CVE-2022-21752

CVE-2022-21752 concerns a vulnerability in the WLAN driver where a missing bounds check allows an out-of-bounds write, enabling local privilege escalation with System execution privileges required. User interaction is not needed and the issue is described consistently across multiple sources (e.g...

CVE-2022-21774

CVE-2022-21774 describes a use-after-free in the TEEI driver caused by a race condition, enabling local escalation of privileges to SYSTEM with no user interaction required. Documents from Red Hat and NVD confirm the flaw and patch ALPS06641447/ALPS06641447 as a fix. The available sources do not ...

CVE-2022-26096

CVE-2022-26096 describes a null pointer dereference in the parser_ispe function of the libsimba library prior to Samsung SMR Apr-2022 Release 1. The flaw permits a remote attacker to cause an out-of-bounds write. Connected documents consistently identify the affected component as libsimba and the...

CVE-2022-27571

CVE-2022-27571 describes a heap-based buffer overflow in the function sheifd_get_info_image of the libsimba library, prior to the Samsung SMR Apr-2022 Release 1. This vulnerability could enable remote code execution without user interaction, with network access as the attack vector. The CVSS data...

CVE-2022-27828

CVE-2022-27828 involves Samsung MediaMonitorEvent with an improper input/validation check prior to SMR Apr-2022 Release 1. The vulnerability is rated HIGH (CVSSv3.1: Local, Low attack complexity, Privileges Required: Low, No user interaction; confidentiality, integrity, and availability all high)...

CVE-2023-20975

CVE-2023-20975 affects Android 13 via a permissions bypass in getAvailabilityStatus of EnableContentCapturePreferenceController.java, enabling a local privilege escalation with no user interaction. Affected vector is not exploitation details in the provided docs, but multiple sources note a DISAL...

CVE-2023-20981

CVE-2023-20981 affects Android 13 as described in multiple sources. The vulnerability is located in the Bluetooth stack function btu_ble_rc_param_req_evt in btu_hcif.cc , where a missing bounds check allows an out-of-bounds read. This can lead to local information disclosure and requires System-l...

CVE-2023-21002

CVE-2023-21002 affects Android 13 in the getAvailabilityStatus logic of Transcode Permission Controllers, where a missing permission check enables local elevation of privilege without user interaction. Impact is described as high (local, with high confidentiality/integrity/availability impact). C...

CVE-2023-21013

CVE-2023-21013 is an out-of-bounds read in hostapd.cpp (forceStaDisconnection) on Android 13. The vulnerability could allow local information disclosure with system-level privileges and requires no user interaction. Connected sources consistently describe the issue without public exploit details....

CVE-2023-21033

CVE-2023-21033 is a DoS vulnerability affecting Android 13 where the issue resides in WifiManager.addNetwork. The root cause is a resource-exhaustion condition that can trigger a persistent DoS without requiring additional privileges or user interaction, and it is local in scope. Documented detai...

CVE-2023-21072

CVE-2023-21072 : The vulnerability affects the Android kernel in the function dhd_rtt.c::rtt_unpack_xtlv_cbfn, where a buffer overflow can cause an out-of-bounds write. This could enable local escalation of privilege to System level. Documents consistently describe the issue as a local exploit pa...

CVE-2023-21158

CVE-2023-21158 is an Android kernel issue in the encode function of miscdata.cpp where a heap buffer overflow can cause an out-of-bounds read. The described impact is local information disclosure with system privileges required (no user interaction needed). Public exploitation details are not pro...

CVE-2023-21177

CVE-2023-21177 affects Android 13 via WindowManagerService.requestAppKeyboardShortcuts. A missing permission check could allow an attacker to infer the app a user is interacting with, enabling local information disclosure without additional execution privileges and without user interaction. Repor...

CVE-2023-21188

The CVE-2023-21188 entry corresponds to an Android vulnerability in btm_ble_update_inq_result within btm_ble_gap.cc. It describes a possible out-of-bounds read caused by a heap buffer overflow, leading to local information disclosure with System execution privileges needed. Exploitation does not ...

CVE-2023-21204

CVE-2023-21204 is described in the provided documents as an out-of-bounds read in multiple files affecting the Android wifi server, enabling local information disclosure and requiring System-level privileges for exploitation, with no user interaction needed. The Android Pixel security bulletin li...

CVE-2023-21331

The CVE-2023-21331 issue is in Android’s InputMethod component. It enables local information disclosure by determining whether an app is installed without query permissions, via a side-channel. Impact per the provided data: attacker gains access to sensitive information (C=High) with local access...

CVE-2023-35655

CVE-2023-35655 affects the darwinn_mlir_converter_aidl.cc CanConvertPadV2Op function, where a heap buffer overflow can cause an out-of-bounds read and local escalation of privilege with System execution privileges required; exploitation is reported as no user interaction required. Public document...

CVE-2023-40142

CVE-2023-40142 is documented in multiple sources as a local elevation-of-privilege affecting Google Pixel components, stemming from a logic error in the code that bypasses carrier restrictions on the device. The Android Pixel bulletins and Red Hat/NVD records describe the issue as enabling local ...

CVE-2024-32920

CVE-2024-32920 describes an out-of-bounds read in set_secure_reg of sac_handler.c, caused by a missing bounds check. This can disclose 4 bytes of stack memory locally without extra privileges or user interaction. Affected software/components, root cause, and explicit remediation are not provided ...

CVE-2024-47025

The CVE-2024-47025 issue is a local information-disclosure in the function ppmp_protect_buf of drm_fw.c. The underlying logic error could allow disclosure of sensitive data without extra privileges, with no user interaction required. Pixel/Android bulletins indicate affected devices can be patche...

CVE-2024-53840

Technical details such as affected product, versions, and fix are not provided in the supplied documents; the CVE is described as a biometric bypass with local privilege escalation, but no specifics on vulnerable components are given. Monitor for updates.

CVE-2025-0083

CVE-2025-0083 is an information-disclosure vulnerability affecting Google Android, caused by URI double encoding that allows cross-profile content access without extra privileges. The issue is referenced across multiple sources (Android Android framework/system entries in the 2025 Android bulleti...

CVE-2011-3901

CVE-2011-3901 affects Android's SQLite journal handling. The vulnerability arises because the journal file of SQLite databases in the Android data directory can be read by all applications, due to permissions on the data directory (/data/data//databases) and the journal itself. Impacted versions ...

CVE-2015-5581

CVE-2015-5581 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) that allows remote arbitrary-code execution. Affected: Flash Player on Windows, OS X (before 18.0.0.241; before 19.0.0.185 for 19.x), Linux (before 11.2.202.521); Adobe AIR before 19.0.0.190; AIR SD...

CVE-2015-5584

Technical details about CVE-2015-5584 are not publicly provided in the connected documents. The initial description lists affected products/versions but no concrete exploit/vulnerability details. Monitor for updates from advisories.

CVE-2016-3857

CVE-2016-3857 is an Android/Linux kernel privilege-escalation flaw in the ARM OABI compatibility layer present on Nexus 7 (2013) devices prior to 2016-08-05. The issue arises from two bugs in the ARM OABI area that can let local attackers escalate privileges via a crafted app (internal bug 285225...

CVE-2017-0523

CVE-2017-0523 is an elevation-of-privilege vulnerability in the Qualcomm Wi‑Fi driver that could allow a local malicious app to execute arbitrary code in the kernel. The CVSS3 vector indicates LOCAL access, high complexity, no privileges required, but user interaction is required; root cause is e...

CVE-2017-8244

CVE-2017-8244 affects Android CAF builds leveraging the Linux kernel. The vulnerability arises in core_info_read and inst_info_read where the buffer structures dbg_buf, dbg_buf->curr, and dbg_buf->filled_size can be concurrently modified by multiple threads without mutexes/locks. This race ...

CVE-2018-9475

The CVE-2018-9475 issue affects Android’s Bluetooth stack (HeadsetInterface::ClccResponse in btif_hf.cc), causing an out-of-bounds stack write that could enable remote elevation of privilege via Bluetooth when SIP calls are enabled, with no user interaction required. Exploitation details are not ...

CVE-2018-9478

CVE-2018-9478 involves an out-of-bounds write in the sdp_server.cc file, specifically in process_service_attr_req and process_service_search_attr_req, caused by a missing bounds check. The vulnerability could allow remote code execution with no privileges and without user interaction, as describe...

CVE-2020-0030

CVE-2020-0030 describes a race condition in binder_thread_release within binder.c, leading to a use-after-free that can enable local privilege escalation without additional privileges or user interaction. Affected component is the Android/Linux kernel (binder subsystem). The provided connected do...

CVE-2020-0053

The CVE-2020-0053 issue affects Android 10, specifically in hidl_struct_util.cpp within convertHidlNanDataPathInitiatorRequestToLegacy and convertHidlNanDataPathIndicationResponseToLegacy. It describes a possible out-of-bounds write due to a missing bounds check, enabling local escalation of priv...

CVE-2020-0063

CVE-2020-0063 affects Android SurfaceFlinger, where the UI confirmation screen protected by the TEE can be overridden, enabling local elevation of privilege. Root cause: manipulation of the UI flow in SurfaceFlinger allows bypassing user interaction. Impact: local privilege escalation with high s...

CVE-2020-27066

CVE-2020-27066 involves a use-after-free in the Linux kernel’s xfrm6_tunnel_free_spi (net/ipv6/xfrm6_tunnel.c) caused by improper locking, enabling local privilege escalation with system execution privileges required and no user interaction. Affected context from connected docs includes Android k...

CVE-2021-0550

The CVE-2021-0550 issue affects Android 11, involving the AnnotateActivity.java onLoadFailed path. It enables local elevation of privilege (EoP) by gaining WRITE_EXTERNAL_STORAGE permissions without user consent due to a confused deputy, with no user interaction required. The vulnerability is des...

CVE-2021-0552

CVE-2021-0552 affects Android on Android-11 via the MediaOutputSlice.java getEndItemSliceAction path. The root cause is an unsafe PendingIntent that enables a permission bypass, leading to potential information disclosure with local attack practicality. The vulnerability is categorized as an info...

CVE-2021-0570

The CVE-2021-0570 entry maps to an elevation-of-privilege issue in Android 11’s BugreportProgressService.sendBugreportNotification caused by an unsafe PendingIntent. This can bypass privileges locally without user interaction, as vendor records and the Pixel update bulletin note patches for Andro...

CVE-2021-0940

CVE-2021-0940 concerns the Android kernel with a vulnerability described as an out-of-bounds write due to improper locking. The issue could enable local escalation of privilege to System execution privileges without user interaction, affecting Android kernel components. Concrete exploit details, ...

CVE-2021-1003

The CVE-2021-1003 issue affects Android 12 in AudioService.java (adjustStreamVolume). The root cause is a confused deputy that allows an unprivileged app to change the audio stream volume, enabling local privilege escalation without extra execution privileges, and no user interaction is required ...

CVE-2021-25364

CVE-2021-25364 affects Samsung Secure Folder prior to SMR APR-2021 Release 1, where a pendingIntent hijacking issue allows unprivileged apps to access contact information. The vulnerability is linked to Secure Folder’s handling of PendingIntents and exposes contact data locally. Affected software...

CVE-2021-39655

CVE-2021-39655 is listed in Pixel bulletin as an Elevation of Privilege in the Android kernel (Kernel component) affecting Pixel devices, with a high-severity CVSS in NVD (Critical in 3.1). The connected Pixel bulletin entry confirms the issue is categorized under Kernel with EoP impact, but the ...

CVE-2021-39684

CVE-2021-39684 relates to the Android kernel component gs101/abl/target/slider/target.c, where a logic error can cause allocation of RWX memory. This may enable local privilege escalation with no extra execution privileges or user interaction required. Connected OSV data confirms the issue but do...

CVE-2021-39759

CVE-2021-39759 is an Android libstagefright vulnerability described in connected sources as a local privilege-escalation due to an integer overflow that enables an out-of-bounds write. Exploitation is possible locally without user interaction, affecting Android 12L. The issue is categorized under...

CVE-2021-39764

CVE-2021-39764 is documented in Android 12L release notes as a Framework Elevation of Privilege (EoP) vulnerability with moderate severity. The entry specifies an improper input validation issue in Settings that can display an incorrect app name, enabling local privilege escalation via app spoofi...

CVE-2021-39782

The CVE-2021-39782 issue affects Android 12L Telephony, enabling a local elevation of privilege via unauthorized modification of the PLMN SIM file due to a missing permission check. Exploitation is described as local with no user interaction; the Android 12L security release notes indicate mitiga...

CVE-2022-20044

CVE-2022-20044 involves a use-after-free in Bluetooth that can crash the Bluetooth service and enable local escalation of privilege without user interaction. Exploitation is local with low privileges required and LOW attack complexity; the vulnerability impacts confidentiality, integrity, and ava...

CVE-2022-20063

CVE-2022-20063 affects atf (spm) with an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with System execution privileges required and user interaction for exploitation. Patch ALPS06171715 / ALPS06171715 is noted. Connected sources confirm this descrip...

CVE-2022-20075

CVE-2022-20075 refers to a vulnerability in ged caused by an integer overflow that leads to a possible out-of-bounds write, enabling local escalation of privileges with System execution privileges required. User interaction is not required. Patch ALPS05838808 (Issue ALPS05838808) is noted as reme...

CVE-2022-20367

CVE-2022-20367 affects the Android kernel; the vulnerability is in the construct_transaction function of lwis_ioctl.c, where an integer overflow can cause an out-of-bounds write, enabling local privilege escalation with system execution privileges required and no user interaction. The issue is id...

CVE-2022-20505

CVE-2022-20505 affects Android 13. In CallLogProvider.java openFile, a path traversal bug can bypass permissions, enabling local escalation of privilege with User privileges and no user interaction required. The vulnerability is described as a permission bypass due to a path traversal error, with...