CVE-2019-2104

CVE-2019-2104 affects the Android Framework component (HIDL/safe_union and related C++ structs/unions) used when sending data to application processes. The issue exposes uninitialized fields, enabling local information disclosure without user interaction. The vulnerability is scoped to Android 8....

CVE-2019-2109

CVE-2019-2109 affects Android via the Media/AVIExtractor path: In MakeMPEG4VideoCodecSpecificData (AVIExtractor.cpp) there is an out-of-bounds write caused by an incorrect bounds check, enabling remote code execution with no extra privileges and requiring user interaction for exploitation. Affect...

CVE-2021-0566

CVE-2021-0566 affects Android 11, specifically in accessAudioHalPidscpp within TimeCheck.cpp. The issue is an out-of-bounds read due to missing bounds checks, leading to potential local information disclosure with system privileges required. No user interaction is needed for exploitation, and exp...

CVE-2021-0608

The CVE-2021-0608 entry concerns Android’s AppLaunchActivity.handleAppLaunch, with a local elevation-of-privilege via a confused deputy. Affected component: Pixel Launcher on Pixel devices (and related Android kernel/framework context as per mappings). Root cause: improper handling in AppLaunchAc...

CVE-2021-0998

CVE-2021-0998 affects Android 12 in the media/ih264e path: the function ih264e_find_bskip_params() in ih264e_me.c can trigger an out-of-bounds read due to a heap buffer overflow, enabling local information disclosure without user interaction. Exploitation details and impact are described in multi...

CVE-2021-1015

CVE-2021-1015 affects Android 12 via the getMeidForSlot path in PhoneInterfaceManager.java, enabling side-channel disclosure to determine if an app is installed without query permissions. Outcome is local information disclosure with no extra privileges required and no user interaction. Connected ...

CVE-2021-25479

CVE-2021-25479 affects the Exynos CP Chipset. The issue is a heap-based buffer overflow in the chipset before SMR Oct-2021 Release 1, leading to arbitrary memory writes and potential code execution. The primary documented impact is memory corruption with potential device compromise; exploitation ...

CVE-2021-39678

CVE-2021-39678 is described in connected sources as a vulnerability in the Android kernel allowing a bypass of Factory Reset Protection that could lead to local privilege escalation with no user interaction. The NVD entry lists impact as local, with base scores indicating high severity (CVSSv3.1:...

CVE-2021-39753

The CVE-2021-39753 issue affects Android 12L, involving DomainVerificationService where a missing permission check allows local information disclosure without extra privileges. This is a framework-level information leak (no user interaction required) with a local attack surface. The Android 12L s...

CVE-2021-39772

CVE-2021-39772 affects Android 12L via a Bluetooth-related issue where access to the A2DP audio control switch is possible due to a missing permission check. This could enable local privilege escalation without user interaction. The flaw is described in the Android 12L security release notes and ...

CVE-2021-39777

CVE-2021-39777 affects Android 12L Telephony. The issue is a missing permission check that can disclose whether an app is installed, leaking information locally without user interaction and without requiring extra privileges. Documented impact is information disclosure with a LOCAL attack vector ...

CVE-2021-39789

CVE-2021-39789 affects Android 12L where a missing permission check could allow a local attacker to leak TTY mode changes, enabling local elevation of privilege with no additional execution privileges and no user interaction required. The NVD entry confirms the vulnerability type as EoP with loca...

CVE-2022-20065

In the CVE-2022-20065 entry, the issue is described as a missing bounds check in the ccci component leading to an out-of-bounds read. This could allow local information disclosure with System execution privileges, and exploitation does not require user interaction. A patch is identified: ALPS0610...

CVE-2022-20555

CVE-2022-20555 affects Android 13. The issue is in ufdt_get_node_by_path_len of ufdt_convert.c, where a missing bounds check can cause an out-of-bounds read. This leads to local information disclosure with System execution privileges required; no user interaction is needed for exploitation. Publi...

CVE-2022-20601

Technical details for CVE-2022-20601 are not publicly available in the provided documents. Monitor for updates from the listed sources.

CVE-2022-21787

CVE-2022-21787 affects MediaTek audio DSP components. The root cause is a missing bounds check that allows an out-of-bounds write, enabling local escalation of privilege with System execution privileges. Exploitation does not require user interaction. A patch is referenced as ALPS06558844 (Issue ...

CVE-2022-26092

CVE-2022-26092 : Affected component is the Quram Agif library before Samsung SMR Apr-2022 Release 1. Description: improper boundary check leads to arbitrary code execution (buffer overflow). Impact is high (local, requires low privileges, no user interaction). Connected sources indicate a Samsung...

CVE-2022-27831

The CVE-2022-27831 entry describes an Improper boundary check in libsflvextractor’s sflvd_rdbuf_bits, before Samsung SMR Apr-2022 Release 1, allowing an attacker to read out-of-bounds memory. Connected sources confirm the component/libsflvextractor and the affected patch level; no exploit code or...

CVE-2022-33731

CVE-2022-33731 involves an improper access control vulnerability in DesktopSystemUI prior to SMR Aug-2022 Release 1. The issue allows an attacker with local access to enable or disable arbitrary components within DesktopSystemUI. Affected software: DesktopSystemUI (pre-SMR Aug-2022 Release 1). Ro...

CVE-2022-39848

CVE-2022-39848 relates to Samsung AT_Distributor prior to SMR Oct-2022 Release 1, where sensitive SerialNo data can be exposed to a local attacker via log exposure. The issue is a local-vulnerability risk (ATT&CK-style local access) with impact limited to confidentiality (LOW). The public descrip...

CVE-2022-39886

CVE-2022-39886 concerns an improper access control vulnerability in the IpcRxServiceModeBigDataInfo component of RIL, prior to Samsung SMR Nov-2022 Release 1. A local attacker could access device information due to the access-control weakness in RIL. Affected: Samsung devices running RIL before t...

CVE-2022-39913

CVE-2022-39913 concerns the Exposure of Sensitive Information to an Unauthorized Actor in Samsung’s Persona Manager prior to Android T(13). The issue arises from a data exposure that allows a local attacker to access user profiles information. Affected product/area: Persona Manager on devices run...

CVE-2022-47344

Summary of CVE-2022-47344 : Multiple sources describe a missing permission check in engineermode services , leading to a potential local denial of service . The root cause appears to be a privilege-check bypass within engineermode services, enabling an attacker with local access to trigger DoS co...

CVE-2023-20999

CVE-2023-20999 refers to a local DoS on Android 13 caused by improper input validation that can trigger a persistent reboot loop. The exploit requires no user interaction, with a local attack vector and a high availability impact as per NVD metrics. Connected sources consistently describe the iss...

CVE-2023-21003

CVE-2023-21003 is described across multiple sources as a local elevation of privilege in Android 13 related to the getAvailabilityStatus path of several Transcode Permission Controllers. The root cause is a missing permission check, allowing a user with LOW privileges to bypass protections with n...

CVE-2023-21011

CVE-2023-21011 affects Android 13 on Pixel devices, with vulnerable code in p2p_iface.cpp due to a missing bounds check that can cause an out-of-bounds read. This may lead to local information disclosure with system privileges required; exploitation does not require user interaction. Multiple con...

CVE-2023-21012

CVE-2023-21012 affects Android 13 (Pixel devices) with an out-of-bounds read in p2p_iface.cpp caused by a missing bounds check, leading to possible local information disclosure and requiring system privileges for exploitation. The vulnerability description states no user interaction is needed. Pu...

CVE-2023-21018

CVE-2023-21018 concerns Google Pixel/Android 13 where the UnwindingWorker in unwinding.cc can trigger an out-of-bounds write due to a use-after-free. This leads to local elevation of privilege with System execution privileges and does not require user interaction. The public descriptions consiste...

CVE-2023-21078

CVE-2023-21078 affects the Android kernel, with the flaw located in function dhd_rtt.c: rtt_unpack_xtlv_cbfn . It describes a possible out-of-bounds write caused by a buffer overflow, which could enable a local escalation of privilege with System privileges required. Exploitation is stated as loc...

CVE-2023-21203

The CVE-2023-21203 issue affects Android 13 with a fault in startWpsPbcInternal in sta_iface.cpp that allows an out-of-bounds read due to improper input validation. This could enable local escalation of privilege to SYSTEM with no user interaction required. Connected sources corroborate the file ...

CVE-2023-21210

CVE-2023-21210 affects Android 13. The issue is an out-of-bounds read in the function initiateHs20IconQueryInternal within sta_iface.cpp, caused by improper input validation. Reported impact: local information disclosure with system-level execution privileges required; exploitation requires no us...

CVE-2023-21307

CVE-2023-21307 affects Android’s Bluetooth component. A paired Bluetooth device can bypass permissions to read the device’s long-term identifier, leading to local information disclosure without additional execution privileges; user interaction is required for exploitation. The issue is categorize...

CVE-2023-52341

Technical details (affected products, versions, root cause, impact, and mitigation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2024-20083

CVE-2024-20083 affects venc and stems from a missing bounds check that enables an out-of-bounds write. This may allow local escalation of privilege with System execution privileges required. No user interaction is needed for exploitation per connected Red Hat/NVD entries. The vulnerability is ass...

CVE-2024-29744

CVE-2024-29744: A missing bounds check in the tmu_get_gov_time_windows function allows an out-of-bounds read, causing local information disclosure without extra privileges or user interaction. Exploitation details are not fully provided in the documents; remediation references Android Pixel bulle...

CVE-2024-32914

CVE-2024-32914 affects the tpu_get_int_state function in tpu.c, enabling local information disclosure due to uninitialized data. The impact is information disclosure without additional execution privileges and without user interaction. Documented in multiple sources (NVD/Red Hat/NVD and Android P...

CVE-2024-32917

CVE-2024-32917 affects the pl330_dma_from_peri_start() routine in fp_spi_dma.c, where a missing bounds check enables a possible out-of-bounds write. This can lead to local elevation of privilege with no additional execution privileges required, and does not require user interaction. The issue is ...

CVE-2024-47031

CVE-2024-47031 is an elevation-of-privilege flaw in the ABL component (A-329163861) affecting Google Pixel devices running Android before the 2024-10-05 patch. The issue enables local privilege escalation with no user interaction; CVSSv3.1 indicates LOCAL access and High impact to confidentiality...

CVE-2024-47034

CVE-2024-47034 is a local information-disclosure flaw caused by an out-of-bounds read due to a missing bounds check. The available connected documents corroborate a local-information-disclosure impact without requiring user interaction. The Pixel Update Bulletin (Android Pixel security bulletin) ...

CVE-2024-53838

CVE-2024-53838 stems from an incorrect bounds check in Exynos_parsing_user_data_registered_itu_t_t35 within VendorVideoAPI.cpp, causing an out-of-bounds write. The flaw enables local privilege escalation with no additional execution privileges required and does not require user interaction. Affec...

CVE-2025-0084

CVE-2025-0084 is a remote code execution risk in the Android Bluetooth stack (HFP enabled) caused by an out-of-bounds write due to a use-after-free condition in multiple locations. The vulnerability could allow an attacker, with adjacent access and no user interaction, to execute code on the devi...

CVE-2025-20665

CVE-2025-20665 affects MediaTek chipsets’ devinfo component where a missing SELinux policy enables local information disclosure of the device identifier without additional privileges. Multiple sources corroborate the issue and reference patch ALPS09555228 / MSV-2760 from MediaTek’s bulletin. Impa...

CVE-2013-5933

The CVE-2013-5933 entry describes a stack-based buffer overflow in the sub_E110 function of init on Android 2.3.7 running on the Motorola Defy XT (Republic Wireless configuration). The vulnerability arises when a long string is written to the /dev/socket/init_runit LocalSocket, in a way inconsist...

CVE-2016-3862

CVE-2016-3862 affects Android mediaserver’s ExifInterface usage in media/ExifInterface.java, where improper interaction with static variables in libjhead_jni can allow remote attackers to craft a media file to trigger memory corruption or remote code execution. Impact is described as memory corru...

CVE-2017-13262

CVE-2017-13262 is an Android Bluetooth vulnerability in the BNEP path (bnep_data_ind in bnep_main.cc) where a missing length decrement causes an out-of-bounds read. This can enable remote information disclosure without user interaction. Affected Android versions include 5.1.1 through 8.1. Public ...

CVE-2017-13321

The CVE-2017-13321 issue affects Android’s SensorService::isDataInjectionEnabled in frameworks/native/services/sensorservice/SensorService.cpp, where a missing bounds check can cause an out-of-bounds read. This leads to local information disclosure with no user interaction and without additional ...

CVE-2019-9416

CVE-2019-9416 concerns an information disclosure in Android’s libstagefright caused by uninitialized data. Affected software: Android 10; vulnerable component: libstagefright. Root cause: uninitialized data leading to remote information disclosure. As per the entry, exploitation requires user int...

CVE-2021-0551

CVE-2021-0551 affects Android 11 with a DoS via a vulnerability in the MediaControlPanel.java bind. The root cause is improper input validation in the bind path, allowing a malicious media file to lock up the system UI and cause remote denial of service. Exploitation requires user interaction. Pu...

CVE-2021-0569

CVE-2021-0569 affects Android 11 and is caused by a tapjacking/overlay flaw in ContactsDumpActivity.java that can lead to local information disclosure with user interaction required. Impact is information disclosure; exploitation is local and requires user action. Remediation is not explicitly st...

CVE-2021-0990

CVE-2021-0990 concerns an information-disclosure flaw in Android 12 via getDeviceId in PhoneSubInfoController.java. The issue allows determining whether an app is installed without query permissions, via a side-channel, leading to local information disclosure without extra execution privileges; u...