CVE-2019-2086

CVE-2019-2086 affects the Android 10 libxaac library, with an out-of-bounds write due to a missing bounds check. This could enable remote code execution and requires user interaction to exploit. The issue is documented across multiple sources (NVD entry and Red Hat advisory) as a Libxaac/Android-...

CVE-2019-2130

CVE-2019-2130 affects Android: the issue is in CompilationJob::FinalizeJob of compiler.cc, caused by type confusion that can enable remote code execution with no user interaction. Exploitation could escalate privileges via a crafted malicious proxy configuration. Affected Android versions include...

CVE-2019-9335

CVE-2019-9335 is described in connected documents as an information-disclosure vulnerability in Android 10, stemming from uninitialized data in libavc. It could allow remote information disclosure with no additional execution privileges, and exploitation requires user interaction. The provided so...

CVE-2020-0047

CVE-2020-0047 affects Android 10; a missing permission check in AudioService.java (setMasterMute) allows local silencing of audio without extra execution privileges or user interaction. The issue is documented as Elevation of Privilege with likely impact limited to audio control. Public reference...

CVE-2020-0103

CVE-2020-0103 exploits a memory corruption in a2dp_aac_decoder_cleanup within a2dp_aac_decoder.cc, enabling remote code execution with no privileges or user interaction. Affected software per the initial data includes Android 9 and Android 10. The Android Security Bulletin notes this issue under ...

CVE-2021-0538

CVE-2021-0538 affects Android 11 via EmergencyCallbackModeExitDialog.java, where a tapjacking/overlay attack can exit emergency callback mode, enabling local elevation of privilege with user interaction required. Documented impact: local EoP with high likelihood of access via exposed UI flow; CVS...

CVE-2021-0542

CVE-2021-0542 affects Android 11, with the issue residing in the BeamTransferManager.java workflow where a missing permission check in updateNotification can lead to local information disclosure of paired Bluetooth addresses. Exploitation requires no additional execution privileges but may requir...

CVE-2021-0548

CVE-2021-0548 affects Android 11; the vulnerability is in rw_i93_send_to_lower (rw_i93.cc) where a missing bounds check can cause an out-of-bounds write, enabling local elevation of privilege with no user interaction. Affected component: Android kernel/userland path rw_i93_send_to_lower. No explo...

CVE-2021-0562

The CVE-2021-0562 entry corresponds to an information disclosure flaw in Android 11 related to RasterIntraUpdate in motion_est.cpp. The root cause is an out-of-bounds read caused by an incorrect bounds check, allowing local information disclosure without extra execution privileges. Affected compo...

CVE-2021-0571

CVE-2021-0571 affects Android 11, specifically the code paths in ActivityTaskManagerService.startActivity() and AppTaskImpl.startActivity() , where a permissions bypass can allow access to restricted activities. The Red Hat/UK and CVE listings corroborate an Elevation of Privilege (EoP) risk with...

CVE-2021-0973

CVE-2021-0973 affects Android 12 and involves a flaw in isFileUri in UriUtil.java that allows bypassing the ignoring of file:// URIs due to improper case-sensitive handling. The issue can lead to local information disclosure with no additional privileges required, and exploitation requires user i...

CVE-2021-25336

CVE-2021-25336 affects Samsung mobile devices via improper access control in NotificationManagerService. The root cause is insufficient access checks that allow untrusted applications to obtain notification access by sending a crafted malicious intent. Documented impact is limited to exploitation...

CVE-2021-25362

CVE-2021-25362 affects Samsung CertInstaller prior to SMR APR-2021 Release 1. Root cause: improper permission management that lets untrusted apps delete certain local files. Impact varies by metric/version (CVSS3.1: LOCAL, LOW integrity, HIGH availability; CVSS2: LOCAL, PARTIAL integrity, PARTIAL...

CVE-2021-39649

CVE-2021-39649 affects the Android kernel’s regmap.c, specifically regmap_exit, where improper locking can cause a use-after-free. This enables local escalation of privilege with system execution privileges required and no user interaction. Exploitation status is not provided in the sources; reme...

CVE-2021-39784

The CVE-2021-39784 issue is reported for Android 12L and involves the CellBroadcastReceiver. The root cause is a missing permission check, enabling a path to turn on specific cellular features, which can lead to local elevation of privilege without extra execution privileges and without user inte...

CVE-2022-20094

CVE-2022-20094 affects imgsensor with an out-of-bounds write caused by an incorrect bounds check. The vulnerability enables local privilege escalation with System execution privileges required; exploitation does not require user interaction. The issue is mitigated by patch ALPS06479763 (Issue ALP...

CVE-2022-20244

CVE-2022-20244 affects Android 13 and its Bluetooth stack. The issue is a missing bounds check in Bluetooth, causing an out-of-bounds write in the Bluetooth subsystem. This could enable local escalation of privilege if more than 100 Bluetooth devices are connected, with no additional execution pr...

CVE-2022-20552

CVE-2022-20552 affects Android, with the vulnerability in the btif_a2dp_sink_command_ready function of btif_a2dp_sink.cc. The issue is an out-of-bounds read caused by a use-after-free, leading to local information disclosure without extra execution privileges. Exploitation is described as local a...

CVE-2022-20553

CVE-2022-20553 affects Android 13 where an overlay tapjacking in onCreate of LogAccessDialogActivity.java can bypass a permission check, enabling local elevation of privilege with system execution privileges. Exploitation requires user interaction and is described as LOCAL with HIGH confidentiali...

CVE-2022-20563

CVE-2022-20563 describes an out-of-bounds read caused by memory corruption in ufdt_convert within the Android kernel, enabling local privilege escalation to System. Exploitation is local with no user interaction; no remediation details are provided in the linked documents.

CVE-2022-21762

CVE-2022-21762 affects the apusys driver, where an integer overflow can trigger a system crash. The vulnerability enables local denial of service with System execution privileges and does not require user interaction. Affected component is the apusys driver; root cause is integer overflow leading...

CVE-2022-27825

The CVE-2022-27825 vulnerability affects the libsapeextractor library, specifically the sapefd_parse_meta_HEADER function. A faulty size check can allow an out-of-bounds read when processing a crafted media file. This issue is addressed in Samsung SMR Apr-2022 Release 1 (patch package), mitigatin...

CVE-2022-27826

Technical details about CVE-2022-27826 are not publicly provided in the connected documents; monitor for updates.

CVE-2022-27835

CVE-2022-27835 describes an improper boundary check in Samsung SMR UWB firmware prior to Apr-2022 Release 1, enabling arbitrary memory write. Affected component: UWB firmware used in Samsung SMR patch package; root cause: insufficient boundary validation in the firmware. Impact stated: potential ...

CVE-2022-28783

CVE-2022-28783 concerns Galaxy Themes prior to Samsung SMR May-2022 Release 1, where improper validation allowed uninstalling arbitrary packages without permission. The description in multiple sources confirms the root cause as insufficient validation for removing a package name, enabling unautho...

CVE-2022-28788

CVE-2022-28788 concerns the aviextractor library. A buffer size check logic defect allowed out-of-bounds reads, potentially causing a temporary denial of service prior to Samsung SMR May-2022 Release 1. The patch introduces buffer size checks to address this. The issue is cited across multiple fe...

CVE-2022-30710

CVE-2022-30710 affects Samsung Mobile (Android) RemoteViews. The vulnerability is described as an improper validation in RemoteViews prior to the SMR Jun-2022 Release 1, enabling attackers to launch certain activities. Public sources (NVD, Red Hat, CNVD) align on elevation/privilege aspects, with...

CVE-2022-33717

The CVE-2022-33717 issue affects Samsung SEM TA Module before SMR Aug-2022 Release 1, where missing input validation before memory reads allows a local attacker to read out-of-bounds memory. Affected component: SEM TA memory-read path within the ROM/TA environment (Sem Ta). Impact is confidential...

CVE-2022-38681

CVE-2022-38681 involves a vulnerability in the WLAN driver where a missing parameter check in the driver may allow a local attacker to trigger a denial of service in WLAN services. The available documents identify the affected component as the WLAN driver and cite a local denial of service as the...

CVE-2022-47322

CVE-2022-47322 describes a local DoS in the WLAN driver caused by missing parameter validation in the WLAN subsystem. The vulnerability is reported across multiple sources (NVD entry and Red Hat advisory; CNNVD references Qualcomm chip WLAN driver) without public exploit details in the provided d...

CVE-2022-47359

CVE-2022-47359 concerns the Log Service, where a missing permission check is identified as the root cause. The exposure enables local denial of service in the log service. The available connected records consistently describe a privilege check omission as the flaw, but do not provide product/vend...

CVE-2023-20968

CVE-2023-20968 affects Android 13; root cause is a missing bounds check in multiple functions of p2p_iface.cpp, causing a possible out-of-bounds read and local information disclosure with system privileges. Exploitation is described as requiring local access with no user interaction, and confiden...

CVE-2023-21001

The CVE-2023-21001 issue (Android 13; Pixel devices) is an Elevation of Privilege vulnerability caused by a missing permission check in onContextItemSelected within NetworkProviderSettings.java. It enables local escalation of privilege without additional execution privileges or user interaction, ...

CVE-2023-21009

CVE-2023-21009 describes an out-of-bounds read in Android’s p2p_iface.cpp caused by a missing bounds check. Affects Android-13 devices; impact is local information disclosure with system-level privileges required. Exploitation does not require user interaction. The issue is listed in the Pixel se...

CVE-2023-21010

The CVE-2023-21010 issue affects the Android p2p_iface.cpp component (Android 13 and earlier), where a missing bounds check can cause an out-of-bounds read. This creates a potential local information disclosure vulnerability that, per the documents, could enable System-level execution privileges ...

CVE-2023-21021

The CVE-2023-21021 issue affects Android 13 where WifiServiceImpl.java’s isTargetSdkLessThanQOrPrivileged path allows a guest user to change admin network settings due to a missing permission check. This enables local privilege escalation with no extra privileges or user interaction required. CVS...

CVE-2023-21022

CVE-2023-21022 is a memory corruption vulnerability in the Pixel/Android stack: in BufferBlock of Suballocation.cpp, an out-of-bounds write could lead to local escalation of privilege without user interaction. Affected software is Android 13 on Google Pixel devices (per the Pixel Update Bulletin ...

CVE-2023-21185

CVE-2023-21185 affects Android 13 devices, where multiple functions in WifiNetworkFactory.java lack a required permission check. This creates a path for local privilege escalation from a guest user, with no additional execution privileges and no user interaction required to exploit. Public source...

CVE-2023-21200

CVE-2023-21200 documents an out-of-bounds read in on_remove_iso_data_path() of btm_iso_impl.h on Android 13, caused by improper input validation. This can enable local information disclosure without extra execution privileges or user interaction (per NVD metrics: LOCAL access, LOW privileges, no ...

CVE-2023-21387

The CVE-2023-21387 entry concerns Google Android’s User Backup Manager. The connected documents describe a token leakage via log information disclosure that can bypass user confirmation for backups, leading to local information disclosure with System execution privileges potentially required. Thi...

CVE-2024-27231

The provided connected documents confirm a concrete vulnerability: in function tmu_get_tr_stats() of tmu.c there is a missing bounds check causing an out-of-bounds read, enabling local information disclosure with no additional privileges or user interaction required. Affected software/versions ar...

CVE-2024-44099

The CVE-2024-44099 entry describes a local information-disclosure vulnerability caused by an insecure default value that enables a local bypass of user interaction with no privileges. It is associated with Google Pixel devices (notably listed under the Pixel update bulletin) and is categorized as...

CVE-2024-47018

CVE-2024-47018 affects Google's Pixel platform; the flaw is in pmucal_rae_handle_seq_int within flexpmu_cal_rae.c. The vulnerability is an out-of-bounds read caused by a buffer overflow, enabling local information disclosure without additional execution privileges and without user interaction. Th...

CVE-2024-56186

Summary (CVE-2024-56186): A vulnerability in the Google Pixel/Android stack where in closeChannel of secureelementimpl.cpp an incorrect bounds check can cause an out-of-bounds read, leading to local information disclosure without extra privileges or user interaction. The CVSSv3.1 base score is 5....

CVE-2025-0080

The CVE-2025-0080 issue affects Android’s installation confirmation dialog, where tapjacking/overlay leads to local privilege escalation without extra execution privileges or user interaction. The vulnerability targets the Android framework and can be exploited by overlaying the dialog in multipl...

CVE-2012-3979

CVE-2012-3979 : The OpenVAS/Nessus entries indicate a vulnerability in Mozilla Firefox for Android where insecure use of __android_log_print can be triggered by a crafted web page using the dump() function, potentially allowing remote code execution. The issue is tied to Firefox for Android speci...

CVE-2013-6770

CVE-2013-6770 affects CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 on Android 4.3/4.4. The flaw lets any user with ADB shell access and a suitable Linux UID exploit /system/xbin/su --daemon to gain root privileges and create a Trojan script, due to inadequate restriction of who can ru...

CVE-2016-0809

CVE-2016-0809 is a use-after-free in the wifi_cleanup function of Broadcom’s Wi‑Fi driver (bcmdhd/wifi_hal/wifi_hal.cpp) used by Android 6.x. The issue could allow local privilege escalation when an attacker with physical access executes a crafted app. Affected: Android 6.x prior to 2016-02-01. R...

CVE-2017-0386

CVE-2017-0386 describes an elevation of privilege in the libnl library that could allow a local malicious application to execute arbitrary code within the context of a privileged process on Android. Affected products/versions include Android 5.0.2–7.1 (as listed). The impact is local code executi...

CVE-2017-0776

CVE-2017-0776 is an information-disclosure vulnerability in Android’s Media Framework affecting Android 7.0, 7.1.1, 7.1.2 and 8.0. Root-cause and exact exploit details are not provided in the connected documents; no mitigation/patch details are specified here. Monitor for official patches in Andr...