CVE-2022-20526

CVE-2022-20526 affects Android 13 via CanvasContext::draw in CanvasContext.cpp, where a missing bounds check can cause an out-of-bounds write and local privilege escalation. The exploit requires user interaction; no remote vector is detailed. Multiple connected sources (Red Hat advisory, NVD, OSV...

CVE-2022-20539

CVE-2022-20539 affects Android-13; the issue is in parameterToHal of Effect.cpp where a missing bounds check can cause an out-of-bounds write. This may enable local escalation of privilege in the audio server with system execution privileges, and requires no user interaction. Documents consistent...

CVE-2022-20545

CVE-2022-20545 affects Android 13 on Google Pixel devices. The issue resides in the MediaControlPanel.java function bindArtworkAndColors, where improper input validation can crash the phone, causing a remote denial of service with no additional execution privileges required. Exploitation does not...

CVE-2022-20559

CVE-2022-20559 affects Android 13, describing a side-channel disclosure in revokeOwnPermissionsOnKill within PermissionManager.java that may allow an app to be detected as installed without query permissions. The issue results in local information disclosure with no additional execution privilege...

CVE-2022-20610

CVE-2022-20610 : In Android Pixel devices, a vulnerability in the cellular modem firmware (Pixel cellular modem) enables a possible out-of-bounds read due to a missing bounds check, which could allow remote code execution. Exploitation is network-based with no user interaction required; LTE authe...

CVE-2022-21758

CVE-2022-21758 involves a memory corruption risk in the internal component "ccu" caused by a double free. The result is potential local escalation of privilege with System execution privileges needed; exploitation does not require user interaction. A patch exists (Patch ID: ALPS06439600; Issue ID...

CVE-2022-25820

CVE-2022-25820 concerns Samsung’s fingerprint matching algorithm, with a vulnerable design present before SMR Mar-2022 Release 1. It enables a physical attacker to brute-force a screen-lock password. The issue is linked to local access and high confidentiality impact per CVSS 3.1 metrics. A fix i...

CVE-2022-27575

CVE-2022-27575 affects One UI Home prior to Samsung SMR April-2022 Release 1. The issue is described as an information disclosure vulnerability that allows an attacker to access information about the currently launched foreground application without permission. Concrete details in connected sourc...

CVE-2022-33715

The CVE-2022-33715 issue affects Samsung LauncherProvider prior to SMR Aug-2022 Release 1, with a vulnerability in improper access control and path traversal that could let a local attacker access files on One UI. The root cause is tied to the LauncherProvider component, enabling local exploitati...

CVE-2022-39900

CVE-2022-39900 affects Samsung Nice Catch prior to SMR Dec-2022 Release 1. The issue is an improper access control that could allow a physical attacker to access all toast contents generated in the Secure Folder environment via Nice Catch. Affected component: Nice Catch app (Samsung Mobile). Root...

CVE-2023-20976

CVE-2023-20976 affects Android 13 where the vulnerability exists in getConfirmationMessage of DefaultAutofillPicker.java . Improper input validation may mislead a user into selecting the default autofill application, enabling a local privilege escalation with no extra execution privileges require...

CVE-2023-20987

CVE-2023-20987: A vulnerability in btm_read_link_quality_complete within btm_acl.cc of Android 13 can cause an out-of-bounds read, leading to local information disclosure over Bluetooth when the attacker has System privileges. The issue requires no user interaction and has an adjacent attack vect...

CVE-2023-20991

CVE-2023-20991 corresponds to a buffer/bounds issue in the Pixel ble_scanner_hci_interface.cc function btm_ble_process_periodic_adv_sync_lost_evt. The vulnerability is an out-of-bounds read that could enable local information disclosure with System privileges and requires no user interaction. Evi...

CVE-2023-21044

CVE-2023-21044 relates to the Android kernel and the initialization of VendorGraphicBufferMeta. The issue is an out-of-bounds read caused by a missing bounds check in init, enabling potential local information disclosure with System execution privileges required. Exploitation is described as loca...

CVE-2023-21307

CVE-2023-21307 affects Android’s Bluetooth component. A paired Bluetooth device can bypass permissions to read the device’s long-term identifier, leading to local information disclosure without additional execution privileges; user interaction is required for exploitation. The issue is categorize...

CVE-2023-35661

CVE-2023-35661 is described as an out-of-bounds read in the function ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp caused by a missing bounds check. This can lead to remote information disclosure without additional privileges or user interaction. The CVE description does not specify affected ...

CVE-2023-48410

CVE-2023-48410 involves an out-of-bounds read in cd_ParseMsg of cd_codec.c due to a missing bounds check, enabling remote information disclosure without extra privileges or user interaction. The description is consistent across NVD, PRION, CVELIST, and CNNVD entries. Pixel/Android Bulletin refere...

CVE-2023-48415

CVE-2023-48415 concerns an out-of-bounds read in Init of protocolembmsadapter.cpp caused by a missing bounds check. Per multiple connected documents, this can lead to local information disclosure without requiring user interaction. The issue is associated with Android/Google Pixel components (inc...

CVE-2024-11624

Google Android suffers from an Elevation of Privilege (EoP) vulnerability in the VPN subcomponent. The root cause is an undeclared permission that allows an attacker to add applications to bypass a VPN. This can lead to a local escalation of privilege without requiring additional execution privil...

CVE-2024-20107

A security vulnerability exists in the da component of MediaTek MT8676 chipsets due to a missing bounds check . This flaw allows for an out-of-bounds read , which could result in local information disclosure without requiring additional execution privileges or user interaction. While a patch ID (...

CVE-2024-32893

A security vulnerability exists in the Exynos platform, specifically within the _s5e9865_mif_set_rate function of exynos_dvfs.c . The issue is caused by improper casting , leading to a possible out-of-bounds read . This flaw could result in local information disclosure without requiring additiona...

CVE-2024-47030

Android versions prior to 2024-10-05 on Google Pixel devices are vulnerable to an information disclosure vulnerability (ID) in the ACPM component (Bug ID A-315191818 ). An attacker can exploit this flaw to obtain sensitive information . Remediation is provided in the security patch level of 2024-...

CVE-2025-20665

CVE-2025-20665 affects MediaTek chipsets’ devinfo component where a missing SELinux policy enables local information disclosure of the device identifier without additional privileges. Multiple sources corroborate the issue and reference patch ALPS09555228 / MSV-2760 from MediaTek’s bulletin. Impa...

CVE-2026-0089

A vulnerability exists in the PackageInstallerService.java class of the Android operating system framework due to missing permission checks in multiple functions. This flaw allows an attacker to bypass security controls to install unverified applications , leading to a local escalation of privile...

CVE-2014-7224

CVE-2014-7224 is an Android code‑execution vulnerability affecting versions prior to 4.4.0, tied to the addJavascriptInterface method and the accessibility/accessibilityTraversal objects. A remote attacker could potentially execute arbitrary code; NVD assigns high severity (CVSS v3.1: 8.8, vector...

CVE-2015-3875

CVE-2015-3875 affects libutils in Android before 5.1.1 LMY48T. A crafted audio file can cause memory corruption, enabling remote code execution or a denial of service. Root cause: memory corruption in libutils exploited via crafted audio input. Impact is high; mitigation is to upgrade Android to ...

CVE-2015-5570

CVE-2015-5570 is a use-after-free vulnerability in Adobe Flash Player (affecting pre-18.0.0.241 and 19.x before 19.0.0.185) and Adobe AIR before 19.0.0.190, enabling remote code execution via specially crafted SWF handling. Adobe APSB15-23 patches are referenced; apply fixed builds to remediate.

CVE-2017-0722

Summary of CVE-2017-0722 : A remote code execution vulnerability in the Android media framework, specifically the h263 decoder. Affected products/versions: Android devices running 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Root cause as stated in the provided documents is the vulnerabili...

CVE-2020-0062

CVE-2020-0062 affects Android Euicc. An information disclosure exists due to an included test certificate, enabling remote data exposure without extra privileges. Exploitation is network-based with no user interaction required. CVSSv2/3.1 base scores are 5.0 (MEDIUM) and 7.5 (HIGH) respectively. ...

CVE-2020-0117

CVE-2020-0117 affects the Android System component (aes_cmac in aes_cmac.cc), where an out-of-bounds write can occur due to an integer overflow. This could allow remote code execution in the Bluetooth server with no user interaction. Affected Android versions: 8.0–10 (Android 8.0, 8.1, 9, 10). Ex...

CVE-2020-28343

CVE-2020-28343 concerns Samsung Exynos NPU kernel driver vulnerabilities disclosed by Project Zero. The issue centers on unsanitized input in the NPU session parsing for /dev/vertex10, leading to two concrete primitives: (1) a heap overflow via a race on shared ION buffer memory_vector_cnt, allow...

CVE-2020-35693

The CVE-2020-35693 entry describes a BLE pairing flaw on some Samsung Android devices up to 7.1.1 where an attacker-controlled BLE device can pair silently when Bluetooth is on and a connectable BLE advertisement is present, without user interaction. During pairing, identifying information such a...

CVE-2021-0979

The CVE-2021-0979 issue affects Android 12 and centers on ShortcutService.java in the Launcher path. The isRequestPinItemSupported function allows a cross-user leak of installed packages by bypassing permissions, enabling local information disclosure without requiring user interaction or addition...

CVE-2021-1015

CVE-2021-1015 affects Android 12 via the getMeidForSlot path in PhoneInterfaceManager.java, enabling side-channel disclosure to determine if an app is installed without query permissions. Outcome is local information disclosure with no extra privileges required and no user interaction. Connected ...

CVE-2021-39742

CVE-2021-39742 affects Android 12L Voice Mail: a missing permission check allows information disclosure by retrieving a trackable identifier from Voicemail, with local access and user interaction required for exploitation. The issue is classified under System/ID in Android 12L release notes and i...

CVE-2021-39748

CVE-2021-39748 affects Android 12L in the Framework through InputMethodEditor. The issue arises from an unsafe PendingIntent that can allow access to files accessible to Settings, causing local information disclosure without extra privileges and without user interaction. The ENISA/Android release...

CVE-2021-39765

CVE-2021-39765 is a permission bypass in the Gallery app on Android 12L caused by a confusion of agents (confused deputy) that can lead to local information disclosure. Exploitation is described as local with low attack complexity and no user interaction required, requiring User privileges. The C...

CVE-2021-39787

CVE-2021-39787 affects Android 12L SystemUI. The issue enables an arbitrary Activity launch via a confused deputy, resulting in local elevation of privilege with no extra execution privileges required and a required user interaction for exploitation. Affected component: SystemUI on Android-12L; r...

CVE-2021-39791

The CVE-2021-39791 entry affects the Android component WallpaperManagerService on Android 12L, describing a side‑channel information disclosure that allows an attacker to determine whether an app is installed without query permissions, enabling local information disclosure with no additional exec...

CVE-2022-20029

CVE-2022-20029 affects MediaTek devices via the cmdq driver. The root cause is an incorrect bounds check that enables an out-of-bounds read, potentially leading to local information disclosure with System privileges. The vulnerability is documented across multiple feeds (NVD/Red Hat/CVE/CVE lists...

CVE-2022-20070

CVE-2022-20070 affects the ssmr component, with a reported out-of-bounds write caused by a missing bounds check. This can lead to local escalation of privileges, requiring SYSTEM privileges, and does not require user interaction. The issue is associated with patch ID ALPS06362920 (Issue ALPS06362...

CVE-2022-20090

CVE-2022-20090 affects the aee driver, where a race condition can cause a use-after-free leading to local privilege escalation with System execution privileges required. No user interaction is required. A patch/alleged fix is identified as ALPS06209197 (Issue ALPS06209197). The Red Hat and NVD re...

CVE-2022-20102

The CVE-2022-20102 issue affects the aee daemon and stems from a missing permission check, enabling local information disclosure with System privileges. Exploitation requires no user interaction. The NVD reports CVSSv3.1 base score 4.4 (Local, Privileges Required: High, Confidentiality Impact: Hi...

CVE-2022-20206

CVE-2022-20206 affects Android 12L via NotificationManagerService.setPackageOrComponentEnabled, where a missing permission check enables local information disclosure about enabled notification listeners. The issue requires User privileges but not user interaction to exploit, yielding a HIGH confi...

CVE-2022-20376

CVE-2022-20376 affects the Android kernel’s trusty-log.c: Trusty_log_seq_start has use-after-free due to improper locking, enabling local elevation of privileges to SYSTEM. Exploitation details are not provided in the connected documents; no patch/version/fix is specified here. Monitoring Pixel s...

CVE-2022-20571

The CVE-2022-20571 entry documents a use-after-free in extract_metadata of dm-android-verity.c in the Android kernel, which can corrupt kernel memory. It implies local escalation of privilege to System with no user interaction required. Affected component is the kernel’s dm-verity subsystem; root...

CVE-2022-20582

CVE-2022-20582 affects the Android kernel component, specifically the drm_fw.c function ppmp_unprotect_mfcfw_buf, where an out-of-bounds write can occur due to improper input validation. The vulnerability enables local privilege escalation with no extra user interaction, as indicated by multiple ...

CVE-2022-20590

The CVE-2022-20590 entry concerns the Android kernel, specifically the valid_va_sec_mfc_check function in drm_access_control.c. The vulnerability is an information disclosure caused by improper input validation, allowing local information disclosure without requiring additional execution privileg...

CVE-2022-20600

CVE-2022-20600 affects the Android kernel LWIS component. The issue is described as a memory corruption out-of-bounds write that could enable local privilege escalation to SYSTEM with no user interaction required. The available documents consistently note this as a local attack surface on Android...

CVE-2022-23999

CVE-2022-23999 describes a PendingIntent hijacking vulnerability in Android’s CpaReceiver prior to Samsung SMR Feb-2022 Release 1, enabling local attackers to access media files via KnoxPrivacyNoticeReceiver through an implicit Intent. Affected component is the CpaReceiver/KnoxPrivacyNoticeReceiv...