CVE-2025-20662

CVE-2025-20662 concerns PlayReady TA, where a missing bounds check enables a potential out-of-bounds read that could cause local escalation of privilege if the attacker already has System privileges. Exploitation reportedly does not require user interaction. The CVSS 3.1 vector (LOCAL, HIGH privi...

CVE-2013-7372

CVE-2013-7372 affects the SecureRandom implementation in Apache Harmony (SHA1PRNG_SecureRandomImpl) used by JCA in Android up to version 4.3/4.4 boundaries. The engineNextBytes function uses an incorrect offset when no user seed is provided, making the PRNG output more predictable and enabling at...

CVE-2015-6602

CVE-2015-6602 concerns libutils in Android up to version 5.1.1 LMY48M. A crafted metadata payload in MP3/MP4 files can trigger memory corruption and remote code execution via the mediaserver pathway (through libstagefright). The issue is categorized as a Remote Code Execution vulnerability and is...

CVE-2017-0428

CVE-2017-0428 describes an elevation-of-privilege in the NVIDIA GPU driver that could allow a local malicious application to execute arbitrary code in kernel context on Android devices with Kernel-3.10. The Android entry notes an Android ID (A-32401526) and flags the issue as critical due to pote...

CVE-2018-9352

CVE-2018-9352 affects the ihevcd_allocate_dynamic_bufs function in ihevcd_api.c. The vulnerability is a resource exhaustion due to an integer overflow, potentially enabling remote denial of service with no code execution required. Exploitation requires user interaction. Connected sources (Red Hat...

CVE-2018-9463

The vulnerability CVE-2018-9463 affects the touchscreen path in the Android kernel: In sw49408_irq_runtime_engine_debug (touch_sw49408.c), there is an out-of-bounds write caused by an incorrect bounds check. This can enable local privilege escalation with System execution privileges required and ...

CVE-2019-2015

CVE-2019-2015 affects Android devices and centers on rw_t3t_act_handle_check_rsp in rw_t3t.cc, where a missing bounds check can cause an out-of-bounds write. This leads to local elevation of privilege with no additional execution privileges needed; user interaction is required to exploit. Affecte...

CVE-2021-39677

CVE-2021-39677 affects Android Automotive OS (AAOS) with Android 11. The issue is an OOB heap read in startVideoStream when the camera buffer is zero-sized. This is documented as a high-severity (CVSSv3.1: High) network-facing vulnerability with no user interaction required. Public materials list...

CVE-2021-39750

CVE-2021-39750 is an Android Elevation of Privilege issue where missing permission checks in PackageManager could allow an attacker to change the splash screen theme of other apps, leading to local privilege escalation. Connected sources (CNVD-2022-26771) reference the root cause as an absence of...

CVE-2022-20029

CVE-2022-20029 affects MediaTek devices via the cmdq driver. The root cause is an incorrect bounds check that enables an out-of-bounds read, potentially leading to local information disclosure with System privileges. The vulnerability is documented across multiple feeds (NVD/Red Hat/CVE/CVE lists...

CVE-2022-20043

CVE-2022-20043 relates to a Bluetooth escalation-of-privilege vulnerability caused by a missing permission check that enables local privilege escalation without user interaction. The entry notes no additional execution privileges are required. Reported fixes reference Patch ID ALPS06148177 and Is...

CVE-2022-20067

CVE-2022-20067 affects mdp with an out-of-bounds write caused by a missing bounds check, enabling local escalation to SYSTEM privileges without user interaction. Exploitation details are not provided in the documents, but multiple sources confirm the issue and reference patch ALPS05836585 (Issue ...

CVE-2022-20179

Technical details about CVE-2022-20179 are not provided in the supplied documents; no affected component/version or impact is disclosed. Monitor for updates from official advisories.

CVE-2022-20184

CVE-2022-20184 is listed in the Pixel security bulletin under the Modem category with type ID (Information Disclosure) and moderate severity. Documents indicate it affects Google Pixel devices, specifically the Modem component, but do not provide the root cause or exact exploit details. A remedia...

CVE-2022-20408

CVE-2022-20408 is listed in Google Pixel security bulletin under the Modem component with Type ID and Moderate severity. The bulletin indicates patch level 2022-08-05 or later addresses all issues in that bulletin. Public details on the exact vulnerable subsystem within the modem/kernel are not f...

CVE-2022-20504

In Android 13, CVE-2022-20504 is a local elevation-of-privilege issue in DreamManagerService.java caused by missing permission checks in multiple locations. The vulnerability could allow an attacker with local access to elevate privileges and dismiss system dialogs without requiring user interact...

CVE-2022-20542

The CVE-2022-20542 issue affects Android 13 where the function parseParamsBlob in types.cpp may perform an out-of-bounds write due to a missing bounds check. This can enable local elevation of privilege with no user interaction required (CVSS 7.8, HIGH). The vulnerability is documented in multipl...

CVE-2022-20557

CVE-2022-20557 affects Android 13 Pixel devices. The issue is in MessageQueueBase.h (MessageQueueBase) where a missing bounds check allows an out-of-bounds read, potentially enabling local escalation of privilege with SYSTEM privileges and no user interaction. Public references note a Pixel updat...

CVE-2022-20606

The CVE-2022-20606 entry concerns SAEMM_MiningCodecTableWithMsgIE in SAEMM_RadioMessageCodec.c, where a missing bounds check can cause an out-of-bounds read. This could enable remote information disclosure with system privileges required. User interaction is not required. Connected sources confir...

CVE-2022-21753

CVE-2022-21753 affects a WLAN driver where a missing bounds check can cause an out-of-bounds write, enabling local escalation to SYSTEM privileges with no user interaction. This is described across sources (NVD/Red Hat/CVE list) as a local-privilege-escalation issue in the WLAN driver, with the p...

CVE-2022-21766

CVE-2022-21766 affects MediaTek CCCI (core inter-processor communication) with an out-of-bounds write caused by a missing bounds check. This vulnerability can enable local escalation of privileges to SYSTEM level without user interaction. Exploitation status is not described in the provided docum...

CVE-2022-25815

The CVE-2022-25815 entry corresponds to a PendingIntent hijacking vulnerability in the Samsung Weather application. Connected sources confirm a local privilege/unauthorized action risk via hijacking PendingIntent in Weather prior to SMR Mar-2022 Release 1. Impacts are described as enabling local ...

CVE-2022-27830

CVE-2022-27830 describes an improper validation vulnerability in the SemBlurInfo component prior to Samsung SMR Apr-2022 Release 1, enabling attackers with local access to launch certain activities. The NVD entry lists a High risk (CVSS v3.1: 7.8) with LOCAL access, LOW attack complexity, and no ...

CVE-2022-27834

CVE-2022-27834: Use-after-free in the DSP driver’s dsp_context_unload_graph function (pre-SMR Apr-2022 Release 1). Affects the DSP driver; attackers could cause malicious actions. Root cause: use-after-free in the affected function. CVSS details show high impact under CVSS 3.1 (LOCAL, HIGH impact...

CVE-2022-42501

CVE-2022-42501 involves an out-of-bounds write in HexString2Value within util.cpp. The vulnerability affects Android kernel components and can enable local escalation of privilege with System execution privileges, without user interaction. Exploitation details, affected versions, and remediation ...

CVE-2023-20976

CVE-2023-20976 affects Android 13 where the vulnerability exists in getConfirmationMessage of DefaultAutofillPicker.java . Improper input validation may mislead a user into selecting the default autofill application, enabling a local privilege escalation with no extra execution privileges require...

CVE-2023-20991

CVE-2023-20991 corresponds to a buffer/bounds issue in the Pixel ble_scanner_hci_interface.cc function btm_ble_process_periodic_adv_sync_lost_evt. The vulnerability is an out-of-bounds read that could enable local information disclosure with System privileges and requires no user interaction. Evi...

CVE-2023-20998

CVE-2023-20998 affects Android 13 and related Pixel/Android components. The issue is described as an input validation flaw that can trigger a persistent reboot loop, causing local denial of service. Exploitation requires privileges (local) but does not require user interaction. Connected sources ...

CVE-2023-21030

The CVE-2023-21030 entry describes a memory corruption vulnerability due to a double free in keystore_cli_v2.cpp, enabling local privilege escalation in Android 13 with no user interaction required. Affected software in the connected data includes Google Pixel security advisories and Pixel bullet...

CVE-2023-21063

CVE-2023-21063 affects Android kernel components (ParseWithAuthType in simdata.cpp) and is described as an out-of-bounds read that can enable local privilege escalation with SYSTEM-level privileges required. Multiple connected sources confirm the issue and its Android/Pixel context, including Pix...

CVE-2023-21179

CVE-2023-21179 affects Android 13 and involves XmlUtil.java’s parseSecurityParamsFromXml. The root issue is a weakness in how crypto is used, allowing bypass of a user-specified wifi encryption protocol, enabling local privilege escalation with no additional execution privileges or user interacti...

CVE-2023-21190

CVE-2023-21190 affects Android 13 devices, with the issue located in btm_acl_encrypt_change within btm_acl.cc. A remote device can turn off encryption without terminating the connection, potentially enabling local information disclosure and requiring user interaction for exploitation. Exploitatio...

CVE-2023-21192

CVE-2023-21192 affects Android 13 and is tied to InputMethodManagerService.setInputMethodWithSubtypeIdLocked, where improper input validation can allow configuring input methods that are not enabled, leading to local elevation of privilege without extra user interaction. The vulnerability descrip...

CVE-2023-32809

CVE-2023-32809 : Affects the Bluetooth driver in MediaTek devices. The issue is improper access control of the register interface, enabling possible read/write access to registers. This can lead to local leakage of sensitive information with system-level privileges required for exploitation, and ...

CVE-2023-48412

CVE-2023-48412 affects the Mali driver’s private_handle_t in mali_gralloc_buffer.h. A logic error can cause an information leak, enabling local information disclosure without additional execution privileges and without user interaction. The impact is restricted to local disclosure; exploitation d...

CVE-2024-32900

The CVE-2024-32900 issue affects the LWIS (lwis_fence_signal) path in lwis_debug.c. It describes a Use-After-Free caused by improper locking, enabling local escalation of privilege from the hal_camera_default SELinux label without additional execution privileges. The vulnerability is documented a...

CVE-2025-27701

CVE-2025-27701 describes a null-pointer dereference in the function process_crypto_cmd , where values in ptrs[i] can be NULL after slice_map_array() and are later dereferenced without a NULL check, enabling a local temporary DoS or out-of-bounds read and information disclosure. The CVE is listed ...

CVE-2014-9895

Technical details for CVE-2014-9895 are not publicly available in the provided documents. The materials reference an information disclosure in media-device.c but do not specify affected versions, root cause, impact, or fixes within this corpus. Monitor for updates.

CVE-2015-3875

CVE-2015-3875 affects libutils in Android before 5.1.1 LMY48T. A crafted audio file can cause memory corruption, enabling remote code execution or a denial of service. Root cause: memory corruption in libutils exploited via crafted audio input. Impact is high; mitigation is to upgrade Android to ...

CVE-2015-3876

CVE-2015-3876 is a vulnerability in Android's Stagefright libstagefright that could allow remote code execution by processing crafted MP3/MP4 media files. The Android bulletin documents this as part of a set of remote‑code‑execution issues in libstagefright, with affected versions including Andro...

CVE-2018-9390

CVE-2018-9390 involves an out-of-bounds read in procfile_write within gl_proc.c caused by an incorrect bounds check, enabling local privilege escalation with SYSTEM rights. Exploitation is not user-initiated. Reports from NVD/Red Hat/CNNVD mirror a consistent description across Android Pixel devi...

CVE-2018-9465

Summary : CVE-2018-9465 affects the Android kernel, specifically the binder.c task_get_unused_fd_flags path, where a use-after-free can cause memory corruption. This could enable local privilege escalation with no extra privileges required and without user interaction. Multiple connected advisori...

CVE-2020-0430

CVE-2020-0430 affects the Linux kernel skb_headlen in /include/linux/skbuff.h, causing a possible out-of-bounds read due to memory corruption and enabling local privilege escalation without user interaction. Affected product context in provided docs is Android kernel/Unity Linux kernel. Exploitat...

CVE-2020-27059

CVE-2020-27059 affects the Android Framework, specifically in onAuthenticated of AuthenticationClient.java, enabling a tapjacking scenario via an overlaid window during fingerprint requests. Root cause is an overlay-based UI manipulation that can lead to local elevation of privilege with user int...

CVE-2021-39738

CVE-2021-39738 concerns Google Android CarSetings: a missing permission check allows pairing a Bluetooth device without user consent, enabling local elevation of privilege without extra execution privileges. Affected: CarSetings on Android 10, 11, 12, and 12L. Exploitation is described as local w...

CVE-2021-39744

CVE-2021-39744 affects Android 12L and is described in Android 12L security release notes. The vulnerability arises in the DevicePolicyManager, enabling a side-channel that can determine whether an app is installed without query permissions, leading to local information disclosure without additio...

CVE-2021-39756

CVE-2021-39756 affects Android 12L Framework, where a side-channel information disclosure could allow an app to be detected as installed without query permissions, enabling local information disclosure with no execution privileges. Root cause is a leakage in Framework that can reveal installation...

CVE-2021-39775

CVE-2021-39775 is an Android 12L information-disclosure vulnerability describing a side-channel that lets an app determine whether another app is installed without query permissions. Affected component: Android framework/People context; root cause: side-channel information disclosure enabling loc...

CVE-2021-39779

CVE-2021-39779 affects Android 12L via Telecom Service.getCallStateUsingPackage, where there is a missing permission check that could allow local information disclosure of the call state without extra execution privileges. The issue is described across sources (CVE entry and CNVD-2022-44589) as a...

CVE-2021-39791

The CVE-2021-39791 entry affects the Android component WallpaperManagerService on Android 12L, describing a side‑channel information disclosure that allows an attacker to determine whether an app is installed without query permissions, enabling local information disclosure with no additional exec...