CVE-2023-20712

CVE-2023-20712 affects MediaTek WLAN code (wlan module) and is due to a missing bounds check, enabling an out-of-bounds write that can yield local privilege escalation to System level. Exploit requires LOCAL access with HIGH privileges and no user interaction. Patch: ALPS07796914 (Issue ALPS07796...

CVE-2023-32806

CVE-2023-32806 affects the MediaTek WLAN driver and involves an out-of-bounds write caused by improper input validation. The issue can lead to local escalation of privileges with SYSTEM-level execution, requiring no user interaction. The vulnerability is described with a patch reference (ALPS0744...

CVE-2017-0411

CVE-2017-0411 is an elevation-of-privilege vulnerability in the Android Framework APIs that could let a local malicious application execute arbitrary code within a privileged process. Affected product: Android (Framework APIs). Vulnerable versions (per initial entry): Android 7.0 and 7.1.1 (Andro...

CVE-2021-0988

CVE-2021-0988 affects Android 12 and involves information disclosure via getLaunchedFromUid/getLaunchedFromPackage in ActivityClientController.java. The issue allows a local attacker to determine whether an app is installed without query permissions due to a side-channel information disclosure, l...

CVE-2021-0992

CVE-2021-0992 affects Android 12 via PaymentDefaultDialog.java, where a tapjack overlay could allow changing the default payment app without user consent. This is described as a local elevation of privilege requiring user interaction for exploitation, with no additional privileges needed. Connect...

CVE-2021-1003

The CVE-2021-1003 issue affects Android 12 in AudioService.java (adjustStreamVolume). The root cause is a confused deputy that allows an unprivileged app to change the audio stream volume, enabling local privilege escalation without extra execution privileges, and no user interaction is required ...

CVE-2021-39753

The CVE-2021-39753 issue affects Android 12L, involving DomainVerificationService where a missing permission check allows local information disclosure without extra privileges. This is a framework-level information leak (no user interaction required) with a local attack surface. The Android 12L s...

CVE-2021-39768

CVE-2021-39768 (Android 12L) describes an elevation-of-privilege issue in Settings where a missing permission check could allow an attacker to add an automatic Wi‑Fi network connection without user consent. A local attacker could exploit this with user interaction to gain privileged access on the...

CVE-2021-39772

CVE-2021-39772 affects Android 12L via a Bluetooth-related issue where access to the A2DP audio control switch is possible due to a missing permission check. This could enable local privilege escalation without user interaction. The flaw is described in the Android 12L security release notes and ...

CVE-2021-39777

CVE-2021-39777 affects Android 12L Telephony. The issue is a missing permission check that can disclose whether an app is installed, leaking information locally without user interaction and without requiring extra privileges. Documented impact is information disclosure with a LOCAL attack vector ...

CVE-2021-39789

CVE-2021-39789 affects Android 12L where a missing permission check could allow a local attacker to leak TTY mode changes, enabling local elevation of privilege with no additional execution privileges and no user interaction required. The NVD entry confirms the vulnerability type as EoP with loca...

CVE-2022-20063

CVE-2022-20063 affects atf (spm) with an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with System execution privileges required and user interaction for exploitation. Patch ALPS06171715 / ALPS06171715 is noted. Connected sources confirm this descrip...

CVE-2022-20065

In the CVE-2022-20065 entry, the issue is described as a missing bounds check in the ccci component leading to an out-of-bounds read. This could allow local information disclosure with System execution privileges, and exploitation does not require user interaction. A patch is identified: ALPS0610...

CVE-2022-24931

The CVE-2022-24931 entry pertains to Samsung ApkInstaller’s dynamic receiver with improper access control. Connected sources (PT-2022-16993) confirm the root cause as lack of proper permission enforcement, allowing unauthorized attackers to execute arbitrary activities on affected ApkInstaller ve...

CVE-2022-25814

The CVE-2022-25814 entry describes a local PendingIntent hijacking flaw in Wearable Manager Installer (Android) prior to Samsung SMR Mar-2022 Release 1. Root cause: hijack of PendingIntent to cause unauthorized actions without permission. Affected component: Wearable Manager Installer. Impact per...

CVE-2022-26433

The CVE-2022-26433 entry concerns MediaTek mailbox (mailbox controller) with a type-confusion caused out-of-bounds write leading to local privilege escalation to SYSTEM. Affected component: mailbox handling in MediaTek devices; root cause: type confusion resulting in out-of-bounds write (exact co...

CVE-2022-27576

Samsung DeX Home Information Disclosure (CVE-2022-27576) affects Samsung DeX Home prior to the SMR April-2022 Release 1. Root cause: lack of proper access authentication logic that can reveal information about the currently launched foreground application. Impact: information exposure with access...

CVE-2022-28783

CVE-2022-28783 concerns Galaxy Themes prior to Samsung SMR May-2022 Release 1, where improper validation allowed uninstalling arbitrary packages without permission. The description in multiple sources confirms the root cause as insufficient validation for removing a package name, enabling unautho...

CVE-2022-28788

CVE-2022-28788 concerns the aviextractor library. A buffer size check logic defect allowed out-of-bounds reads, potentially causing a temporary denial of service prior to Samsung SMR May-2022 Release 1. The patch introduces buffer size checks to address this. The issue is cited across multiple fe...

CVE-2022-30715

The CVE-2022-30715 issue affects DofViewer prior to the SMR Jun-2022 Release 1, described as an improper access control vulnerability that allows an attacker to control the floating system alert window. Root cause: insufficient access control in DofViewer. Impact: attacker-controlled floating ale...

CVE-2022-30719

CVE-2022-30719 affects Samsung Mobile’s libsmkvextractor. The root cause is an improper input validation check logic, prior to SMR Jun-2022 Release 1, which can trigger a crash (availability impact). The vulnerability is documented across NVD/Red Hat/CNVD/CNNVD entries; exploitation status is not...

CVE-2022-39848

CVE-2022-39848 relates to Samsung AT_Distributor prior to SMR Oct-2022 Release 1, where sensitive SerialNo data can be exposed to a local attacker via log exposure. The issue is a local-vulnerability risk (ATT&CK-style local access) with impact limited to confidentiality (LOW). The public descrip...

CVE-2023-20968

CVE-2023-20968 affects Android 13; root cause is a missing bounds check in multiple functions of p2p_iface.cpp, causing a possible out-of-bounds read and local information disclosure with system privileges. Exploitation is described as requiring local access with no user interaction, and confiden...

CVE-2023-21001

The CVE-2023-21001 issue (Android 13; Pixel devices) is an Elevation of Privilege vulnerability caused by a missing permission check in onContextItemSelected within NetworkProviderSettings.java. It enables local escalation of privilege without additional execution privileges or user interaction, ...

CVE-2023-21002

CVE-2023-21002 affects Android 13 in the getAvailabilityStatus logic of Transcode Permission Controllers, where a missing permission check enables local elevation of privilege without user interaction. Impact is described as high (local, with high confidentiality/integrity/availability impact). C...

CVE-2023-21032

CVE-2023-21032 affects Android 13; the issue is in the function _ufdt_output_node_to_fdt of ufdt_convert.c, causing a possible out-of-bounds read via a heap buffer overflow. The impact is local information disclosure with System privileges required; exploitation does not require user interaction....

CVE-2023-21177

CVE-2023-21177 affects Android 13 via WindowManagerService.requestAppKeyboardShortcuts. A missing permission check could allow an attacker to infer the app a user is interacting with, enabling local information disclosure without additional execution privileges and without user interaction. Repor...

CVE-2023-21188

The CVE-2023-21188 entry corresponds to an Android vulnerability in btm_ble_update_inq_result within btm_ble_gap.cc. It describes a possible out-of-bounds read caused by a heap buffer overflow, leading to local information disclosure with System execution privileges needed. Exploitation does not ...

CVE-2023-21203

The CVE-2023-21203 issue affects Android 13 with a fault in startWpsPbcInternal in sta_iface.cpp that allows an out-of-bounds read due to improper input validation. This could enable local escalation of privilege to SYSTEM with no user interaction required. Connected sources corroborate the file ...

CVE-2023-21387

The CVE-2023-21387 entry concerns Google Android’s User Backup Manager. The connected documents describe a token leakage via log information disclosure that can bypass user confirmation for backups, leading to local information disclosure with System execution privileges potentially required. Thi...

CVE-2023-32830

CVE-2023-32830 concerns a vulnerability in TVAPI where a missing bounds check can cause an out-of-bounds write. The root cause is a bounds-check omission in TVAPI, enabling local escalation of privilege with System execution privileges required; no user interaction is needed. The impact is descri...

CVE-2023-32880

CVE-2023-32880 concerns the battery module with a missing bounds check that can cause local information disclosure (high confidentiality impact) and requires local access and high privileges; no user interaction is needed. A patch is available (Patch ID: ALPS08308070; Issue ID: ALPS08308076). No ...

CVE-2023-35655

CVE-2023-35655 affects the darwinn_mlir_converter_aidl.cc CanConvertPadV2Op function, where a heap buffer overflow can cause an out-of-bounds read and local escalation of privilege with System execution privileges required; exploitation is reported as no user interaction required. Public document...

CVE-2023-35693

CVE-2023-35693 affects the IncFS kernel component (fs/incfs/vfs.c). The issue is a use-after-free that can cause memory corruption, enabling local privilege escalation with system execution privileges required. Exploitation details are not provided in the supplied documents. The bulletins referen...

CVE-2023-48411

CVE-2023-48411 involves an out-of-bounds read in SignalStrengthAdapter::FillGsmSignalStrength() inside protocolmiscadapter.cpp. The issue stems from a missing bounds check and could enable local information disclosure with baseband firmware compromise required; exploitation does not require user ...

CVE-2024-44099

The CVE-2024-44099 entry describes a local information-disclosure vulnerability caused by an insecure default value that enables a local bypass of user interaction with no privileges. It is associated with Google Pixel devices (notably listed under the Pixel update bulletin) and is categorized as...

CVE-2024-47024

CVE-2024-47024 involves an integer overflow in vring_size within external/headers/include/virtio/virtio_ring.h, causing a possible out-of-bounds write. The impact is local escalation of privilege with no additional execution privileges required and no user interaction needed, as described across ...

CVE-2024-47033

CVE-2024-47033 describes a potential memory corruption in the lwis allocator by a use-after-free in lwis_allocator_free (lwis_allocator.c). The weakness can lead to local escalation of privilege with no additional execution privileges required and without user interaction. Publicly available deta...

CVE-2024-56186

Summary (CVE-2024-56186): A vulnerability in the Google Pixel/Android stack where in closeChannel of secureelementimpl.cpp an incorrect bounds check can cause an out-of-bounds read, leading to local information disclosure without extra privileges or user interaction. The CVSSv3.1 base score is 5....

CVE-2025-0074

The CVE-2025-0074 issue affects Google Android’s sdp_discovery.cc (process_service_attr_rsp) where a use-after-free leads to remote code execution with network access and no user interaction. This is categorized as a critical RCE in Android 15 per the 2025-03-01 bulletin, with patch levels 2025-0...

CVE-2025-0079

CVE-2025-0079 describes a logic error in Android's Bluetooth stack (avdtp/avctp) that could allow unencrypted channels, enabling local privilege escalation with user privileges required and no user interaction. Connected documents indicate this is addressed in the Android security bulletin for 20...

CVE-2025-0080

The CVE-2025-0080 issue affects Android’s installation confirmation dialog, where tapjacking/overlay leads to local privilege escalation without extra execution privileges or user interaction. The vulnerability targets the Android framework and can be exploited by overlaying the dialog in multipl...

CVE-2011-3874

CVE-2011-3874 describes a use-after-free vulnerability in Android’s libsysutils, triggered via FrameworkListener::dispatchCommand when invoked with an incorrect number of arguments. Affected Android versions are 2.2.x–2.2.2 and 2.3.x–2.3.6. The issue was demonstrated by zergRush and, per sources,...

CVE-2013-4777

Summary of CVE-2013-4777 (Android 2.3.7, Motorola Defy XT, Republic Wireless) The advisory describes an exploit path where the device’s init process creates a /dev/socket/init_runit LocalSocket to accept shell commands. The underlying issue is a stack-based buffer overflow in the sub_E110 functio...

CVE-2015-6626

Affected software: Android libstagefright (mediaserver) prior to 5.1.1 LMY48Z and 6.0 prior to 2015-12-01. Root cause: information disclosure vulnerability allowing remote attackers to obtain sensitive data and bypass an unspecified protection mechanism via unknown vectors (Signature/SignatureOrS...

CVE-2016-10276

CVE-2016-10276 (Qualcomm bootloader) targets the Qualcomm bootloader on Android devices, enabling a local malicious app to execute arbitrary code within the kernel context (elevation of privilege). The issue is described as critical due to potential local, permanent device compromise that may req...

CVE-2016-1943

Consolidated details show CVE-2016-1943 affects Mozilla Firefox on Android, where the address bar can be spoofed via the scrollTo method. OpenSUSE release notes (openSUSE-2016-128/0306-1/0309) document Firefox 44.0 and NSS/NSPR updates as fixes, explicitly listing CVE-2016-1943 as part of address...

CVE-2016-2060

CVE-2016-2060 is a local privilege escalation in Qualcomm/netd tethering controls caused by inadequate validation of the upstream interface parameter. FireEye’s analysis and Qualcomm advisories describe that untrusted interface values can be passed through addUpstreamV6Interface to netd, which ul...

CVE-2017-0427

CVE-2017-0427 is an elevation-of-privilege vulnerability in the Android kernel file system. A local attacker could execute arbitrary code in the kernel context on devices running Kernel-3.10 or Kernel-3.18, with a potential for permanent device compromise. The CVE’s patch status is not publicly a...

CVE-2017-0678

CVE-2017-0678 is a remote code execution vulnerability in Android's media framework affecting Android 7.0, 7.1.1 and 7.1.2. The issue appears in the 2017 July Android Security Bulletin under Media framework, with patches released via the July 2017 patch levels (2017-07-01 and 2017-07-05). No expl...