CVE-2021-26689

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2021-39639

CVE-2021-39639 affects the Android kernel component (fvp.c) with a missing permission check in TBD, enabling local escalation of privilege when an attacker has physical access to device internals. The vulnerability could be exploited without user interaction; attack vector is physical and impact ...

CVE-2021-39681

CVE-2021-39681 affects the Android kernel, specifically the delete_protocol path in main.c. The flaw is a use-after-free that allows arbitrary code execution, resulting in local escalation of privilege. Exploitation is local, does not require user interaction, and does not require additional priv...

CVE-2021-39761

CVE-2021-39761 affects Android 12L Media Framework. The issue enables local information disclosure by determining whether an app is installed via a side-channel, without query permissions, with no user interaction required. Impacted component: Media Framework on Android-12L; CVSS data indicates a...

CVE-2021-39766

CVE-2021-39766 affects Android 12L in Settings, enabling a side-channel information disclosure to determine whether an app is installed with local access and no user interaction. Root cause: disclosure of installation status via a side channel. Impact: local information disclosure with no privile...

CVE-2022-20068

CVE-2022-20068 affects MediaTek devices where the vulnerable component is the mobile_log_d process, due to improper link resolution allowing symbolic link following. The issue could enable local escalation of privilege with System execution privileges required, and exploitation does not require u...

CVE-2022-20104

CVE-2022-20104 affects the aee daemon with an information-disclosure vulnerability caused by improper access control. The issue allows local disclosure without extra execution privileges and does not require user interaction. Patch ALPS06419017 (Issue ALPS06284104) is noted; no other remediation ...

CVE-2022-20199

Summary: CVE-2022-20199 concerns an information disclosure in Android 13’s NfcService.java due to a confused deputy, enabling local information disclosure without extra privileges. The vulnerability is documented across multiple sources, all describing the same issue, with no exploitation details...

CVE-2022-20379

The CVE-2022-20379 entry relates to the Android kernel (Pixel devices) where a use-after-free in lwis_buffer_alloc (lwis_buffer.c) enables arbitrary code execution, resulting in local escalation of privilege with System execution privileges required. Exploitation is described as local with no use...

CVE-2022-20544

CVE-2022-20544 affects Android 13; a missing permission check in onOptionsItemSelected of ManageApplications.java could bypass profile owner restrictions, enabling local elevation of privilege without additional execution privileges or user interaction. The issue is documented across multiple sou...

CVE-2022-20546

CVE-2022-20546 affects Android 13 in the code path described by the Pixel/Effect.cpp vulnerability: a missing bounds check in the function getCurrentConfigImpl can cause an out-of-bounds write. This vulnerability is characterized as a local escalation of privilege with system execution privileges...

CVE-2022-20564

CVE-2022-20564 affects the Android kernel’s ufdt code path. The issue is an out-of-bounds write in _ufdt_output_strtab_to_fdt (ufdt_convert.c) caused by an incorrect bounds check, enabling possible local escalation of privilege with SYSTEM privileges required. User interaction is not needed for e...

CVE-2022-20593

CVE-2022-20593 affects the Android kernel, involving an out-of-bounds read in the function pop_descriptor_string of BufferDescriptor.h due to a missing bounds check. This condition could allow local information disclosure and requires only local privileges (no user interaction needed). The vulner...

CVE-2022-21788

CVE-2022-21788 affects the scp component and is caused by undefined behavior stemming from incorrect error handling. The issue can enable local privilege escalation with system execution privileges; exploitation does not require user interaction. A patch is identified (ALPS06988728/ALPS06988728) ...

CVE-2022-23999

CVE-2022-23999 describes a PendingIntent hijacking vulnerability in Android’s CpaReceiver prior to Samsung SMR Feb-2022 Release 1, enabling local attackers to access media files via KnoxPrivacyNoticeReceiver through an implicit Intent. Affected component is the CpaReceiver/KnoxPrivacyNoticeReceiv...

CVE-2022-24001

CVE-2022-24001 describes an information-disclosure flaw in the Android Edge Panel feature, prior to Android S(12). The vulnerability allows a physical attacker to access screenshots stored in the clipboard via Edge Panel. Documents consistently refer to the Edge Panel since the CVE description; n...

CVE-2022-27572

The cited CVE-2022-27572 is a heap-based buffer overflow in the parser_ipma function of the libsimba library. It enables remote code execution and is tied to the Samsung SMR patch cycle (prior to SMR Apr-2022 Release 1). The vulnerability has multiple corroborating records (NVD, Red Hat CVE page,...

CVE-2022-42513

CVE-2022-42513 : A missing bounds check in ProtocolEmbmsBuilder::BuildSetSession (protocolembmsbuilder.cpp) allows an out-of-bounds write in the Android kernel, enabling local escalation of privilege to SYSTEM level. No user interaction is required. Documented in multiple sources (e.g., NVD entry...

CVE-2022-42523

CVE-2022-42523 affects Android’s ril_service_1_6.cpp in the kernel’s RIL stack, with an out-of-bounds write caused by an incorrect bounds check in fillSetupDataCallInfo_V1_6. The vulnerability enables local escalation of privilege with System execution privileges required; exploitation reportedly...

CVE-2022-42524

The CVE-2022-42524 entry describes an out-of-bounds read in Android’s sms_GetTpUdlIe within sms_PduCodec.c due to a missing bounds check. This can lead to remote information disclosure without extra privileges or user interaction. Connected OSV data confirms the same file-level bug, but no exploi...

CVE-2023-20970

CVE-2023-20970 is a confirmed Android 13 vulnerability affecting p2p_iface.cpp with an out-of-bounds read caused by a missing bounds check. Exploitation is described as a local information disclosure vulnerability requiring high privileges and no user interaction. Multiple connected records (RH, ...

CVE-2023-20987

CVE-2023-20987: A vulnerability in btm_read_link_quality_complete within btm_acl.cc of Android 13 can cause an out-of-bounds read, leading to local information disclosure over Bluetooth when the attacker has System privileges. The issue requires no user interaction and has an adjacent attack vect...

CVE-2023-20992

CVE-2023-20992 concerns a potential out-of-bounds read in the Android Bluetooth stack, specifically in on_iso_link_quality_read within btm_iso_impl.h. The flaw can enable local information disclosure on affected devices (Android 13) with System execution privileges, and exploitation does not requ...

CVE-2023-21031

CVE-2023-21031 describes a vulnerability in the Android graphics stack: in the function setPowerMode of HWC2.cpp there is a possible out-of-bounds read caused by a race condition. The issue could enable local information disclosure without requiring privileges or user interaction. Affected: Andro...

CVE-2023-21040

CVE-2023-21040 concerns the Android kernel Bluetooth code, specifically in the function buildCommand within bluetooth_ccc.cc. The issue is a logic error that can cause an out-of-bounds write, enabling local elevation of privilege with no additional execution privileges required and with no user i...

CVE-2023-21053

CVE-2023-21053 concerns the Android kernel component related to cellular SMS handling. In the function sms_ExtractCbLanguage within sms_CellBroadcast.c, there is an out-of-bounds read caused by a missing bounds check. This leads to a potential information disclosure without requiring execution pr...

CVE-2023-21055

In CVE-2023-21055, a use-after-free due to a race condition exists in the dit_hal_ioctl function of dit.c in the Android kernel. This vulnerability can enable local escalation of privilege with SYSTEM privileges needed, and does not require user interaction. Affected component is the Android kern...

CVE-2023-21070

The CVE-2023-21070 issue affects the Android kernel, specifically the bcm4389 driver path in the wl_roam.c file’s add_roam_cache_list function. It describes a potential out-of-bounds write caused by a missing bounds check, which could enable local escalation of privilege with System-level executi...

CVE-2023-21148

CVE-2023-21148 describes a vulnerability in the BuildSetConfig function of protocolimsbuilder.cpp where a missing null check can cause an out-of-bounds read. This could allow local information disclosure with System-level execution privileges required, and exploitation does not require user inter...

CVE-2023-21157

CVE-2023-21157 involves a heap buffer overflow in the Android kernel component wlandata.cpp, causing an out-of-bounds write that can lead to local privilege escalation with system-level privileges. The issue is triggered without user interaction. Affected software is Android kernel (wlandata.cpp)...

CVE-2023-21389

CVE-2023-21389 concerns a bypass of profile owner restrictions in Android Settings due to a missing permission check, enabling local elevation of privilege without extra execution privileges and without user interaction. Multiple connected sources describe this as an Android elevation-of-privileg...

CVE-2023-35649

The CVE-2023-35649 issue concerns Exynos modem firmware: multiple functions in Exynos modem files allow an out-of-bounds write due to a missing bounds check. This could enable remote code execution with system-level privileges and does not require user interaction. The description and connected r...

CVE-2023-48415

CVE-2023-48415 concerns an out-of-bounds read in Init of protocolembmsadapter.cpp caused by a missing bounds check. Per multiple connected documents, this can lead to local information disclosure without requiring user interaction. The issue is associated with Android/Google Pixel components (inc...

CVE-2024-29755

CVE-2024-29755 affects the tmu_get_pi function in tmu.c, causing an out-of-bounds read due to improper input validation. This can lead to local information disclosure without extra privileges or user interaction. The issue is addressed by Pixel updates; patch level 2024-04-05 or later is indicate...

CVE-2024-29784

CVE-2024-29784 affects lwis_periodic_io.c (LWIS). The vulnerability is an out-of-bounds write caused by an integer overflow in prepare_response, enabling local escalation of privilege without additional privileges or user interaction. Multiple connected sources (RH CVE, NVD/NVD entries, Android P...

CVE-2024-32899

CVE-2024-32899 relates to a race condition in the Pixel GPU power management path (gpu_pm_power_off_top_nolock in pixel_gpu_power.c) that could allow local escalation of privilege to the TEE by compromising protected memory. Exploitation is predicted to require with local access and no user inter...

CVE-2024-32911

CVE-2024-32911 affects Google Pixel devices, specifically the Modem component. The issue stems from improper use of crypto, enabling remote elevation of privilege with no user interaction. The Pixel Update Bulletin lists this CVE under the Pixel firmware/Modem category and indicates that patch le...

CVE-2024-32918

CVE-2024-32918 describes a permission bypass that allows attackers to disable HDCP 2.2 encryption by not completing the HDCP Key Exchange initialization steps. The vulnerability is referenced in multiple feeds as affecting Google Pixel/Android devices, with references to a Trusty/TEE subcomponent...

CVE-2024-47041

CVE-2024-47041 concerns a bounds-check error in the valid_address function of syscall.c that can cause an out-of-bounds read, enabling local privilege escalation without user interaction. The vulnerability is documented across multiple sources tied to Google Pixel/Android components, with Pixel/A...

CVE-2025-22412

CVE-2025-22412 is a use-after-free in multiple functions of sdp_server.cc that enables remote code execution with no privileges and no user interaction. Public sources (NVD/NIST entry) describe the flaw as a logic error freeing memory, leading to remote code execution on affected Android platform...

CVE-2025-22413

The vulnerability CVE-2025-22413 affects the Android kernel (hyp-main.c) where a logic error can allow local privilege escalation and information disclosure without extra privileges or user interaction. The issue is described consistently across multiple sources (Linux kernel context in Android, ...

CVE-2019-2010

CVE-2019-2010 concerns a local elevation of privilege in Android due to an out-of-bounds write in phNxpNciHal_ext.cc (phNxpNciHal_process_ext_rsp) caused by a missing bounds check. Affected Android versions include 7.0–9.0. The issue enables local exploitation without user interaction and with lo...

CVE-2019-2013

CVE-2019-2013 affects Android rw_t3t_act_handle_sro_rsp in rw_t3t.cc, causing a possible out-of-bounds write due to a missing bounds check. This could enable local elevation of privilege with no additional execution privileges needed, and requires user interaction to exploit. Affected Android ver...

CVE-2020-13841

CVE-2020-13841 affects LG mobile devices running Android 9–10 on MTK chipsets. A vulnerable AT command handler allows attackers to bypass intended access restrictions, with a high-severity impact per NVD (CVSS v3.1: 9.8). The available documents describe the issue and affected platform but do not...

CVE-2021-0535

The CVE-2021-0535 entry is supported by concrete details across sources: an Android 11 issue affecting wpas_ctrl_msg_queue_timeout in ctrl_iface_unix.c where a memory corruption due to use-after-free could allow local escalation of privileges to system level. The Android 11 context and the exact ...

CVE-2021-0563

CVE-2021-0563 affects Android 11, due to an out-of-bounds read caused by a heap buffer overflow in ih264e_fmt_conv_422i_to_420sp within ih264e_fmt_conv.c. This could enable local information disclosure without user interaction or additional privileges. Connected sources confirm the vulnerable com...

CVE-2021-39680

CVE-2021-39680 affects the Android kernel, with the flaw located in sec_SHA256_Transform within sha256_core.c. The issue allows reading heap data due to uninitialized data, enabling local information disclosure with system privileges. Exploitation does not require user interaction. The vulnerabil...

CVE-2021-39755

CVE-2021-39755 is a framework issue in Android 12L related to DevicePolicyManager that allows local information disclosure: an attacker could reveal the existence of an installed package without proper query permissions, with no user interaction. The Android 12L security release notes attribute t...

CVE-2022-20052

The CVE-2022-20052 entry concerns the mdp component, where a use-after-free leads to memory corruption. This could enable local escalation of privilege with System execution privileges required, and exploitation reportedly needs user interaction. A patch/workaround is listed as ALPS05836642 (Issu...

CVE-2022-20064

CVE-2022-20064 affects MediaTek’s ccci subsystem, where an incorrect bounds check can leak a kernel pointer. This enables local information disclosure with System execution privileges required, and exploitation does not require user interaction. Technical details across multiple sources confirm t...