8366 matches found
CVE-2023-20970
CVE-2023-20970 is a confirmed Android 13 vulnerability affecting p2p_iface.cpp with an out-of-bounds read caused by a missing bounds check. Exploitation is described as a local information disclosure vulnerability requiring high privileges and no user interaction. Multiple connected records (RH, ...
CVE-2023-20981
CVE-2023-20981 affects Android 13 as described in multiple sources. The vulnerability is located in the Bluetooth stack function btu_ble_rc_param_req_evt in btu_hcif.cc , where a missing bounds check allows an out-of-bounds read. This can lead to local information disclosure and requires System-l...
CVE-2023-20999
CVE-2023-20999 refers to a local DoS on Android 13 caused by improper input validation that can trigger a persistent reboot loop. The exploit requires no user interaction, with a local attack vector and a high availability impact as per NVD metrics. Connected sources consistently describe the iss...
CVE-2023-21004
Affected product: Android 13 devices; component: Transcode Permission Controllers (getAvailabilityStatus). Root cause: missing permission check enabling a permission bypass. Impact: local escalation of privilege with no extra execution privileges required, no user interaction needed. Exploitation...
CVE-2023-21017
CVE-2023-21017 affects Android 13 Pixel builds; the issue is in InstallStart.java where improper input validation can allow changing the installer package name. This vulnerability enables local privilege escalation with user-execution privileges and requires no user interaction. The CVSSv3.1 base...
CVE-2023-21031
CVE-2023-21031 describes a vulnerability in the Android graphics stack: in the function setPowerMode of HWC2.cpp there is a possible out-of-bounds read caused by a race condition. The issue could enable local information disclosure without requiring privileges or user interaction. Affected: Andro...
CVE-2023-21070
The CVE-2023-21070 issue affects the Android kernel, specifically the bcm4389 driver path in the wl_roam.c file’s add_roam_cache_list function. It describes a potential out-of-bounds write caused by a missing bounds check, which could enable local escalation of privilege with System-level executi...
CVE-2023-21189
CVE-2023-21189 affects Android 13 (Pixel devices) via a logic error in startLockTaskMode within LockTaskController.java that can bypass lock task mode, enabling local privilege escalation with only user interaction required. The vulnerability is documented across multiple sources (NVD, Red Hat, P...
CVE-2023-21213
CVE-2023-21213 affects Android-13 (sta_iface.cpp, initiateTdlsTeardownInternal): a missing bounds check leads to an out-of-bounds read in the wifi server, enabling local information disclosure with System privileges and no user interaction required. Multiple connected sources reiter the same root...
CVE-2023-21219
CVE-2023-21219 affects the Android kernel (Pixel/Android devices) where an insecure default enables unencrypted transport over cellular networks, potentially allowing remote information disclosure without extra privileges. Exploitation is described as network-based with no user interaction, and t...
CVE-2023-21247
CVE-2023-21247 affects Android’s BluetoothScanningMainSwitchPreferenceController.java, specifically the getAvailabilityStatus method. The issue is a missing permission check that could allow local elevation of privilege, requiring no additional execution privileges and with no user interaction re...
CVE-2023-21331
The CVE-2023-21331 issue is in Android’s InputMethod component. It enables local information disclosure by determining whether an app is installed without query permissions, via a side-channel. Impact per the provided data: attacker gains access to sensitive information (C=High) with local access...
CVE-2023-21403
CVE-2023-21403 affects Google Android via the PowerVR-GPU driver entry (rgxta3d.c: RGXDestroyZSBufferKM). The root cause is an uncaught exception in RGXDestroyZSBufferKM that can lead to arbitrary code execution, resulting in local kernel elevation of privilege without requiring user interaction....
CVE-2023-35685
CVE-2023-35685 describes a logic error in DevmemIntMapPages within the file devicemem_server.c that can cause a physical page use-after-free. This USE-After-FREE condition could enable local privilege escalation in the kernel without requiring additional execution privileges or user interaction. ...
CVE-2023-48404
CVE-2023-48404 affects Google Pixel Exynos RIL components, caused by a missing bounds check in ProtocolMiscCarrierConfigSimInfoIndAdapter (protocolmiscadapter.cpp). This leads to an out-of-bounds read and potential information disclosure without extra privileges or user interaction. Public refere...
CVE-2023-48412
CVE-2023-48412 affects the Mali driver’s private_handle_t in mali_gralloc_buffer.h. A logic error can cause an information leak, enabling local information disclosure without additional execution privileges and without user interaction. The impact is restricted to local disclosure; exploitation d...
CVE-2024-32899
CVE-2024-32899 relates to a race condition in the Pixel GPU power management path (gpu_pm_power_off_top_nolock in pixel_gpu_power.c) that could allow local escalation of privilege to the TEE by compromising protected memory. Exploitation is predicted to require with local access and no user inter...
CVE-2024-32924
A logic error in the DeregAcceptProcINT function within the cn_NrmmStateDeregInit.cpp file of the Modem component allows for a remote denial of service (DoS) . This vulnerability can be exploited without requiring additional execution privileges or user interaction. The issue affects Google Pixel...
CVE-2024-32926
Google Pixel devices are affected by CVE-2024-32926 , which involves a side channel information disclosure vulnerability in the Fingerprint Sensor subcomponent. This flaw could allow for local information disclosure without requiring additional execution privileges or user interaction. The vulner...
CVE-2024-47032
Google Android contains a heap buffer overflow vulnerability within the construct_transaction_from_cmd function of the lwis_ioctl.c file. This flaw allows for an out-of-bounds write , which could lead to a local escalation of privilege (EoP) without requiring additional execution privileges or us...
CVE-2025-0083
Google Android is affected by an information disclosure vulnerability caused by URI double encoding in multiple locations. An attacker can exploit this flaw to access content across different user profiles, leading to the disclosure of sensitive information . This vulnerability does not require a...
CVE-2025-22403
Google Android is affected by a memory misreference vulnerability, specifically a use-after-free issue in the sdp_snd_service_search_req function of sdp_discovery.cc. An attacker can exploit this flaw to achieve remote code execution (RCE) without requiring additional privileges or user interacti...
CVE-2015-5584
Technical details about CVE-2015-5584 are not publicly provided in the connected documents. The initial description lists affected products/versions but no concrete exploit/vulnerability details. Monitor for updates from advisories.
CVE-2016-3857
CVE-2016-3857 is an Android/Linux kernel privilege-escalation flaw in the ARM OABI compatibility layer present on Nexus 7 (2013) devices prior to 2016-08-05. The issue arises from two bugs in the ARM OABI area that can let local attackers escalate privileges via a crafted app (internal bug 285225...
CVE-2016-3862
CVE-2016-3862 affects Android mediaserver’s ExifInterface usage in media/ExifInterface.java, where improper interaction with static variables in libjhead_jni can allow remote attackers to craft a media file to trigger memory corruption or remote code execution. Impact is described as memory corru...
CVE-2017-0390
CVE-2017-0390 affects the Mediaserver Tremolo/dpen.s component in Android. A denial-of-service vulnerability could allow a remote attacker to cause a device hang or reboot by processing a specially crafted file. Affected products/versions span Android 4.4.4 through 7.1.1 (Android IDs include A-31...
CVE-2017-0832
CVE-2017-0832 is a remote code execution vulnerability in Android’s media framework (libmpeg2) affecting Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 and 8.0 (Android ID A-62887820). Public material in the connected documents confirms the vulnerability class (RCE) and affected components, but t...
CVE-2018-9354
CVE-2018-9354 is a vulnerability in the Android VideoFrameScheduler component: in VideoFrameScheduler.cpp, PLL::fit can trigger a divide-by-zero error leading to a remote denial of service. Multiple connected records confirm the affected area but do not provide concrete patch/version details or a...
CVE-2019-2104
CVE-2019-2104 affects the Android Framework component (HIDL/safe_union and related C++ structs/unions) used when sending data to application processes. The issue exposes uninitialized fields, enabling local information disclosure without user interaction. The vulnerability is scoped to Android 8....
CVE-2020-0052
CVE-2020-0052 affects Android 10 where In smsSelected of AnswerFragment.java an elevation-of-privilege vulnerability exists due to a permissions bypass that allows sending an SMS from the lock screen. The issue enables local privilege escalation with no extra execution privileges required; exploi...
CVE-2021-0551
CVE-2021-0551 affects Android 11 with a DoS via a vulnerability in the MediaControlPanel.java bind. The root cause is improper input validation in the bind path, allowing a malicious media file to lock up the system UI and cause remote denial of service. Exploitation requires user interaction. Pu...
CVE-2021-0555
CVE-2021-0555 affects Android 11 with a vulnerability in RenderStruct of protostream_objectsource.cc where a missing null check can cause a remote Denial of Service. The Red Hat and NVD entries confirm the issue’s root cause and impact; Pixel bulletin mappings show this CVE is classified as DoS (...
CVE-2021-0654
Summary: CVE-2021-0654 affects Android Pixel launcher (CVE entry tied to Android kernel/TaskThumbnailView.java) with information disclosure from locked profiles due to a missing permission check in isRealSnapshot. Exploitation requires user interaction; local information disclosure is possible wi...
CVE-2021-25363
Summary: CVE-2021-25363 describes an improper access control in Samsung’s ActivityManagerService prior to the SMR APR-2021 Release 1, enabling untrusted applications to access running processes and delete local files. Affected scope (from provided sources): Samsung SMR (system patch package) prio...
CVE-2021-39738
CVE-2021-39738 concerns Google Android CarSetings: a missing permission check allows pairing a Bluetooth device without user consent, enabling local elevation of privilege without extra execution privileges. Affected: CarSetings on Android 10, 11, 12, and 12L. Exploitation is described as local w...
CVE-2021-39743
CVE-2021-39743 affects Google Android 12L in the PackageManager component, where a missing permission check allows updating another package’s last-used time and enables local elevation of privilege with no extra execution privileges needed. The vulnerability is classified as EoP and is documented...
CVE-2021-39754
Technical details about CVE-2021-39754 are not publicly disclosed in the provided connected documents. Monitor for updates.
CVE-2021-39761
CVE-2021-39761 affects Android 12L Media Framework. The issue enables local information disclosure by determining whether an app is installed via a side-channel, without query permissions, with no user interaction required. Impacted component: Media Framework on Android-12L; CVSS data indicates a...
CVE-2021-39763
CVE-2021-39763 affects Android 12L; a vulnerability in Settings due to improper input validation could allow a local attacker to escalate privileges by causing the device to enable Wi‑Fi without user interaction. Exploitation details are not provided beyond the description in the CVE entry. The A...
CVE-2022-20085
CVE-2022-20085 affects MediaTek netdiag components. The issue is improper link resolution leading to symbolic link following, enabling local privilege escalation with System privileges required; no user interaction is needed. Patch ID ALPS06308877 (Issue ALPS06308877) is noted as remediation. Pub...
CVE-2022-20203
The CVE-2022-20203 entry refers to a memory corruption vulnerability in the nanopb library, arising in multiple locations during decoding of untrusted protobufs. This can lead to local escalation of privilege with no extra privileges or user interaction required. Available connected sources (e.g....
CVE-2022-20408
CVE-2022-20408 is listed in Google Pixel security bulletin under the Modem component with Type ID and Moderate severity. The bulletin indicates patch level 2022-08-05 or later addresses all issues in that bulletin. Public details on the exact vulnerable subsystem within the modem/kernel are not f...
CVE-2022-20516
CVE-2022-20516 affects Android 13 via rw_t3t_act_handle_check_ndef_rsp in rw_t3t.cc. The issue is an integer overflow that can cause an out-of-bounds read, potentially enabling remote information disclosure without privileges or user interaction. Exploitation details are not provided in the suppl...
CVE-2022-20522
CVE-2022-20522 affects Android 13 where in getSlice of ProviderModelSlice.java a missing permission check could allow local escalation of privilege from a guest user with no additional execution privileges and no user interaction required. Connected sources corroborate the issue in ProviderModelS...
CVE-2022-20523
CVE-2022-20523 concerns Android 13 and targets a vulnerability in the IncFs_GetFilledRangesStartingFrom function (incfs.cpp). The issue is a potential out-of-bounds read caused by a missing bounds check, which could lead to local information disclosure without requiring additional execution privi...
CVE-2022-21788
CVE-2022-21788 affects the scp component and is caused by undefined behavior stemming from incorrect error handling. The issue can enable local privilege escalation with system execution privileges; exploitation does not require user interaction. A patch is identified (ALPS06988728/ALPS06988728) ...
CVE-2022-24001
CVE-2022-24001 describes an information-disclosure flaw in the Android Edge Panel feature, prior to Android S(12). The vulnerability allows a physical attacker to access screenshots stored in the clipboard via Edge Panel. Documents consistently refer to the Edge Panel since the CVE description; n...
CVE-2022-24925
CVE-2022-24925 concerns an improper input validation vulnerability in Android’s SettingsProvider prior to Android S (12). The issue can be triggered by privileged attackers to cause a permanent denial of service on a victim’s device. The available connected sources consistently identify the affec...
CVE-2022-25833
The CVE-2022-25833 entry concerns Samsung SMR prior to Apr-2022 Release 1, where improper authentication in ImsService could allow an attacker to obtain IMSI without the READ_PRIVILEGED_PHONE_STATE permission. The vulnerability involves authentication checks in ImsService, enabling local access t...