CVE-2021-0547

CVE-2021-0547 concerns a local elevation-of-privilege vulnerability in Android 11. In NetInitiatedActivity.java onReceive, an attacker-controlled value can be supplied to a GPS HAL handler due to a missing permission check, enabling local privilege escalation with undefined behavior in some HAL i...

CVE-2021-0936

CVE-2021-0936 affects the Android kernel (acc_read in f_accessory.c) where a use-after-free can cause memory corruption leading to local privilege escalation without user interaction. The issue is described across multiple sources (NVD/NASL/CNVD etc.) as a memory corruption vulnerability in the A...

CVE-2021-39639

CVE-2021-39639 affects the Android kernel component (fvp.c) with a missing permission check in TBD, enabling local escalation of privilege when an attacker has physical access to device internals. The vulnerability could be exploited without user interaction; attack vector is physical and impact ...

CVE-2021-39677

CVE-2021-39677 affects Android Automotive OS (AAOS) with Android 11. The issue is an OOB heap read in startVideoStream when the camera buffer is zero-sized. This is documented as a high-severity (CVSSv3.1: High) network-facing vulnerability with no user interaction required. Public materials list...

CVE-2021-39748

CVE-2021-39748 affects Android 12L in the Framework through InputMethodEditor. The issue arises from an unsafe PendingIntent that can allow access to files accessible to Settings, causing local information disclosure without extra privileges and without user interaction. The ENISA/Android release...

CVE-2022-20188

CVE-2022-20188 concerns the Android kernel in Pixel/Android devices. Public data in NVD shows CVSSv3.1 base score 7.5 (Network attack, no user interaction, confidentiality impact High; integrity/availability None). The Pixel security bulletin (June 2022) lists this CVE among fixes for Pixel devic...

CVE-2022-20198

CVE-2022-20198 affects Android 12L, with a flaw in the NFC stack: in llcp_dlc_proc_connect_pdu (llcp_dlc.cc) there is an out-of-bounds read due to a missing bounds check. This can lead to local information disclosure and requires system privileges; no user interaction is needed. Connected sources...

CVE-2022-20373

CVE-2022-20373 affects the Android kernel, specifically the st21nfc_loc_set_polaritymode function in fc/st21nfc.c. The issue is a use-after-free caused by a race condition, enabling local elevation of privilege with SYSTEM privileges required and no user interaction needed. Connected sources (Red...

CVE-2022-20504

In Android 13, CVE-2022-20504 is a local elevation-of-privilege issue in DreamManagerService.java caused by missing permission checks in multiple locations. The vulnerability could allow an attacker with local access to elevate privileges and dismiss system dialogs without requiring user interact...

CVE-2022-20526

CVE-2022-20526 affects Android 13 via CanvasContext::draw in CanvasContext.cpp, where a missing bounds check can cause an out-of-bounds write and local privilege escalation. The exploit requires user interaction; no remote vector is detailed. Multiple connected sources (Red Hat advisory, NVD, OSV...

CVE-2022-20539

CVE-2022-20539 affects Android-13; the issue is in parameterToHal of Effect.cpp where a missing bounds check can cause an out-of-bounds write. This may enable local escalation of privilege in the audio server with system execution privileges, and requires no user interaction. Documents consistent...

CVE-2022-20559

CVE-2022-20559 affects Android 13, describing a side-channel disclosure in revokeOwnPermissionsOnKill within PermissionManager.java that may allow an app to be detected as installed without query permissions. The issue results in local information disclosure with no additional execution privilege...

CVE-2022-20610

CVE-2022-20610 : In Android Pixel devices, a vulnerability in the cellular modem firmware (Pixel cellular modem) enables a possible out-of-bounds read due to a missing bounds check, which could allow remote code execution. Exploitation is network-based with no user interaction required; LTE authe...

CVE-2022-21758

CVE-2022-21758 involves a memory corruption risk in the internal component "ccu" caused by a double free. The result is potential local escalation of privilege with System execution privileges needed; exploitation does not require user interaction. A patch exists (Patch ID: ALPS06439600; Issue ID...

CVE-2022-25820

CVE-2022-25820 concerns Samsung’s fingerprint matching algorithm, with a vulnerable design present before SMR Mar-2022 Release 1. It enables a physical attacker to brute-force a screen-lock password. The issue is linked to local access and high confidentiality impact per CVSS 3.1 metrics. A fix i...

CVE-2022-27575

CVE-2022-27575 affects One UI Home prior to Samsung SMR April-2022 Release 1. The issue is described as an information disclosure vulnerability that allows an attacker to access information about the currently launched foreground application without permission. Concrete details in connected sourc...

CVE-2022-28781

The CVE-2022-28781 entry describes an improper input validation in Settings prior to Samsung SMR May 2022 Release 1, enabling attackers to launch arbitrary activities with system privileges. Connected sources confirm this CVE pertains to Samsung Mobile/SMR updates and note the patch adds proper c...

CVE-2022-33715

The CVE-2022-33715 issue affects Samsung LauncherProvider prior to SMR Aug-2022 Release 1, with a vulnerability in improper access control and path traversal that could let a local attacker access files on One UI. The root cause is tied to the LauncherProvider component, enabling local exploitati...

CVE-2022-39900

CVE-2022-39900 affects Samsung Nice Catch prior to SMR Dec-2022 Release 1. The issue is an improper access control that could allow a physical attacker to access all toast contents generated in the Secure Folder environment via Nice Catch. Affected component: Nice Catch app (Samsung Mobile). Root...

CVE-2023-20976

CVE-2023-20976 affects Android 13 where the vulnerability exists in getConfirmationMessage of DefaultAutofillPicker.java . Improper input validation may mislead a user into selecting the default autofill application, enabling a local privilege escalation with no extra execution privileges require...

CVE-2023-20987

CVE-2023-20987: A vulnerability in btm_read_link_quality_complete within btm_acl.cc of Android 13 can cause an out-of-bounds read, leading to local information disclosure over Bluetooth when the attacker has System privileges. The issue requires no user interaction and has an adjacent attack vect...

CVE-2023-21044

CVE-2023-21044 relates to the Android kernel and the initialization of VendorGraphicBufferMeta. The issue is an out-of-bounds read caused by a missing bounds check in init, enabling potential local information disclosure with System execution privileges required. Exploitation is described as loca...

CVE-2023-21068

The CVE-2023-21068 entry concerns Android kernel with a local privilege escalation via booting with a hidden debug policy due to a missing user warning. Affected component is the Android kernel; description states that after preparing the device and hiding the warning, a user can hand the device ...

CVE-2023-21307

CVE-2023-21307 affects Android’s Bluetooth component. A paired Bluetooth device can bypass permissions to read the device’s long-term identifier, leading to local information disclosure without additional execution privileges; user interaction is required for exploitation. The issue is categorize...

CVE-2023-35661

CVE-2023-35661 is described as an out-of-bounds read in the function ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp caused by a missing bounds check. This can lead to remote information disclosure without additional privileges or user interaction. The CVE description does not specify affected ...

CVE-2023-48410

CVE-2023-48410 involves an out-of-bounds read in cd_ParseMsg of cd_codec.c due to a missing bounds check, enabling remote information disclosure without extra privileges or user interaction. The description is consistent across NVD, PRION, CVELIST, and CNNVD entries. Pixel/Android Bulletin refere...

CVE-2023-48415

CVE-2023-48415 concerns an out-of-bounds read in Init of protocolembmsadapter.cpp caused by a missing bounds check. Per multiple connected documents, this can lead to local information disclosure without requiring user interaction. The issue is associated with Android/Google Pixel components (inc...

CVE-2024-11624

Google Android suffers from an Elevation of Privilege (EoP) vulnerability in the VPN subcomponent. The root cause is an undeclared permission that allows an attacker to add applications to bypass a VPN. This can lead to a local escalation of privilege without requiring additional execution privil...

CVE-2024-20107

A security vulnerability exists in the da component of MediaTek MT8676 chipsets due to a missing bounds check . This flaw allows for an out-of-bounds read , which could result in local information disclosure without requiring additional execution privileges or user interaction. While a patch ID (...

CVE-2024-32893

A security vulnerability exists in the Exynos platform, specifically within the _s5e9865_mif_set_rate function of exynos_dvfs.c . The issue is caused by improper casting , leading to a possible out-of-bounds read . This flaw could result in local information disclosure without requiring additiona...

CVE-2024-32911

CVE-2024-32911 affects Google Pixel devices, specifically the Modem component. The issue stems from improper use of crypto, enabling remote elevation of privilege with no user interaction. The Pixel Update Bulletin lists this CVE under the Pixel firmware/Modem category and indicates that patch le...

CVE-2024-47014

Android versions prior to 2024-10-05 on Google Pixel devices are vulnerable to a privilege escalation (EoP) flaw in the ABL component . The vulnerability is tracked under bug ID A-330537292 . To resolve this issue, users should update their devices to a security patch level of 2024-10-05 or later...

CVE-2024-47030

Android versions prior to 2024-10-05 on Google Pixel devices are vulnerable to an information disclosure vulnerability (ID) in the ACPM component (Bug ID A-315191818 ). An attacker can exploit this flaw to obtain sensitive information . Remediation is provided in the security patch level of 2024-...

CVE-2025-20665

CVE-2025-20665 affects MediaTek chipsets’ devinfo component where a missing SELinux policy enables local information disclosure of the device identifier without additional privileges. Multiple sources corroborate the issue and reference patch ALPS09555228 / MSV-2760 from MediaTek’s bulletin. Impa...

CVE-2014-7224

CVE-2014-7224 is an Android code‑execution vulnerability affecting versions prior to 4.4.0, tied to the addJavascriptInterface method and the accessibility/accessibilityTraversal objects. A remote attacker could potentially execute arbitrary code; NVD assigns high severity (CVSS v3.1: 8.8, vector...

CVE-2015-3875

CVE-2015-3875 affects libutils in Android before 5.1.1 LMY48T. A crafted audio file can cause memory corruption, enabling remote code execution or a denial of service. Root cause: memory corruption in libutils exploited via crafted audio input. Impact is high; mitigation is to upgrade Android to ...

CVE-2015-5570

CVE-2015-5570 is a use-after-free vulnerability in Adobe Flash Player (affecting pre-18.0.0.241 and 19.x before 19.0.0.185) and Adobe AIR before 19.0.0.190, enabling remote code execution via specially crafted SWF handling. Adobe APSB15-23 patches are referenced; apply fixed builds to remediate.

CVE-2017-0722

Summary of CVE-2017-0722 : A remote code execution vulnerability in the Android media framework, specifically the h263 decoder. Affected products/versions: Android devices running 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Root cause as stated in the provided documents is the vulnerabili...

CVE-2020-0062

CVE-2020-0062 affects Android Euicc. An information disclosure exists due to an included test certificate, enabling remote data exposure without extra privileges. Exploitation is network-based with no user interaction required. CVSSv2/3.1 base scores are 5.0 (MEDIUM) and 7.5 (HIGH) respectively. ...

CVE-2020-0117

CVE-2020-0117 affects the Android System component (aes_cmac in aes_cmac.cc), where an out-of-bounds write can occur due to an integer overflow. This could allow remote code execution in the Bluetooth server with no user interaction. Affected Android versions: 8.0–10 (Android 8.0, 8.1, 9, 10). Ex...

CVE-2020-0371

CVE-2020-0371 is an Android vulnerability described as an out-of-bounds read due to a missing bounds check, affecting Android components on the Android SoC with Android ID A-163008256. The public records list this CVE across multiple sources (NVD, Red Hat, PRION, CVE List, OSV) with consistent wo...

CVE-2020-35693

The CVE-2020-35693 entry describes a BLE pairing flaw on some Samsung Android devices up to 7.1.1 where an attacker-controlled BLE device can pair silently when Bluetooth is on and a connectable BLE advertisement is present, without user interaction. During pairing, identifying information such a...

CVE-2021-0979

The CVE-2021-0979 issue affects Android 12 and centers on ShortcutService.java in the Launcher path. The isRequestPinItemSupported function allows a cross-user leak of installed packages by bypassing permissions, enabling local information disclosure without requiring user interaction or addition...

CVE-2021-1015

CVE-2021-1015 affects Android 12 via the getMeidForSlot path in PhoneInterfaceManager.java, enabling side-channel disclosure to determine if an app is installed without query permissions. Outcome is local information disclosure with no extra privileges required and no user interaction. Connected ...

CVE-2021-39680

CVE-2021-39680 affects the Android kernel, with the flaw located in sec_SHA256_Transform within sha256_core.c. The issue allows reading heap data due to uninitialized data, enabling local information disclosure with system privileges. Exploitation does not require user interaction. The vulnerabil...

CVE-2021-39742

CVE-2021-39742 affects Android 12L Voice Mail: a missing permission check allows information disclosure by retrieving a trackable identifier from Voicemail, with local access and user interaction required for exploitation. The issue is classified under System/ID in Android 12L release notes and i...

CVE-2021-39765

CVE-2021-39765 is a permission bypass in the Gallery app on Android 12L caused by a confusion of agents (confused deputy) that can lead to local information disclosure. Exploitation is described as local with low attack complexity and no user interaction required, requiring User privileges. The C...

CVE-2021-39787

CVE-2021-39787 affects Android 12L SystemUI. The issue enables an arbitrary Activity launch via a confused deputy, resulting in local elevation of privilege with no extra execution privileges required and a required user interaction for exploitation. Affected component: SystemUI on Android-12L; r...

CVE-2021-39791

The CVE-2021-39791 entry affects the Android component WallpaperManagerService on Android 12L, describing a side‑channel information disclosure that allows an attacker to determine whether an app is installed without query permissions, enabling local information disclosure with no additional exec...

CVE-2022-20029

CVE-2022-20029 affects MediaTek devices via the cmdq driver. The root cause is an incorrect bounds check that enables an out-of-bounds read, potentially leading to local information disclosure with System privileges. The vulnerability is documented across multiple feeds (NVD/Red Hat/CVE/CVE lists...