Lucene search
+L
GoogleAndroid

8301 matches found

CVE
CVE
added 2023/02/06 12:00 a.m.88 views

CVE-2023-20618

The CVE-2023-20618 vulnerability affects the MediaTek vcu component, where memory corruption can occur due to improper locking. This can enable local privilege escalation to System execution level without user interaction. The security entry lists Patch ID ALPS07519184 (Issue ALPS07519184) as the...

6.7CVSS6.8AI score0.0008EPSS
Save
CVE
CVE
added 2023/08/07 3:22 a.m.88 views

CVE-2023-20811

CVE-2023-20811 involves a boundary-check failure in the MediaTek IOMMU, causing an out-of-bounds write that could enable local privilege escalation with system privileges. Affected component: IOMMU sub-system (MediaTek). Root cause: missing bounds check leading to out-of-bounds write. Impact: loc...

6.7CVSS6.7AI score0.00093EPSS
Save
CVE
CVE
added 2023/03/24 12:00 a.m.88 views

CVE-2023-20995

CVE-2023-20995 concerns a logic error in the Fingerprint workflow within Android 13. In code path captureImage of CustomizedSensor.cpp, the flaw can bypass fingerprint unlock, enabling local elevation of privilege without additional execution privileges and without user interaction. Affected prod...

7.8CVSS7.7AI score0.00092EPSS
Save
CVE
CVE
added 2023/03/24 12:00 a.m.88 views

CVE-2023-20996

CVE-2023-20996 affects Android 13 (Pixel devices) and is described as a DoS via an input validation flaw that can trigger a persistent reboot loop. The vulnerability enables local denial of service with no user interaction required and requires user privileges. Public details confirm the issue is...

5.5CVSS5.4AI score0.00092EPSS
Save
CVE
CVE
added 2023/03/24 12:00 a.m.88 views

CVE-2023-21003

CVE-2023-21003 is described across multiple sources as a local elevation of privilege in Android 13 related to the getAvailabilityStatus path of several Transcode Permission Controllers. The root cause is a missing permission check, allowing a user with LOW privileges to bypass protections with n...

7.8CVSS7.7AI score0.0009EPSS
Save
CVE
CVE
added 2023/03/24 12:00 a.m.88 views

CVE-2023-21042

CVE-2023-21042 corresponds to a memory corruption issue via a use-after-free in lwis_allocator_init (lwis_allocator.c) within the Android kernel’s lwis subsystem. This could enable local privilege escalation to SYSTEM with no user interaction required. The OSV entry PUB-A-239873326 confirms the u...

6.7CVSS6.6AI score0.00097EPSS
Save
CVE
CVE
added 2023/03/24 12:00 a.m.88 views

CVE-2023-21045

CVE-2023-21045 affects the Android kernel cpif handling of probe failures. The vulnerability arises from an out-of-bounds read caused by a use-after-free, enabling local information disclosure with SYSTEM privileges; exploitation requires no user interaction. Multiple connected sources (NVD, Red ...

4.4CVSS4.3AI score0.00094EPSS
Save
CVE
CVE
added 2023/06/28 12:00 a.m.88 views

CVE-2023-21066

CVE-2023-21066 describes a heap buffer overflow in the Android kernel, specifically in the cd_CodeMsg function of cd_codec.c. This causes an out-of-bounds write that could enable remote code execution with no privileges and no user interaction required. The vulnerability is documented across mult...

9.8CVSS9.3AI score0.0051EPSS
Save
CVE
CVE
added 2023/06/28 12:00 a.m.88 views

CVE-2023-21185

CVE-2023-21185 affects Android 13 devices, where multiple functions in WifiNetworkFactory.java lack a required permission check. This creates a path for local privilege escalation from a guest user, with no additional execution privileges and no user interaction required to exploit. Public source...

7.8CVSS7.7AI score0.00088EPSS
Save
CVE
CVE
added 2023/06/28 12:00 a.m.88 views

CVE-2023-21200

CVE-2023-21200 documents an out-of-bounds read in on_remove_iso_data_path() of btm_iso_impl.h on Android 13, caused by improper input validation. This can enable local information disclosure without extra execution privileges or user interaction (per NVD metrics: LOCAL access, LOW privileges, no ...

5.5CVSS5AI score0.00092EPSS
Save
CVE
CVE
added 2023/10/30 4:18 p.m.88 views

CVE-2023-21294

CVE-2023-21294 concerns Android’s Slice component, where a missing permission check enables local information disclosure by exposing installed packages. The exploit requires no user interaction and does not require additional privileges. The connected sources reiterate the same description but do...

5.5CVSS5.8AI score0.00093EPSS
Save
CVE
CVE
added 2023/10/30 4:56 p.m.88 views

CVE-2023-21348

The CVE-2023-21348 entry concerns Android Window Manager side-channel leakage that allows an app to be detected as installed without query permissions, causing local information disclosure. Connected sources corroborate the issue as an information-disclosure vulnerability (Framework category) wit...

3.3CVSS4.4AI score0.00081EPSS
Save
CVE
CVE
added 2024/04/01 2:35 a.m.88 views

CVE-2024-20053

CVE-2024-20053 affects the flashc component. The vulnerability is an out-of-bounds write caused by an uncaught exception, enabling local escalation of privileges with System-level execution privileges required. User interaction is not required. A patch is referenced (ALPS08541757; ALPS08541764). ...

8.4CVSS7AI score0.0009EPSS
Save
CVE
CVE
added 2024/04/01 2:35 a.m.88 views

CVE-2024-20054

A security vulnerability exists in the gnss module of MediaTek chips due to a missing bounds check . This flaw can lead to a local escalation of privilege , requiring System execution privileges for exploitation. Notably, user interaction is not required to trigger the vulnerability. Remediation ...

6.9AI score0.00269EPSS
Save
CVE
CVE
added 2024/09/27 7:37 a.m.88 views

CVE-2024-39433

CVE-2024-39433 affects UNISOC/drm service components in chipsets and is associated with a missing bounds check, causing an out-of-bounds write that can lead to local denial of service with System execution privileges. The connected sources confirm the vulnerable component (drm service) and the im...

6.2CVSS7AI score0.00076EPSS
Save
CVE
CVE
added 2024/10/25 10:34 a.m.88 views

CVE-2024-44101

CVE-2024-44101 is a DoS vulnerability affecting Google Pixel devices’ Modem, caused by a Null Pointer Dereference from improper input validation. Exploitation requires no user interaction and is modeled as network-accessible with high impact (remote DoS). Public details across sources confirm the...

7.5CVSS7AI score0.00367EPSS
Save
CVE
CVE
added 2024/10/25 10:34 a.m.88 views

CVE-2024-47019

CVE-2024-47019 affects Google Pixel devices via a buffer/read bounds issue in ProtocolEmbmsSaiListAdapter::Init() inside protocolembmsadapter.cpp. The vulnerability is an out-of-bounds read caused by a missing bounds check, potentially leading to local information disclosure and baseband firmware...

5.5CVSS6.3AI score0.00077EPSS
Save
CVE
CVE
added 2025/01/03 3:28 a.m.88 views

CVE-2024-53834

The Google Android operating system is vulnerable to an out-of-bounds read due to an incorrect boundary check in the sms_DisplayHexDumpOfPrivacyBuffer function within the sms_Utilities.c file. This vulnerability could allow an attacker to perform remote information disclosure without requiring ad...

6.6AI score0.00282EPSS
Save
CVE
CVE
added 2025/08/04 1:49 a.m.88 views

CVE-2025-20696

A security vulnerability exists in DA within MediaTek Chipsets due to a missing bounds check . This flaw allows for a possible out-of-bounds write , which could result in local escalation of privilege . Exploitation requires physical access to the device and user interaction , but no additional e...

6.5AI score0.0012EPSS
Save
CVE
CVE
added 2025/08/26 10:48 p.m.88 views

CVE-2025-22405

In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

7.7AI score0.001EPSS
Save
CVE
CVE
added 2025/12/08 4:56 p.m.88 views

CVE-2025-22432

A security vulnerability exists in Google Android within the System component, specifically in the notifyTimeout function of CallRedirectionProcessor.java . The flaw stems from improper input validation , which could allow for a persistent connection . This vulnerability may lead to local escalat...

6.4AI score0.00095EPSS
Save
CVE
CVE
added 2026/06/01 9:14 p.m.88 views

CVE-2026-0055

CVE-2026-0055 describes a path traversal in PackageInstallerService.java (createSessionInternal) that could let an attacker place or move a Device Policy Controller (DPC) into an invalid directory, enabling local privilege escalation without extra execution privileges or user interaction. The det...

6.2CVSS6AI score0.00132EPSS
Save
CVE
CVE
added 2011/10/25 7:00 p.m.87 views

CVE-2011-3881

CVE-2011-3881 affects WebKit as used in Google Chrome <15.0.874.102 and Android

4.3CVSS5.4AI score0.01757EPSS
Save
CVE
CVE
added 2012/11/30 11:00 a.m.87 views

CVE-2012-4220

CVE-2012-4220 / CVE-2012-4221 affect the Qualcomm DIAG kernel-mode driver for Android 2.3–4.2. diagchar_core.c (CVE-2012-4220) and diagchar_core.c with an untrusted pointer dereference (CVE-2012-4221) allow a local application to exploit crafted arguments via diagchar_ioctl to execute arbitrary c...

6.8CVSS7.5AI score0.02961EPSS
Save
CVE
CVE
added 2015/10/01 12:00 a.m.87 views

CVE-2014-7915

The CVE relates to an integer overflow in SampleTable.cpp of Android’s libstagefright (Android before 5.0.0; some references extend to related 4.x/5.x lines). The root cause is an integer overflow in SampleTable.cpp in libstagefright, leading to unspecified impact per early descriptions, with fol...

10CVSS6.9AI score0.00623EPSS
Save
CVE
CVE
added 2015/10/06 5:00 p.m.87 views

CVE-2015-3874

CVE-2015-3874 affects the Sonivox components in Android prior to 5.1.1 LMY48T, allowing remote attackers to execute arbitrary code or cause memory corruption via a crafted media file. The issue is listed in the Android 2015-10-01 bulletin as a remote-code-execution vulnerability in mediaserver-re...

10CVSS7.9AI score0.01838EPSS
Save
CVE
CVE
added 2016/02/07 1:00 a.m.87 views

CVE-2016-0802

CVE-2016-0802 affects the Broadcom Wi‑Fi kernel driver, vulnerable in Android 4.x up to 4.4.3/4.4.4, 5.x up to 5.1.x, and 6.x up to 2016-02-01. An unauthenticated, adjacent attacker can send crafted wireless control message packets to trigger memory corruption, leading to remote code execution or...

8.8CVSS7.5AI score0.01701EPSS
Save
CVE
CVE
added 2016/02/07 1:00 a.m.87 views

CVE-2016-0809

CVE-2016-0809 is a use-after-free in the wifi_cleanup function of Broadcom’s Wi‑Fi driver (bcmdhd/wifi_hal/wifi_hal.cpp) used by Android 6.x. The issue could allow local privilege escalation when an attacker with physical access executes a crafted app. Affected: Android 6.x prior to 2016-02-01. R...

8.8CVSS8.5AI score0.00555EPSS
Save
CVE
CVE
added 2016/10/10 10:00 a.m.87 views

CVE-2016-5348

CVE-2016-5348 affects the GPS component in Android, dating from 4.x up to 7.0, where a man-in-the-middle can trigger memory exhaustion and a DoS by sending a large xtra.bin/xtra2.bin from spoofed gpsonextra.net or izatcloud.net hosts. Root cause is malformed/overlarge GPS data files processed by ...

7.1CVSS5.5AI score0.04323EPSS
Save
CVE
CVE
added 2017/02/08 3:00 p.m.87 views

CVE-2017-0424

CVE-2017-0424 affects AOSP Messaging in Android (versions 6.0–7.1.1). It is an information disclosure vulnerability that could allow a local malicious app to bypass OS protections and access data outside its permitted scope when processing a specially crafted file. The issue is described as a mod...

5.5CVSS5.2AI score0.00802EPSS
Save
CVE
CVE
added 2017/05/12 3:00 p.m.87 views

CVE-2017-0604

CVE-2017-0604 concerns Android devices with the Qualcomm power driver in the kernel. The flaw enables a local malicious application to gain elevation of privilege and execute arbitrary code in the kernel context, implying potential local compromise that could require reflashing to repair. The lin...

9.3CVSS7.2AI score0.00596EPSS
Save
CVE
CVE
added 2017/10/03 9:00 p.m.87 views

CVE-2017-0809

The CVE-2017-0809 entry describes a remote code execution vulnerability in the Android media framework (libstagefright). Affected product: Android. Vulnerable component/file: Android’s media framework library libstagefright. Root cause: remote attacker could craft a file to trigger code execution...

9.3CVSS7.7AI score0.01576EPSS
Save
CVE
CVE
added 2018/04/04 4:00 p.m.87 views

CVE-2017-13292

CVE-2017-13292 is a remote code execution vulnerability in the Broadcom bcmdhd Wi‑Fi driver affecting Android; root cause is an out-of-bounds write in wl_get_assoc_ies within wl_cfg80211.c due to an incorrect bounds check. This could allow an attacker to execute arbitrary code in the context of a...

10CVSS8.8AI score0.01619EPSS
Save
CVE
CVE
added 2017/12/05 7:00 p.m.87 views

CVE-2017-14904

CVE-2017-14904 affects Android’s libgralloc/MediaServer path. A crafted binder request can cause an arbitrary unmap in MediaServer, enabling sandbox escape and, per ThreatPost, could allow code injection into system_server via a malicious URL in Chrome. Exploitation details in sources describe an...

7.8CVSS7.1AI score0.00244EPSS
Save
CVE
CVE
added 2018/12/20 3:00 p.m.87 views

CVE-2018-11987

CVE-2018-11987 describes a vulnerability affecting all CAF Android releases that use the Linux kernel. In boot, an unlikely memory allocation failure in the secure pool can cause a wrong-pointer access, potentially leading to a kernel panic. The affected surface is the secure pool management duri...

7.8CVSS7.3AI score0.00167EPSS
Save
CVE
CVE
added 2024/12/02 9:09 p.m.87 views

CVE-2018-9414

CVE-2018-9414 affects Google Pixel/Android Bluetooth stack. The issue is in the native function gattServerSendResponseNative (com_android_bluetooth_gatt.cpp), where a missing bounds check allows an out-of-bounds stack write. This can lead to local elevation of privilege with user execution privil...

7.8CVSS6.9AI score0.00079EPSS
Save
CVE
CVE
added 2019/07/08 5:40 p.m.87 views

CVE-2019-2117

The CVE-2019-2117 issue affects Android (7.0–9) and is tied to TelephonyProvider.java. The root cause is a missing permission check in checkQueryPermission, leading to local information disclosure about carrier systems without requiring privileges or user interaction. Impact is information disclo...

5.5CVSS5AI score0.00136EPSS
Save
CVE
CVE
added 2020/06/04 5:01 p.m.87 views

CVE-2020-13838

CVE-2020-13838 affects Samsung mobile devices running P (9.0) and Q (10.0) software, where the DeX Lockscreen fails to block access to the Quick Panel and notifications. The issue is documented across multiple sources (NVD entry and Red Hat advisory) without details on a concrete exploit vector o...

3.6CVSS4.3AI score0.0013EPSS
Save
CVE
CVE
added 2020/10/06 6:36 p.m.87 views

CVE-2020-26602

CVE-2020-26602 affects Samsung mobile devices (EthernetNetwork component) on Android 8.1–11.0. The issue allows an unprivileged process with PendingIntent to access the SD card. This can enable unintended data exposure and potential abuse of card access through networked interaction. Root cause: ...

7.5CVSS7.5AI score0.00431EPSS
Save
CVE
CVE
added 2021/06/22 11:02 a.m.87 views

CVE-2021-0538

CVE-2021-0538 affects Android 11 via EmergencyCallbackModeExitDialog.java, where a tapjacking/overlay attack can exit emergency callback mode, enabling local elevation of privilege with user interaction required. Documented impact: local EoP with high likelihood of access via exposed UI flow; CVS...

7.3CVSS7.2AI score0.00115EPSS
Save
CVE
CVE
added 2021/06/22 11:00 a.m.87 views

CVE-2021-0562

The CVE-2021-0562 entry corresponds to an information disclosure flaw in Android 11 related to RasterIntraUpdate in motion_est.cpp. The root cause is an out-of-bounds read caused by an incorrect bounds check, allowing local information disclosure without extra execution privileges. Affected compo...

5.5CVSS5AI score0.00115EPSS
Save
CVE
CVE
added 2021/06/22 10:58 a.m.87 views

CVE-2021-0572

CVE-2021-0572 affects Android 11 with a vulnerability in AccountManagerService.doNotification where an unsafe PendingIntent allows a local permission bypass and potential local information disclosure. Exploitation requires no user interaction and privileges are potentially low with local access. ...

5.5CVSS5.1AI score0.00109EPSS
Save
CVE
CVE
added 2021/10/25 1:20 p.m.87 views

CVE-2021-0939

CVE-2021-0939 affects the Android kernel, description states: in set_default_passthru_cfg of passthru.c there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with system privileges required; user interaction not needed. The provided ...

4.4CVSS4.3AI score0.00117EPSS
Save
CVE
CVE
added 2021/12/15 6:06 p.m.87 views

CVE-2021-1005

CVE-2021-1005 affects Android 12, involving getDeviceIdWithFeature in PhoneInterfaceManager.java. The issue enables a local information disclosure via a side-channel that can reveal whether an app is installed without query permissions, with no user interaction required. The description and conne...

5.5CVSS4.9AI score0.00111EPSS
Save
CVE
CVE
added 2021/12/15 6:06 p.m.87 views

CVE-2021-1031

CVE-2021-1031 : Android 12’s NotificationManagerService.cancelNotificationsFromListener can indirectly determine whether an app is installed via a side‑channel information disclosure, enabling local information disclosure without additional execution privileges. The issue is documented with a LOW...

3.3CVSS3.5AI score0.0011EPSS
Save
CVE
CVE
added 2021/03/04 8:58 p.m.87 views

CVE-2021-25336

CVE-2021-25336 affects Samsung mobile devices via improper access control in NotificationManagerService. The root cause is insufficient access checks that allow untrusted applications to obtain notification access by sending a crafted malicious intent. Documented impact is limited to exploitation...

4.3CVSS4.2AI score0.00249EPSS
Save
CVE
CVE
added 2021/04/09 5:36 p.m.87 views

CVE-2021-25362

CVE-2021-25362 affects Samsung CertInstaller prior to SMR APR-2021 Release 1. Root cause: improper permission management that lets untrusted apps delete certain local files. Impact varies by metric/version (CVSS3.1: LOCAL, LOW integrity, HIGH availability; CVSS2: LOCAL, PARTIAL integrity, PARTIAL...

6.8CVSS6.1AI score0.00104EPSS
Save
CVE
CVE
added 2021/02/04 5:16 a.m.87 views

CVE-2021-26687

The CVE-2021-26687 entry concerns LG mobile devices running Android 8–10 where the HostnameVerified default is mishandled in preloaded applications. Connected sources confirm the affected platform (LG Android devices) and the root cause: mishandling of HostnameVerified in preloaded apps, which ca...

9.8CVSS9.2AI score0.00549EPSS
Save
CVE
CVE
added 2021/12/15 6:06 p.m.87 views

CVE-2021-39642

CVE-2021-39642 affects the Android kernel component, specifically the function synchronous_process_io_entries in lwis_ioctl.c . The issue is a race condition that enables a possible out-of-bounds write, leading to local elevation of privileges with System-level execution rights required. No user ...

6.4CVSS6.5AI score0.00086EPSS
Save
CVE
CVE
added 2022/03/30 4:02 p.m.87 views

CVE-2021-39771

CVE-2021-39771 is an Elevation of Privilege (EoP) in Android 12L Platform related to improper input validation in Settings, allowing a local attacker to misrepresent which app adds a Wi‑Fi network. Impact is Moderate per Android 12L release notes; exploitation requires user interaction. The vulne...

7.8CVSS7.9AI score0.00329EPSS
Save
Total number of security vulnerabilities8301