CVE-2025-22408

CVE-2025-22408 affects Google Android in the rfc_check_send_cmd function of rfc_utils.cc, caused by a use-after-free; this enables remote code execution with no extra privileges and without user interaction. Public documents confirm the issue as a System-level vulnerability in Android, with CVSS ...

CVE-2025-22432

CVE-2025-22432 affects the Android Framework (CallRedirectionProcessor.java). The root cause is improper input validation in notifyTimeout, which may create a persistent connection and enable local escalation of privilege, triggering background activity launches with User privileges and no user i...

CVE-2011-1350

The CVE-2011-1350 entry describes an information-disclosure vulnerability in the PowerVR SGX driver used by Android prior to 2.3.6. The flaw allows an attacker to leak potentially sensitive data from kernel stack memory via a crafted request to the pvrsrvkm device. Affected component: PowerVR SGX...

CVE-2012-3979

CVE-2012-3979 : The OpenVAS/Nessus entries indicate a vulnerability in Mozilla Firefox for Android where insecure use of __android_log_print can be triggered by a crafted web page using the dump() function, potentially allowing remote code execution. The issue is tied to Firefox for Android speci...

CVE-2013-6770

CVE-2013-6770 affects CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 on Android 4.3/4.4. The flaw lets any user with ADB shell access and a suitable Linux UID exploit /system/xbin/su --daemon to gain root privileges and create a Trojan script, due to inadequate restriction of who can ru...

CVE-2014-7915

The CVE relates to an integer overflow in SampleTable.cpp of Android’s libstagefright (Android before 5.0.0; some references extend to related 4.x/5.x lines). The root cause is an integer overflow in SampleTable.cpp in libstagefright, leading to unspecified impact per early descriptions, with fol...

CVE-2015-3874

CVE-2015-3874 affects the Sonivox components in Android prior to 5.1.1 LMY48T, allowing remote attackers to execute arbitrary code or cause memory corruption via a crafted media file. The issue is listed in the Android 2015-10-01 bulletin as a remote-code-execution vulnerability in mediaserver-re...

CVE-2015-5573

CVE-2015-5573 is a Type Confusion vulnerability affecting Adobe Flash Player prior to 18.0.0.241 and 19.x prior to 19.0.0.185 on Windows/macOS, and prior to 11.2.202.521 on Linux, plus affected AIR/SDK components. The root cause is a type confusion error that could allow an attacker to execute ar...

CVE-2016-10381

CVE-2016-10381 : The issue affects Qualcomm components in Android CAF releases using the Linux kernel, where the UE can send unprotected MeasurementReports that disclose UE location. Connected documents confirm a Qualcomm information-disclosure vulnerability linked to MeasurementReports, with the...

CVE-2016-5346

CVE-2016-5346 affects Google Pixel/Pixel XL via the Qualcomm Avtimer driver. It is a NULL pointer dereference when processing an accept() call on AF_MSM_IPC sockets in a user process, enabling a local attacker to disclose sensitive information. The available documents confirm local information di...

CVE-2017-0548

CVE-2017-0548 describes a remote denial-of-service vulnerability in libskia that could allow an attacker to cause a device hang or reboot by processing a specially crafted file. Affected product: Android, specifically versions 7.0 and 7.1.1. The issue is classified as High severity in the Android...

CVE-2017-0718

CVE-2017-0718 is a remote code execution flaw in Android’s media framework MPEG-2 decoder impacting Android 6.0, 6.0.1, 7.0, 7.1.1 and 7.1.2. Public detail confirms it as a Media framework RCE issue; root cause is in the MPEG-2 decoder path. The Android Bulletin (Aug 2017) documents this and note...

CVE-2017-0756

CVE-2017-0756 is a remote code execution vulnerability in Android’s Media Framework (libstagefright) affecting Android versions 4.4.4 through 7.1.2. The Android bulletin notes this as a critical issue in the Media Framework, with impact described as execution of arbitrary code in a privileged con...

CVE-2017-0768

CVE-2017-0768 is an Elevation of Privilege (EoP) vulnerability in Android’s media framework (libeffects) affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0. The issue enables a local attacker to gain privileged code execution within a privileged process, with p...

CVE-2017-13255

CVE-2017-13255 affects the Android System component; an out-of-bounds write in process_service_attr_req within sdp_server.c can lead to remote code execution with no privileges and no user interaction. Affected Android versions range from 5.1.1 through 8.1 (per Android bulletin listing under Syst...

CVE-2017-9714

CVE-2017-9714 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels. The root cause is an out-of-bounds memory access in limCheckRxRSNIeMatch when an incorrect RSNIE is received in an association request. The CVE is listed with a NVD CVSS v3.0 base score of 7...

CVE-2018-6268

CVE-2018-6268 affects NVIDIA Tegra libnvmmlite_video.so, where a use-after-free can cause DoS or privilege escalation. Connected NVIDIA bulletins tie this to Jetson TX1/TX2 Linux for Tegra (L4T) and list R28.3 as the updated release to address multiple related flaws, including 2018-6268. Affected...

CVE-2018-9515

CVE-2018-9515 is a kernel vulnerability affecting the Android kernel sdcardfs code (inode.c) where memory corruption can occur due to improper locking, enabling local privilege escalation without user interaction. The issue is categorized as a high-severity Elevation of Privilege (EoP) in the 201...

CVE-2019-2044

CVE-2019-2044 affects the Android Media framework, specifically in MakeMP>G4VideoCodecSpecificData within APacketSource.cpp. The issue is an out-of-bounds write caused by an incorrect bounds check, which could allow a remote attacker to execute code in the context of a privileged process in th...

CVE-2019-2086

CVE-2019-2086 affects the Android 10 libxaac library, with an out-of-bounds write due to a missing bounds check. This could enable remote code execution and requires user interaction to exploit. The issue is documented across multiple sources (NVD entry and Red Hat advisory) as a Libxaac/Android-...

CVE-2019-9233

CVE-2019-9233 affects wpa_supplicant_8 on Android-10. Root cause: an out-of-bounds read due to an incorrect bounds check, enabling remote information disclosure without privileges and without user interaction. The impact is info disclosure; no exploit details or in-the-wild status are provided in...

CVE-2019-9335

CVE-2019-9335 is described in connected documents as an information-disclosure vulnerability in Android 10, stemming from uninitialized data in libavc. It could allow remote information disclosure with no additional execution privileges, and exploitation requires user interaction. The provided so...

CVE-2019-9416

CVE-2019-9416 concerns an information disclosure in Android’s libstagefright caused by uninitialized data. Affected software: Android 10; vulnerable component: libstagefright. Root cause: uninitialized data leading to remote information disclosure. As per the entry, exploitation requires user int...

CVE-2020-0100

The CVE-2020-0100 entry concerns an out-of-bounds read in IHDCP.cpp during onTransact, allowing local information disclosure without extra privileges in Android 8.0/8.1. Root cause is incorrect error handling that can expose data from a privileged process; exploitation is local and does not requi...

CVE-2021-0538

CVE-2021-0538 affects Android 11 via EmergencyCallbackModeExitDialog.java, where a tapjacking/overlay attack can exit emergency callback mode, enabling local elevation of privilege with user interaction required. Documented impact: local EoP with high likelihood of access via exposed UI flow; CVS...

CVE-2021-0544

CVE-2021-0544 affects Android 11 and is described across multiple sources as an out-of-bounds write in phNxpNciHal.cc (function: phNxpNciHal_print_res_status) caused by a missing bounds check. The vulnerability can lead to local elevation of privilege with System execution privileges required, an...

CVE-2021-0546

The CVE-2021-0546 issue affects Google Android 11 in the phNxpNciHal_print_res_status path within phNxpNciHal.cc, caused by an out-of-bounds write due to a missing bounds check. This leads to local elevation of privilege with System execution privileges required and does not require user interact...

CVE-2021-0559

CVE-2021-0559 is a reported out-of-bounds read in Lag_max of p_ol_wgh.cpp for Android 11, allowing remote information disclosure with user interaction required. Multiple sources (NVD entry, Red Hat advisory, CNVD, NCSC, and OSV) describe the same issue with the bound-check failure in Lag_max; exp...

CVE-2021-0571

CVE-2021-0571 affects Android 11, specifically the code paths in ActivityTaskManagerService.startActivity() and AppTaskImpl.startActivity() , where a permissions bypass can allow access to restricted activities. The Red Hat/UK and CVE listings corroborate an Elevation of Privilege (EoP) risk with...

CVE-2021-0989

CVE-2021-0989 describes a local information-disclosure in Android 12 via hasManageOngoingCallsPermission in TelecomServiceImpl.java, allowing an app to determine if another app is installed without query permissions. This is caused by a side-channel disclosure and requires no user interaction. Th...

CVE-2021-1016

The CVE-2021-1016 issue affects Android 12 and points to UsbPermissionActivity.java. A tapjacking/overlay flaw could grant USB access to an app without informed user consent, enabling local privilege escalation with user interaction required for exploitation. The vulnerability is described across...

CVE-2021-1028

CVE-2021-1028 : In Android 12, the vulnerability is in SurfaceFlinger.cpp within setClientStateLocked, where a use-after-free can trigger an out-of-bounds write. This leads to local privilege escalation with no extra execution privileges required and no user interaction. Public documents consiste...

CVE-2021-26687

The CVE-2021-26687 entry concerns LG mobile devices running Android 8–10 where the HostnameVerified default is mishandled in preloaded applications. Connected sources confirm the affected platform (LG Android devices) and the root cause: mishandling of HostnameVerified in preloaded apps, which ca...

CVE-2022-20253

CVE-2022-20253 affects the Android 13 Bluetooth stack. The issue is a cleanup failure caused by an uncaught exception that could enable remote denial of service without additional privileges or user interaction. Root cause is an uncaught exception in Bluetooth handling leading to DoS. Mitigation ...

CVE-2022-20261

The CVE-2022-20261 entry concerns the Android LocationManager component. A missing permission check could allow an attacker to obtain location information, causing local information disclosure. Exploitation requires System privileges but not user interaction, with a local attack vector. Affected ...

CVE-2022-21769

The CVE-2022-21769 issue affects the CCCI component and is caused by a missing bounds check that enables an out-of-bounds read. This could allow local information disclosure with system-privilege execution requirements (no user interaction). Public references in Red Hat and NVD describe the same ...

CVE-2022-30710

CVE-2022-30710 affects Samsung Mobile (Android) RemoteViews. The vulnerability is described as an improper validation in RemoteViews prior to the SMR Jun-2022 Release 1, enabling attackers to launch certain activities. Public sources (NVD, Red Hat, CNVD) align on elevation/privilege aspects, with...

CVE-2022-32589

The CVE-2022-32589 entry concerns a denial-of-service issue in the Wi‑Fi driver related to improper resource release in MediaTek-based implementations. Affected component is the Wi‑Fi driver; root cause is improper resource handling leading to a remote DoS without requiring privileges or user int...

CVE-2022-32618

Summary of CVE-2022-32618 : A miscalculation of buffer size in the Type-C functionality can cause an out-of-bounds write. This vulnerability could enable local privilege escalation on devices with physical access and does not require user interaction. The issue is described across multiple source...

CVE-2022-33685

Samsung Wearable Manager Service on Samsung mobile devices is affected by an unprotected dynamic receiver vulnerability, allowing attackers to launch arbitrary activity and access sensitive information. The issue stems from an unprotected receiver in the Wearable Manager and is mitigated by the S...

CVE-2022-39903

CVE-2022-39903 describes an improper access control vulnerability in Samsung RCS calls prior to SMR Dec-2022 Release 1. The issue allows local attackers to access the RCS incoming call number (information disclosure). Affected component: RCS call handling on Samsung mobile devices; root cause: im...

CVE-2022-47343

In CVE-2022-47343 , the issue is a missing permission check in engineermode services , enabling local denial of service. The provided documents confirm the affected area but do not specify product versions, exploit details, or concrete remediation steps. Exploitation status and patches are not de...

CVE-2022-47345

CVE-2022-47345 affects engineermode services due to a missing permission check, enabling local denial of service. The included metrics indicate a CVSS v3.1 base score of 5.5 (LOCAL vector: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Exploitation status is not detailed in the provided documents, and no ...

CVE-2023-20790

The CVE-2023-20790 entry maps to MediaTek devices with an nvram module vulnerability caused by a missing bounds check, leading to an out-of-bounds write. This can result in local information disclosure and, per the description, requires system execution privileges with no user interaction. Public...

CVE-2023-20821

CVE-2023-20821 concerns an out-of-bounds write in nvram due to a missing bounds check in MediaTek-based hardware. The underlying issue can allow local escalation of privilege with System execution privileges required, and exploitation does not require user interaction. Reported remediation refere...

CVE-2023-20972

CVE-2023-20972 affects Android 13. The issue is in btm_vendor_specific_evt within btm_devctl.cc, where a missing bounds check enables an out-of-bounds read that could cause local information disclosure. Exploitation is reported as requiring System privileges with LOCAL attack vector and no user i...

CVE-2023-20988

CVE-2023-20988 affects Android-13 Bluetooth stack via function btm_read_rssi_complete in btm_acl.cc, where a missing bounds check allows an out-of-bounds read that could lead to local information disclosure. Exploitation is described as requiring System execution privileges with no user interacti...

CVE-2023-20996

CVE-2023-20996 affects Android 13 (Pixel devices) and is described as a DoS via an input validation flaw that can trigger a persistent reboot loop. The vulnerability enables local denial of service with no user interaction required and requires user privileges. Public details confirm the issue is...

CVE-2023-21010

The CVE-2023-21010 issue affects the Android p2p_iface.cpp component (Android 13 and earlier), where a missing bounds check can cause an out-of-bounds read. This creates a potential local information disclosure vulnerability that, per the documents, could enable System-level execution privileges ...

CVE-2023-21038

CVE-2023-21038 affects the Android kernel driver Cs40l2x (cs40l2x_cp_trigger_queue_show). The vulnerability is a use-after-free that enables an out-of-bounds write, yielding local escalation of privilege with SYSTEM privileges required. Exploitation is local and does not require user interaction....