CVE-2022-39879

CVE-2022-39879 concerns an improper authorization vulnerability in Samsung CallBGProvider prior to SMR Nov-2022 Release 1. A local attacker can exploit this to grant permissions for accessing information tied to the device’s phone UID. The issue is documented across multiple sources as affecting ...

CVE-2023-20827

CVE-2023-20827 affects the ims service, where a race condition can cause memory corruption leading to local privilege escalation with SYSTEM rights. Exploitation does not require user interaction, and a patch is identified (ALPS07937105). The available sources consistently describe the issue as a...

CVE-2023-21043

CVE-2023-21043 affects Android kernel components with memory corruption via a use-after-free, enabling local escalation to System privileges. Exploitation details, affected versions, and patch status are not provided in the connected documents; the description remains TBD. If pursuing remediation...

CVE-2023-21073

CVE-2023-21073 affects the Android kernel component where the function rtt_unpack_xtlv_cbfn in dhd_rtt.c is vulnerable. The issue is a possible out-of-bounds write caused by a buffer overflow, which could enable local escalation of privilege with System execution privileges required. User interac...

CVE-2023-21125

CVE-2023-21125 affects Google Android Bluetooth stack: the function btif_hh_hsdata_rpt_copy_cb in bta_hh.cc suffers a memory corruption due to a use-after-free, enabling local privilege escalation over Bluetooth with no user interaction. The vulnerability is adjacent-network exploitable as per CV...

CVE-2023-21173

CVE-2023-21173 affects Android 13 where multiple methods in DataUsageList.java can reveal admin network activity due to a missing permission check, enabling local information disclosure with no extra privileges or user interaction. The vulnerability is documented across multiple feeds (NVD, Red H...

CVE-2023-21193

CVE-2023-21193 is a vulnerability in Android 13 where the VideoFrame component in VideoFrame.h can abort due to an integer overflow, potentially enabling remote information disclosure without user interaction. The CVE is listed in multiple sources (NVD, Red Hat, PRION, OSV) with the same basic de...

CVE-2023-21196

CVE-2023-21196 affects Android 13 with a flaw in btm_ble_batchscan_filter_track_adv_vse_cback (btm_ble_batchscan.cc). A missing bounds check causes an out-of-bounds read, enabling local information disclosure on the Bluetooth server and requiring System-level privileges for exploitation; no user ...

CVE-2023-21211

CVE-2023-21211 affects Android 13 and is described across multiple sources as a vulnerability in multiple files that enables an out-of-bounds read caused by a heap buffer overflow. The impact is local information disclosure with no additional execution privileges required, and exploitation does n...

CVE-2023-21222

CVE-2023-21222 : In the Android kernel, the vulnerability is in the function that parses device tree data (storage.c: load_dt_data). A missing bounds check can trigger an out-of-bounds write, enabling local escalation of privilege with System execution privileges required. User interaction is not...

CVE-2023-21319

CVE-2023-21319 affects Android (UsageStatsService) and describes a side-channel information disclosure that could allow reading installed 3rd‑party apps. The root cause is local information disclosure without additional privileges or user interaction. The Android 14 Security Release Notes list th...

CVE-2023-42642

CVE-2023-42642 affects the validationtools component, where a missing permission check could allow local information disclosure without extra privileges. The vulnerability is documented across multiple feeds (NVD/RH/CVE lists) with a MEDIUM base score (AV:L, AC:L, PR:L, UI:N, C:H/I:N/A:N) and loc...

CVE-2024-20036

CVE-2024-20036 describes a permission bypass in the vdec component that may allow local information disclosure with System privileges. Affected: vdec (details across Red Hat, NVD/NIST records). Impact per metrics: confidentiality impact High; integrity/availability not affected; attack vector Loc...

CVE-2024-20053

CVE-2024-20053 affects the flashc component. The vulnerability is an out-of-bounds write caused by an uncaught exception, enabling local escalation of privileges with System-level execution privileges required. User interaction is not required. A patch is referenced (ALPS08541757; ALPS08541764). ...

CVE-2024-20054

CVE-2024-20054 concerns a missing bounds check in the gnss component, enabling local privilege escalation with System execution privileges required and no user interaction. The vulnerability is associated with MediaTek/gnss implementations, with a patch identified as ALPS08580200 (Issue ID: ALPS0...

CVE-2024-32923

CVE-2024-32923 concerns Google Pixel devices. The issue is a logic error in the Modem component that can cause a denial of service. It can be triggered remotely with no user interaction and requires no additional privileges (attack vector: LOCAL; impact: Availability. Severity: High per Pixel bul...

CVE-2024-47012

CVE-2024-47012 affects Google Pixel devices via the mm_GetMobileIdIndexForNsUpdate path in mm_GmmPduCodec.c, where an incorrect bounds check can cause an out-of-bounds write. This is described as enabling local escalation of privilege with no extra execution privileges or user interaction require...

CVE-2024-47019

CVE-2024-47019 affects Google Pixel devices via a buffer/read bounds issue in ProtocolEmbmsSaiListAdapter::Init() inside protocolembmsadapter.cpp. The vulnerability is an out-of-bounds read caused by a missing bounds check, potentially leading to local information disclosure and baseband firmware...

CVE-2024-47021

CVE-2024-47021 affects Google Pixel devices and stems from a missing bounds check in sms_ExtractCbLanguage within sms_CellBroadcast.c. The vulnerability enables a potential out-of-bounds read, leading to remote information disclosure without requiring user interaction or additional privileges. Th...

CVE-2025-22408

CVE-2025-22408 affects Google Android in the rfc_check_send_cmd function of rfc_utils.cc, caused by a use-after-free; this enables remote code execution with no extra privileges and without user interaction. Public documents confirm the issue as a System-level vulnerability in Android, with CVSS ...

CVE-2025-32318

CVE-2025-32318: A heap buffer overflow in Skia can cause an out-of-bounds write, enabling remote elevation of privilege with no user interaction. CVSSv3.1: 8.8 (Network, Low evidence required, Privileges Low, Confidentiality/Integrity/Availability High). Android 16 security notes classify this en...

CVE-2014-7915

The CVE relates to an integer overflow in SampleTable.cpp of Android’s libstagefright (Android before 5.0.0; some references extend to related 4.x/5.x lines). The root cause is an integer overflow in SampleTable.cpp in libstagefright, leading to unspecified impact per early descriptions, with fol...

CVE-2014-7951

The CVE-2014-7951 entry details a Directory traversal vulnerability in Android's adb (Android 4.0.4) where an attacker with physical access and a direct connection can write to arbitrary system-owned files by crafting tar headers with a .. sequence. Connected documents (including exploit examples...

CVE-2015-1530

The CVE-2015-1530 issue affects Android’s media/libmedia/IAudioPolicyService.cpp prior to Android 5.1. It describes an integer overflow in BnAudioPolicyService::onTransact that can be exploited by a crafted application with an invalid array size to either execute arbitrary code with media_server ...

CVE-2016-1503

CVE-2016-1503 affects dhcpcd prior to version 6.10.0 (used in Android 4.x/5.x/6.x and other products). The issue is a mismanagement of DHCP option lengths in the print_option path, leading to a heap-based buffer overflow that can enable remote code execution or cause a denial of service via malfo...

CVE-2016-2059

The CVE-2016-2059 issue affects the Linux kernel IPC router module (msm_ipc_router_bind_control_port) in the IPC router core for kernel 3.x used in Qualcomm QuIC Android MSM devices. The vulnerability arises because the function does not verify that a port is a client port, enabling a local attac...

CVE-2017-0440

CVE-2017-0440 describes an elevation-of-privilege flaw in the Qualcomm Wi‑Fi driver for Android kernels 3.10 and 3.18. A local malicious app could exploit it to execute code in the kernel context, after compromising a privileged process. The vulnerability is classified as High severity in the pub...

CVE-2017-0708

CVE-2017-0708 is an information-disclosure issue in the HTC sound driver (Android kernel). The HTC component entry flags it as an Information Disclosure (ID) vulnerability, Moderate severity, within the Android stack. The Android bulletin for 2017-07-05 lists this HTC sound-driver CVE under the H...

CVE-2017-0718

CVE-2017-0718 is a remote code execution flaw in Android’s media framework MPEG-2 decoder impacting Android 6.0, 6.0.1, 7.0, 7.1.1 and 7.1.2. Public detail confirms it as a Media framework RCE issue; root cause is in the MPEG-2 decoder path. The Android Bulletin (Aug 2017) documents this and note...

CVE-2017-0756

CVE-2017-0756 is a remote code execution vulnerability in Android’s Media Framework (libstagefright) affecting Android versions 4.4.4 through 7.1.2. The Android bulletin notes this as a critical issue in the Media Framework, with impact described as execution of arbitrary code in a privileged con...

CVE-2017-0768

CVE-2017-0768 is an Elevation of Privilege (EoP) vulnerability in Android’s media framework (libeffects) affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0. The issue enables a local attacker to gain privileged code execution within a privileged process, with p...

CVE-2017-13211

CVE-2017-13211 affects Android 8.0. The issue is in btif_ble_scanner.cc (function bta_scan_results_cb_impl) where a flood of repeated BLE scan results can exhaust resources, enabling remote DoS of a critical system process with no privileges and no user interaction. The Android bulletin notes tha...

CVE-2017-13292

CVE-2017-13292 is a remote code execution vulnerability in the Broadcom bcmdhd Wi‑Fi driver affecting Android; root cause is an out-of-bounds write in wl_get_assoc_ies within wl_cfg80211.c due to an incorrect bounds check. This could allow an attacker to execute arbitrary code in the context of a...

CVE-2018-9380

CVE-2018-9380 affects Google Pixel devices via out-of-bounds write in l2c_lcc_proc_pdu() within l2c_fcr.cc, caused by improper input validation. The vulnerability can enable remote privilege escalation with no extra execution privileges required, and exploitation requires user interaction. Public...

CVE-2019-9398

CVE-2019-9398 affects the Android 10 Bluetooth stack. The issue is a missing bounds check in Bluetooth that can allow a remote attacker to cause a denial of service without user interaction. Impact is a DoS, with network-based exploitation. Exploitation status is not described in the provided mat...

CVE-2019-9421

CVE-2019-9421 affects the Android framework library libandroidfw, with an out-of-bounds read caused by an integer overflow . The issue enables a potential local information disclosure vulnerability and, per the sources, requires some user interaction to exploit. The vulnerability entry lists affe...

CVE-2019-9432

CVE-2019-9432 refers to an out-of-bounds read in Bluetooth on Android 10, caused by improper input validation. The issue can lead to remote information disclosure from the Bluetooth server without requiring user interaction or privileges. Documents confirm the affected platform as Android 10 and ...

CVE-2020-0007

CVE-2020-0007 affects Android 8.0–10 in the System component; the root cause is information disclosure from uninitialized data in Sensor.cpp:flattenString8, leading to local heap memory disclosure with no user interaction. Public details confirm the issue and affected versions; no remediation ver...

CVE-2020-10855

CVE-2020-10855 affects Samsung mobile devices running Android P (9.0). The vulnerability allows bypass of Factory Reset Protection (FRP) via AppTray, as described in multiple sources (Samsung FRP reference SVE-2019-16192). The core issue is FRP bypass through AppTray on Samsung firmware identifie...

CVE-2020-26602

CVE-2020-26602 affects Samsung mobile devices (EthernetNetwork component) on Android 8.1–11.0. The issue allows an unprivileged process with PendingIntent to access the SD card. This can enable unintended data exposure and potential abuse of card access through networked interaction. Root cause: ...

CVE-2020-26606

CVE-2020-26606 affects Samsung mobile devices running O(8.x) through R(11.0). The issue allows an attacker to access Secure Folder content via a debugging command. The NVD entry cites CVSS 3.1 base score 7.5 (High) with Network attack vector and no privileges required; confidentiality impact High...

CVE-2021-0545

CVE-2021-0545 affects Google Android on Android 11. The issue occurs in the NFC subsystem, specifically in phNxpNciHal_print_res_status within phNxpNciHal.cc, where a missing bounds check enables an out-of-bounds write. This could allow local escalation of privilege on the NFC server with system ...

CVE-2021-1000

The CVE-2021-1000 entry affects Android 12L and points to the ConnectedDevicesSliceProvider.java createBluetoothDeviceSlice, where an unsafe PendingIntent allows a permission bypass. This enables local privilege escalation with no extra execution privileges required, and no user interaction is ne...

CVE-2021-1008

CVE-2021-1008 affects Android 12; the issue is in addSubInfo of SubscriptionController.java, described as a logic error that could force a factory reset, yielding local denial of service with system privileges. Exploitation is stated as possible without user interaction. Connected documents corro...

CVE-2021-1044

CVE-2021-1044 affects the Android kernel component in the function eicOpsDecryptAes128Gcm of acropora/app/identity/identity_support.c , where a missing bounds check enables an out-of-bounds write. This can lead to local elevation of privilege with no extra execution privileges or user interaction...

CVE-2021-1045

CVE-2021-1045 is acknowledged in multiple feeds as affecting the Android kernel component Titan‑M used in Google Pixel devices. The Pixel Update Bulletin groups CVE-2021-1045 under Pixel → Titan‑M with severity High, indicating a kernel‑level issue likely resolved in the 2021‑11‑05 patch level. T...

CVE-2021-39651

Technical details are not publicly available in the provided documents for CVE-2021-39651; the connected sources describe a placeholder TBD vulnerability without concrete affected products or fixes. Monitor for updates as information remains unavailable.

CVE-2022-20245

CVE-2022-20245 affects Android 13 and involves the WindowManager component. An insecure default value in WindowManager may allow a recorded lock-screen capture, leading to local information disclosure. Exploitation requires user interaction, and no additional execution privileges are needed. The ...

CVE-2022-20248

CVE-2022-20248 affects Android 13 where a logic error in the Settings code can bypass DISALLOW_CONFIG_WIFI, enabling a local escalation of privilege to connect to an open network without user interaction. Affected component: Settings; impact: local Privilege Elevation with High confidentiality/in...

CVE-2022-20252

CVE-2022-20252 is a vulnerability in Android 13’s PackageManager where an attacker can deduce whether an app is installed without query permissions due to a side-channel information disclosure. This enables local information disclosure with no extra execution privileges required; exploitation req...