CVE-2025-22406

Google Android is susceptible to a memory misreference vulnerability (specifically a use after free ) within the bnep_utils.cc component. The flaw originates from a mix-up in the bnepu_check_send_packet instruction responsible for freeing memory. An attacker can exploit this to achieve code execu...

CVE-2022-20516

CVE-2022-20516 affects Android 13 via rw_t3t_act_handle_check_ndef_rsp in rw_t3t.cc. The issue is an integer overflow that can cause an out-of-bounds read, potentially enabling remote information disclosure without privileges or user interaction. Exploitation details are not provided in the suppl...

CVE-2022-20523

CVE-2022-20523 concerns Android 13 and targets a vulnerability in the IncFs_GetFilledRangesStartingFrom function (incfs.cpp). The issue is a potential out-of-bounds read caused by a missing bounds check, which could lead to local information disclosure without requiring additional execution privi...

CVE-2022-20587

CVE-2022-20587 affects Android devices via an issue in the Android kernel, in drm_fw.c within the ppmp_validate_wsm function. The vulnerability arises from improper input validation, enabling local privilege escalation with no additional privileges and no user interaction required. The CVSS vecto...

CVE-2022-21788

CVE-2022-21788 affects the scp component and is caused by undefined behavior stemming from incorrect error handling. The issue can enable local privilege escalation with system execution privileges; exploitation does not require user interaction. A patch is identified (ALPS06988728/ALPS06988728) ...

CVE-2022-24001

CVE-2022-24001 describes an information-disclosure flaw in the Android Edge Panel feature, prior to Android S(12). The vulnerability allows a physical attacker to access screenshots stored in the clipboard via Edge Panel. Documents consistently refer to the Edge Panel since the CVE description; n...

CVE-2022-24925

CVE-2022-24925 concerns an improper input validation vulnerability in Android’s SettingsProvider prior to Android S (12). The issue can be triggered by privileged attackers to cause a permanent denial of service on a victim’s device. The available connected sources consistently identify the affec...

CVE-2022-27826

Technical details about CVE-2022-27826 are not publicly provided in the connected documents; monitor for updates.

CVE-2022-27833

CVE-2022-27833 concerns Samsung SMR DSP driver vulnerability: improper input validation enables out-of-bounds write via integer overflow in the DSP driver prior to SMR Apr-2022 Release 1. CVSS metrics indicate LOCAL attack with low privileges and high impact on confidentiality, integrity, and ava...

CVE-2022-33716

CVE-2022-33716 affects ICCC TA prior to SMR Aug-2022 Release 1. The issue is an absence of variable initialization in ICCC TA, enabling a local attacker to read uninitialized memory. Red‑hat and PT/security databases corroborate: affected versions are ICCC TA before SMR Aug-2022 Release 1. Remedi...

CVE-2022-42503

CVE-2022-42503 affects Android kernel via ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria. The issue is an out-of-bounds write caused by a missing bounds check in this function, enabling local escalation of privilege with System execution privileges required. Exploitation requires no user int...

CVE-2022-42533

CVE-2022-42533 affects Android kernel via an out-of-bounds write in SharedMetadata.cpp during shared_metadata_init, caused by an integer overflow. Impact is local privilege escalation with no user interaction required. Documented across multiple feeds (NVD, Red Hat, OSV) and listed in Pixel bulle...

CVE-2023-20798

CVE-2023-20798 concerns a buffer size miscalculation in the MediaTek pda module leading to an out-of-bounds read. The issue can cause local information disclosure with system-level privileges and does not require user interaction. Affected component: pda in MediaTek microprogram software (as docu...

CVE-2023-20843

CVE-2023-20843 involves an out-of-bounds read in the imgsys_cmdq component caused by missing valid range checking. Impact: local information disclosure with the potential for system-level execution privileges required, and exploitation reportedly needs user interaction. Affected context is MediaT...

CVE-2023-21049

CVE-2023-21049 affects the Android kernel, specifically the function append_camera_metadata in camera_metadata.c. The vulnerability is an out-of-bounds read caused by a missing bounds check, leading to potential local information disclosure with system execution privileges required; no user inter...

CVE-2023-21224

CVE-2023-21224 affects the Android kernel, specifically the ss_ProcessReturnResultComponent function in ss_MmConManagement.c. The vulnerability is a heap-buffer-overflow–induced out-of-bounds read that could lead to remote information disclosure without extra privileges or user interaction. Publi...

CVE-2023-21389

CVE-2023-21389 concerns a bypass of profile owner restrictions in Android Settings due to a missing permission check, enabling local elevation of privilege without extra execution privileges and without user interaction. Multiple connected sources describe this as an Android elevation-of-privileg...

CVE-2023-21391

CVE-2023-21391 is documented in Android 14 release notes as a DoS affecting the System area, attributed to improper input validation in the Messaging context. The impact is remote denial of service without user interaction or elevated privileges, with a network-based attack vector (AV:N, PR:N, UI...

CVE-2023-35660

Summary: CVE-2023-35660 describes a use-after-free in lwis_transaction_client_cleanup (lwis_transaction.c) that can corrupt memory and enable local privilege escalation with SYSTEM privileges; exploitation does not require user interaction. The vulnerability is reported across multiple feeds (NVD...

CVE-2023-48422

CVE-2023-48422 affects Google Pixel/Android components via a missing bounds check in Init of protocolnetadapter.cpp, causing an out-of-bounds read and potential local information disclosure without user interaction. The exploit requires local access and there is no public exploitation detail in t...

CVE-2024-29755

A vulnerability exists in the ACPM component of Google Pixel devices, where an out-of-bounds read in the tmu_get_pi function of tmu.c occurs due to improper input validation. This flaw could lead to local information disclosure without requiring additional execution privileges or user interaction...

CVE-2024-47041

CVE-2024-47041 concerns a bounds-check error in the valid_address function of syscall.c that can cause an out-of-bounds read, enabling local privilege escalation without user interaction. The vulnerability is documented across multiple sources tied to Google Pixel/Android components, with Pixel/A...

CVE-2024-53841

A Permission Bypass vulnerability exists in the ConnectivityThermalPowerManager component due to a confused deputy issue within the startListeningForDeviceStateChanges function. This flaw could allow for a local escalation of privilege without requiring additional execution privileges or user int...

CVE-2025-26417

Google Android is affected by an information disclosure vulnerability caused by a confused deputy issue in the checkWhetherCallingAppHasAccess function of DownloadProvider.java . This flaw allows for a possible bypass of user consent when opening files in shared storage, potentially leading to th...

CVE-2026-0012

CVE-2026-0012 affects Android’s ExpandableNotificationRow.java (setHideSensitive) with a logic error causing a local information disclosure of contact names. Exploitation requires no user interaction and grants no privileges beyond local access; the issue is classified as information disclosure (...

CVE-2026-28618

A heap buffer overflow in the dec_frm_prepare function of oapv.c within the OpenAPV codec allows for an out-of-bounds write. This vulnerability exists in the Media Codecs component and affects Android versions 13, 14, 15, and 16 . Exploitation can lead to remote code execution (RCE) or local priv...

CVE-2016-0825

The CVE-2016-0825 issue concerns the Widevine Trusted Application on Android 6.0.1 before 2016-03-01. According to the sources, an attacker with kernel access could disclose TrustZone secure-storage information, demonstrated by obtaining Signature or SignatureOrSystem permissions. The vulnerabili...

CVE-2017-0541

CVE-2017-0541 is a remote code execution vulnerability in Android’s Mediaserver (sonivox) that can be triggered by processing a specially crafted media file, causing memory corruption within Mediaserver. Affected Android versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1; Android ID A-34031018...

CVE-2017-13321

The CVE-2017-13321 issue affects Android’s SensorService::isDataInjectionEnabled in frameworks/native/services/sensorservice/SensorService.cpp, where a missing bounds check can cause an out-of-bounds read. This leads to local information disclosure with no user interaction and without additional ...

CVE-2019-2014

CVE-2019-2014 is a local elevation-of-privilege vulnerability in Android’s rw_t3t_handle_get_sc_poll_rsp path (rw_t3t.cc), caused by a missing bounds check that can enable an out-of-bounds write. Affected products include Android 7.0–9, with exploitation requiring user interaction. The issue is c...

CVE-2019-9406

CVE-2019-9406 affects libhevc in Android 10. The vulnerability enables information disclosure via uninitialized data within the Media/Video processing path, potentially allowing remote information disclosure without extra execution privileges. Exploitation is described as requiring user interacti...

CVE-2020-0048

CVE-2020-0048 affects Android 10 Media Framework (IAudioFlinger.cpp). The root cause is an information leak due to uninitialized data in onTransact, enabling local information disclosure without extra privileges or user interaction. The risk is described as a local information disclosure vulnerab...

CVE-2020-0063

CVE-2020-0063 affects Android SurfaceFlinger, where the UI confirmation screen protected by the TEE can be overridden, enabling local elevation of privilege. Root cause: manipulation of the UI flow in SurfaceFlinger allows bypassing user interaction. Impact: local privilege escalation with high s...

CVE-2021-0535

The CVE-2021-0535 entry is supported by concrete details across sources: an Android 11 issue affecting wpas_ctrl_msg_queue_timeout in ctrl_iface_unix.c where a memory corruption due to use-after-free could allow local escalation of privileges to system level. The Android 11 context and the exact ...

CVE-2021-0564

CVE-2021-0564 affects Android 11, caused by a race condition in the decrypt path of CryptoPlugin.cpp that can trigger a use-after-free. The vulnerability allows local elevation of privilege with System execution privileges and does not require user interaction. Exploitation details are not provid...

CVE-2021-0608

The CVE-2021-0608 entry concerns Android’s AppLaunchActivity.handleAppLaunch, with a local elevation-of-privilege via a confused deputy. Affected component: Pixel Launcher on Pixel devices (and related Android kernel/framework context as per mappings). Root cause: improper handling in AppLaunchAc...

CVE-2021-25364

CVE-2021-25364 affects Samsung Secure Folder prior to SMR APR-2021 Release 1, where a pendingIntent hijacking issue allows unprivileged apps to access contact information. The vulnerability is linked to Secure Folder’s handling of PendingIntents and exposes contact data locally. Affected software...

CVE-2021-39766

CVE-2021-39766 affects Android 12L in Settings, enabling a side-channel information disclosure to determine whether an app is installed with local access and no user interaction. Root cause: disclosure of installation status via a side channel. Impact: local information disclosure with no privile...

CVE-2021-39790

CVE-2021-39790 affects Android 12L Dialer. The issue arises from a missing permission check in the Dialer component, enabling local elevation of privilege. Exploitation requires user interaction, and successful abuse could grant elevated privileges on the device. The vulnerability is classified a...

CVE-2022-20052

The CVE-2022-20052 entry concerns the mdp component, where a use-after-free leads to memory corruption. This could enable local escalation of privilege with System execution privileges required, and exploitation reportedly needs user interaction. A patch/workaround is listed as ALPS05836642 (Issu...

CVE-2022-20077

The CVE-2022-20077 entry concerns a race-condition-based memory corruption in vow that could enable local privilege escalation to SYSTEM, with no user interaction required. Affected context and root cause are described consistently across multiple sources (e.g., Red Hat, NVD, CVE lists, PRION/CVE...

CVE-2022-20169

CVE-2022-20169 is associated with Android kernel/modem in Google Pixel devices as per the connected documents. The PRION source explicitly labels the issue as a "Code injection" vulnerability, while other documents broadly reference the Android kernel/modem context for this CVE. The exact root ca...

CVE-2022-20179

Technical details about CVE-2022-20179 are not provided in the supplied documents; no affected component/version or impact is disclosed. Monitor for updates from official advisories.

CVE-2022-20184

CVE-2022-20184 is listed in the Pixel security bulletin under the Modem category with type ID (Information Disclosure) and moderate severity. Documents indicate it affects Google Pixel devices, specifically the Modem component, but do not provide the root cause or exact exploit details. A remedia...

CVE-2022-20243

CVE-2022-20243 affects Google Android’s Core Utilities on Android 13. The issue enables local information disclosure of sensitive browsing data and requires System execution privileges; no user interaction is needed. The provided data show a Medium base CVSS 3.1 score (AV:L/AC:L/PR:H/UI:N/S:U/C:H...

CVE-2022-20557

CVE-2022-20557 affects Android 13 Pixel devices. The issue is in MessageQueueBase.h (MessageQueueBase) where a missing bounds check allows an out-of-bounds read, potentially enabling local escalation of privilege with SYSTEM privileges and no user interaction. Public references note a Pixel updat...

CVE-2022-20574

CVE-2022-20574 involves the Android kernel’s DRM firmware path, specifically the function sec_sysmmu_info in drm_fw.c. The issue is an out-of-bounds read caused by improper input validation, enabling local information disclosure without additional privileges and without user interaction. Document...

CVE-2022-20576

This CVE-2022-20576 affects Android kernel telephony code, specifically the externalOnRequest function in rilapplication.cpp. The issue is a potential out-of-bounds write caused by a missing bounds check, which could enable local escalation of privilege with System execution privileges required. ...

CVE-2022-20584

CVE-2022-20584 affects the Android kernel component in the shared_mem.c file, specifically the page_number handling. The issue is described as improper input validation that can enable code execution in the secure world, leading to local escalation of privilege without extra privileges or user in...

CVE-2022-20592

CVE-2022-20592 describes a vulnerability in the Android kernel’s DRM firmware, specifically in the function ppmp_validate_secbuf of drm_fw.c. The flaw stems from improper input validation, allowing local information disclosure without requiring additional execution privileges or user interaction....