CVE-2022-42534

CVE-2022-42534 affects the Android kernel component, specifically the trusty_ffa_mem_reclaim path in shared-mem-smcall.c. The issue is a privilege-escalation vulnerability caused by improper input validation, enabling local elevation of privilege with no additional execution privileges required, ...

CVE-2023-21005

CVE-2023-21005 affects Android 13, specifically the Transcode Permission Controllers. The root cause is a missing permission check in getAvailabilityStatus, enabling a possible local escalation of privilege with no additional execution privileges and no user interaction required. Public reference...

CVE-2022-30717

The CVE-2022-30717 entry concerns Samsung AR Emoji prior to SMR Jun-2022 Release 1, with an underlying issue described as an improper caller check. The vulnerability allows untrusted applications to access certain camera functions via deeplink, presenting a remote-like risk without user interacti...

CVE-2022-32631

CVE-2022-32631 concerns MediaTek-based Wi‑Fi stacks with an outwardly stated vulnerability: an out-of-bounds write caused by improper input validation. The consequence is local escalation of privilege with SYSTEM execution privileges required, and exploitation reportedly does not require user int...

CVE-2022-33718

CVE-2022-33718 concerns Samsung devices with the Wi‑Fi Service before SMR AUG-2022 Release 1. The issue is an improper access control that lets untrusted applications manipulate the list of apps allowed to use mobile data. Impacted component is the Wi‑Fi Service; risk is that untrusted apps could...

CVE-2023-20730

CVE-2023-20730 concerns the MediaTek WLAN module, where a missing bounds check enables a possible out-of-bounds read. The result is local information disclosure, with system execution privileges required for exploitation and no user interaction needed. Publicly documented patch: ALPS07573552 (Iss...

CVE-2023-20742

CVE-2023-20742 affects the ril module in MediaTek devices, with an out-of-bounds read caused by a missing bounds check. This could lead to local information disclosure and, potentially, system execution privileges, with no user interaction required. The vulnerability is documented across multiple...

CVE-2023-20805

The CVE-2023-20805 entry concerns the imgsys component. A missing bounds check leads to an out-of-bounds write, enabling local escalation of privileges with System execution privileges required. Exploitation reportedly does not require user interaction. A patch is available (Patch ID: ALPS0719977...

CVE-2023-21007

The CVE-2023-21007 entry affects Android 13 and is caused by a missing bounds check in p2p_iface.cpp, resulting in an out-of-bounds read that can lead to local information disclosure with system privileges. The issue is exploitable locally, with no user interaction required, and is tied to the p2...

CVE-2023-21008

Summary : CVE-2023-21008 affects Android 13 with code in p2p_iface.cpp. The root cause is a missing bounds check causing an out-of-bounds read, leading to local information disclosure with system privileges required. Exploitation is described as requiring local access and no user interaction. Imp...

CVE-2023-21039

CVE-2023-21039 involves an out-of-bounds read in the Android kernel component Dumpstate.cpp (dumpstateBoard). The root cause is an incorrect bounds check, allowing a local information disclosure with SYSTEM privileges required. Exploitation details (vectors, exploits) are not documented in the pr...

CVE-2023-21073

CVE-2023-21073 affects the Android kernel component where the function rtt_unpack_xtlv_cbfn in dhd_rtt.c is vulnerable. The issue is a possible out-of-bounds write caused by a buffer overflow, which could enable local escalation of privilege with System execution privileges required. User interac...

CVE-2023-21079

CVE-2023-21079 affects the Android kernel component related to the dhd_rtt.c function, specifically in the routine named rtt_unpack_xtlv_cbfn . The issue is a heap buffer overflow that can cause an out-of-bounds write. The published descriptions consistently warn of local escalation of privilege ...

CVE-2023-21147

CVE-2023-21147 (Android kernel) involves a use-after-free in lwis_i2c_device_disable within lwis_device_i2c.c. The underlying logic error can lead to local elevation of privilege with no extra execution privileges required, and exploitation is described as local with no user interaction. Multiple...

CVE-2023-21169

CVE-2023-21169 affects Android 13 and relates to an out-of-bounds read in inviteInternal of p2p_iface.cpp caused by a missing bounds check. The vulnerability can lead to local information disclosure with System execution privileges required; exploitation does not require user interaction. The ava...

CVE-2023-21170

CVE-2023-21170 affects Android 13 devices (notably Pixel). Root cause: a missing bounds check in the function executeSetClientTarget inside ComposerCommandEngine.h, causing a possible out-of-bounds read. Impact: local information disclosure with system privileges required; exploitation does not r...

CVE-2023-21174

CVE-2023-21174 is a vulnerability in Android 13 affecting the isPageSearchEnabled function of BillingCycleSettings.java. The issue allows a guest user to bypass permissions and change data limits, resulting in local privilege escalation with no additional execution privileges and with no user int...

CVE-2023-21196

CVE-2023-21196 affects Android 13 with a flaw in btm_ble_batchscan_filter_track_adv_vse_cback (btm_ble_batchscan.cc). A missing bounds check causes an out-of-bounds read, enabling local information disclosure on the Bluetooth server and requiring System-level privileges for exploitation; no user ...

CVE-2023-21208

CVE-2023-21208 affects Android 13 devices with the vulnerable STA interface implementation (sta_iface.cpp). The issue is an out-of-bounds read caused by improper input validation in setCountryCodeInternal, leading to local information disclosure with system-level execution privileges possible. Ex...

CVE-2023-32875

CVE-2023-32875 affects MediaTek platforms via the keyInstall function. The root cause is a missing bounds check in keyInstall, enabling local information disclosure and requiring System privileges for exploitation; no user interaction is needed. The CVE entry cites Patch ID ALPS08308607 and Issue...

CVE-2023-42642

CVE-2023-42642 affects the validationtools component, where a missing permission check could allow local information disclosure without extra privileges. The vulnerability is documented across multiple feeds (NVD/RH/CVE lists) with a MEDIUM base score (AV:L, AC:L, PR:L, UI:N, C:H/I:N/A:N) and loc...

CVE-2023-44121

CVE-2023-44121 describes an intent redirection in LG ThinQ Service (com.lge.lms2), specifically in NotificationManager.java, exploitable by a third‑party app via a broadcast with action com.lge.lms.things.notification.ACTION. The vulnerability is dangerous because LG ThinQ Service is a system app...

CVE-2024-20036

In vdec, there is a possible permission bypass due to a permissions bypass. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08509508; Issue ID: ALPS08509508.

CVE-2024-20085

CVE-2024-20085 concerns MediaTek Power component vulnerability: a missing bounds check in the power handling can trigger an out-of-bounds read, enabling local information disclosure and potentially system-level execution privileges. Affected: MediaTek chips (power domain); root cause: out-of-boun...

CVE-2024-32923

there is a possible cellular denial of service due to a logic error in the code. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-47020

CVE-2024-47020 affects Google Pixel devices running Android prior to the 2024-10-05 patch level, with the vulnerability classified as Information Disclosure in the ABL component (A-331966488). Public descriptors identify an information disclosure bug in ABL on Pixel hardware, but the available do...

CVE-2024-47021

CVE-2024-47021 affects Google Pixel devices and stems from a missing bounds check in sms_ExtractCbLanguage within sms_CellBroadcast.c. The vulnerability enables a potential out-of-bounds read, leading to remote information disclosure without requiring user interaction or additional privileges. Th...

CVE-2025-0082

CVE-2025-0082 describes an information disclosure in Google Android involving StatusHint.java and TelecomServiceImpl.java. The root cause is a confused deputy that could allow an attacker to reveal images across users, resulting in local information disclosure without extra execution privileges. ...

CVE-2025-20650

CVE-2025-20650: A possible out-of-bounds write due to a missing bounds check could allow local elevation of privilege on affected MediaTek devices when an attacker has physical access. The vulnerability requires no additional execution privileges but does require user interaction according to the...

CVE-2025-20653

In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291064; Issue I...

CVE-2025-22407

CVE-2025-22407 is a use-after-free in the Android HID (hidd) component, specifically in hidd_check_config_done of hidd_conn.cc, enabling potential arbitrary code execution and local information disclosure without extra privileges or user interaction. The vulnerability is discussed across multiple...

CVE-2026-0041

In the connected disclosures, CVE-2026-0041 is tied to an integer overflow in multiple functions of ubsan_throwing_runtime.cpp, causing a UBSan failure that can lead to remote denial of service without extra privileges or user interaction. PT-2026-4712 explicitly flags Chromium as affected, notin...

CVE-2026-0076

CVE-2026-0076 describes an out-of-bounds read in validateNode of ResourceTypes.cpp, caused by an incorrect bounds check. This could enable local privilege escalation with no user interaction, per the included descriptions. Connected sources repeat this detail across multiple feeds (NVD/EUVD) with...

CVE-2011-1149

CVE-2011-1149 : Android versions before 2.3 expose the system property space, allowing local apps to bypass the sandbox and gain privileges via ashmem usage and ASHMEM_SET_PROT_MASK. The issue enables local privilege escalation, illustrated by references to psneuter and KillingInTheNameOf; exploi...

CVE-2011-3918

The CVE-2011-3918 entry concerns the Android Zygote process: on Android 4.0.3 and earlier, Zygote accepts fork requests from processes with arbitrary UIDs, enabling a crafted app to cause a denial-of-service reboot loop. The issue is described in multiple sources (e.g., NVD/Red Hat entries) and i...

CVE-2012-6301

The CVE-2012-6301 issue affects Android 4.0.3’s Stock/Browser component. A remote attacker can trigger a denial of service (application crash) by presenting a crafted market: URI in the SRC attribute of an IFRAME element. Multiple connected sources corroborate the vulnerability and describe its i...

CVE-2015-6637

The CVE-2015-6637 issue is an elevation of privilege in the MediaTek misc-sd kernel driver used by Android prior to 5.1.1 LMY49F and 6.0 prior to 2016-01-01. A crafted application could exploit the driver to execute code with kernel privileges. Public sources describe it as a local privilege esca...

CVE-2016-0805

CVE-2016-0805 affects Qualcomm ARM kernels, specifically the Qualcomm Performance Module in Android. The issue resides in the kernel function get_krait_evtinfo, which returns an index into an array used by other kernel functions; crafted input can generate a malicious index and cause a buffer ove...

CVE-2016-5856

Technical details for CVE-2016-5856 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-0422

CVE-2017-0422 is a DoS in Android’s Bionic DNS that can be triggered by a crafted network packet to cause a device hang or reboot. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The vulnerability stems from the Bionic DNS component and is remote in scope (netwo...

CVE-2017-0429

CVE-2017-0429 is an elevation-of-privilege vulnerability in the NVIDIA kernel driver’s i2c-hid component, enabling a local attacker to write arbitrary values to kernel memory and potentially execute code with kernel privileges. Public descriptions tie the issue to the NVIDIA kernel driver on Andr...

CVE-2017-0440

CVE-2017-0440 describes an elevation-of-privilege flaw in the Qualcomm Wi‑Fi driver for Android kernels 3.10 and 3.18. A local malicious app could exploit it to execute code in the kernel context, after compromising a privileged process. The vulnerability is classified as High severity in the pub...

CVE-2017-0745

CVE-2017-0745 is a remote code execution vulnerability in the Android media framework, specifically the avc decoder. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The connected documents consistently describe the issue as a media-framework fault enablin...

CVE-2017-0813

Summary of CVE-2017-0813 : A denial-of-service vulnerability exists in the Android media framework (libstagefright) affecting Android versions 7.0, 7.1.1, and 7.1.2. The issue is identified as a DoS in the Media framework component; the provided documents do not specify the root cause details bey...

CVE-2017-0834

CVE-2017-0834 is a remote code execution vulnerability in Android’s media framework (libmpeg2) affecting Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0 (Android ID: A-63125953). The connected documents corroborate RCE in the Media Framework and list the affected versions; no explicit exp...

CVE-2017-13208

CVE-2017-13208 affects Android via libnetutils/packet.c receive_packet, enabling a possible remote code execution through an out-of-bounds write on DHCP responses. Impacted Android versions: 5.1.1–8.1. Vector: network; no user interaction required; no additional privileges needed. The Android Sec...

CVE-2017-13211

CVE-2017-13211 affects Android 8.0. The issue is in btif_ble_scanner.cc (function bta_scan_results_cb_impl) where a flood of repeated BLE scan results can exhaust resources, enabling remote DoS of a critical system process with no privileges and no user interaction. The Android bulletin notes tha...

CVE-2019-9247

CVE-2019-9247 affects the Android 10 AAC Codec component, stemming from a missing variable initialization that can lead to remote information disclosure. According to NVD metadata, the CVSS v3.1 base score is 6.5 (Medium) with NETWORK attack vector, LOW complexity, no privileges required, but use...

CVE-2019-9421

CVE-2019-9421 affects the Android framework library libandroidfw, with an out-of-bounds read caused by an integer overflow . The issue enables a potential local information disclosure vulnerability and, per the sources, requires some user interaction to exploit. The vulnerability entry lists affe...

CVE-2020-26606

CVE-2020-26606 affects Samsung mobile devices running O(8.x) through R(11.0). The issue allows an attacker to access Secure Folder content via a debugging command. The NVD entry cites CVSS 3.1 base score 7.5 (High) with Network attack vector and no privileges required; confidentiality impact High...