in a confused deputy condition. This flaw allows an attacker to gain elevated privileges on the system without requiring...

CVE-2025-26422

A security vulnerability exists in the WindowManagerService.java component of the Android operating system. The flaw is caused by a missing permission check , which allows for the execution of dumpsys without the required permissions. This could lead to a local escalation of privilege without nec...

CVE-2025-26445

Google Android is vulnerable to a local information disclosure vulnerability due to a missing permission check in the offerNetwork function of ConnectivityService.java. An attacker can exploit this flaw to leak sensitive data without requiring additional execution privileges or user interaction. ...

CVE-2025-26448

Google Android is affected by an out-of-bounds read vulnerability in the writeToParcel function of CursorWindow.cpp . This issue is caused by the use of uninitialized data (CWE-457), which can lead to local information disclosure . Exploitation does not require additional execution privileges or ...

CVE-2024-32896

The CVE-2024-32896 issue is a local Elevation of Privilege (EoP) in the Android Framework affecting Pixel devices, caused by a logic error that could enable privilege escalation with no extra execution privileges. Exploitation requires user interaction per the description, with the Android bullet...

CVE-2025-26424

A logic error in multiple functions of VpnManager.java within the Google Android operating system can lead to a cross-user data leak . This vulnerability allows for local information disclosure without requiring additional execution privileges or user interaction. While the NCSC notes general And...

CVE-2025-22427

A logic error in the onCreate function of NotificationAccessConfirmationActivity.java within Google Android allows for a local escalation of privilege . This vulnerability can be leveraged to grant notification access while the device is above the lock screen without requiring additional executio...

CVE-2025-26458

CVE-2025-26458 affects Android’s LocationProviderManager.java, where a logic error can trigger a background activity launch, enabling local elevation of privilege with no extra execution privileges or user interaction required. Multiple connected sources corroborate a local-privilege-escapable co...

CVE-2025-26430

CVE-2025-26430 affects SpaAppBridgeActivity (Android). A logic error in getDestinationForApp may allow cross-user file reveal, enabling local elevation of privilege with no extra privileges and no user interaction. Documents indicate this CVE is addressed in Android security bulletins with 2025-0...

CVE-2024-49720

A logic error in multiple functions of Permissions.java within the Google Android operating system allows an attacker to override the state of a user's location permissions . This vulnerability can lead to a local escalation of privilege without requiring additional execution privileges or user i...

CVE-2025-22435

Google Android is affected by a memory corruption vulnerability caused by a type confusion error in the avdt_msg_ind function of avdt_msg.cc. An attacker can exploit this flaw to achieve escalation of privilege on a paired device without requiring additional execution privileges or user interacti...

CVE-2020-0093

CVE-2020-0093 is a libexif vulnerability affecting Android 8.x–10, where a missing bounds check in exif_data_save_data_entry can cause an out-of-bounds read, leading to local information disclosure. The issue arises from an insufficient bounds check in exif-data.c; exploit requires user interacti...

CVE-2020-0452

CVE-2020-0452 affects libexif; the issue is an out-of-bounds write caused by an integer overflow in exif-entry.c, potentially enabling remote code execution when processing remote image data. Multiple connected advisories (CentOS RHSA-2020:5402, ALSA-2020:5393 for AlmaLinux, Amazon Linux ALAS2-20...

CVE-2021-0512

CVE-2021-0512 is a Linux kernel/Android-hid input issue: out-of-bounds write caused by a heap buffer overflow in __hidinput_change_resolution_multipliers of hid-input.c, enabling local privilege escalation with no user interaction. Affected: Android kernel HID input path; exploitation described a...

CVE-2022-20345

CVE-2022-20345 affects Android 12/12L with a vulnerability in the Bluetooth L2C BLE implementation. The issue is a missing bounds check in l2cble_process_sig_cmd (l2c_ble.cc) that can cause an out-of-bounds write, enabling remote code execution over Bluetooth without user interaction. Android bul...

CVE-2019-2219

CVE-2019-2219 affects the Android Framework, specifically when linked to NotificationManagerService and related files. The described issue is a local elevation of privilege due to a permission bypass that could allow recording audio from the background without user notification, requiring User ex...

CVE-2017-13156

CVE-2017-13156 is an elevation of privilege vulnerability in the Android system (ART) affecting versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0 . The root cause involves a flaw where the Android package installer fails to check extra data before PKZIP, allowing an attacker to concat DEX an...

CVE-2023-21400

CVE-2023-21400 affects the Linux kernel io_uring subsystem, specifically in multiple functions within io_uring.c where improper locking on rings with IOPOLL can cause kernel memory corruption. This memory corruption could enable local privilege escalation to kernel System execution privileges wit...

CVE-2020-0465

CVE-2020-0465 refers to the Android kernel HID multitouch vulnerability. In hid-multitouch.c, there is an out-of-bounds write due to a missing bounds check, which could enable local privilege escalation with no additional privileges and no user interaction required. The description confirms affec...

CVE-2021-0605

CVE-2021-0605 is a kernel vulnerability disclosed in the Android/Linux kernel: in pfkey_dump of af_key.c, there is a missing bounds check causing a local out-of-bounds read that can disclose kernel information. Exploitation requires local privileges; no user interaction is needed. Connected advis...

CVE-2020-0034

CVE-2020-0034 describes an out-of-bounds read in libvpx’s vp8_decode_frame (decodeframe.c) due to improper input validation that could leak information remotely if error correction is enabled. The vulnerability is exploitable remotely with no user interaction and could lead to information disclos...

CVE-2024-43093

CVE-2024-43093 affects the Android Framework component ExternalStorageProvider.java, where a bypass of a file-path filter can occur due to incorrect Unicode normalization. The root issue can allow local escalation of privilege without extra execution privileges, with exploitation requiring user i...

CVE-2026-0163

A use-after-free vulnerability exists in multiple functions of the vpu_ioctl.c file within the Video Processing Unit (VPU) driver on Android. The flaw occurs when the driver retrieves a driver instance from an array and resets the reference counter before closing it, leading to memory being used ...

CVE-2024-29745

CVE-2024-29745 affects Google Pixel devices in the bootloader component, with an information-disclosure flaw caused by uninitialized data. The NVD entry describes local information disclosure without extra privileges or user interaction. The Pixel Update Bulletin notes this vulnerability as poten...

CVE-2024-29748

CVE-2024-29748 is an Android Pixel privilege-escalation vulnerability affecting Pixel firmware. Root cause described as a logic error allowing local escalation of privilege without extra execution privileges; exploitation requires user interaction. CVSSv3.1 base score 7.8 (HIGH) with LOCAL access...