CVE-2022-20314

CVE-2022-20314 affects Google Android KeyChain on Android-13. The issue is a spoof keychain chooser activity request caused by improper input validation in KeyChain, enabling local escalation of privilege with System execution privileges required. Exploitation requires no user interaction. The An...

CVE-2022-20329

The CVE-2022-20329 entry concerns Android 13 where Wifi can be enabled without required permissions due to a missing permission check. Root cause: a permission-check gap in the Wifi pathway. Impact: local escalation of privilege without additional execution privileges, with exploitation described...

CVE-2022-21748

CVE-2022-21748 affects MediaTek telephony on MediaTek chips. The root cause is a missing permission check in the telephony path, enabling local information disclosure. Exploitation would require user interaction, with the attacker already at User execution privileges; no remote access. Patch ALPS...

CVE-2022-21786

CVE-2022-21786 describes a memory corruption vulnerability in MediaTek’s audio DSP caused by improper type casting. The issue can lead to local privilege escalation with system execution privileges required, and does not require user interaction. Affected component: audio DSP type conversion logi...

CVE-2022-26433

The CVE-2022-26433 entry concerns MediaTek mailbox (mailbox controller) with a type-confusion caused out-of-bounds write leading to local privilege escalation to SYSTEM. Affected component: mailbox handling in MediaTek devices; root cause: type confusion resulting in out-of-bounds write (exact co...

CVE-2022-30713

CVE-2022-30713 concerns a vulnerability in Samsung/LSOItemData, where improper validation (and lack of proper authentication logic per CNVD) may allow a local attacker to elevate privileges and initiate certain activities on affected Samsung mobile devices. Evidence across sources indicates the i...

CVE-2022-32595

CVE-2022-32595 affects Widevine with an out-of-bounds read caused by an incorrect bounds check. This vulnerability could lead to local information disclosure; the impact is described as high for confidentiality, with system-level execution privileges needed and no user interaction required. The a...

CVE-2022-32626

CVE-2022-32626 involves an out-of-bounds write caused by an incorrect bounds check in display logic. The vulnerability is reported in MediaTek chips and could enable local escalation of privilege with SYSTEM-level execution privileges; exploitation requires no user interaction per the sources. Th...

CVE-2022-33685

Samsung Wearable Manager Service on Samsung mobile devices is affected by an unprotected dynamic receiver vulnerability, allowing attackers to launch arbitrary activity and access sensitive information. The issue stems from an unprotected receiver in the Wearable Manager and is mitigated by the S...

CVE-2022-33725

The CVE-2022-33725 issue affects Samsung Knox VPN, where a flaw in PendingIntent usage could allow a local attacker to access a content provider with system privileges. Root cause: improper PendingIntent handling within Knox VPN prior to SMR Aug-2022 Release 1. Impact per sources: potential media...

CVE-2023-20618

The CVE-2023-20618 vulnerability affects the MediaTek vcu component, where memory corruption can occur due to improper locking. This can enable local privilege escalation to System execution level without user interaction. The security entry lists Patch ID ALPS07519184 (Issue ALPS07519184) as the...

CVE-2023-20740

The CVE-2023-20740 issue affects the vcu component in certain MediaTek-based devices, caused by a logic error that can trigger memory corruption. This can lead to local escalation of privilege with SYSTEM privileges and does not require user interaction. A patch (ALPS07559819) is referenced as a ...

CVE-2023-20925

CVE-2023-20925 affects the Android kernel, specifically the use-after-free in the PowerSessionManager.cpp function setUclampMinLocked. This memory corruption can lead to local escalation of privilege without extra execution privileges and requires local access, with no user interaction needed. Th...

CVE-2023-21006

CVE-2023-21006 affects Google Pixel/Android 13 where a missing bounds check in the p2p_iface.cpp file allows an out-of-bounds read, leading to local information disclosure with System privileges required. No user interaction is needed. Remediation: apply Android security updates; Pixel bulletin i...

CVE-2023-21153

CVE-2023-21153 affects Android kernel via Do_AIMS_SET_CALL_WAITING in imsservice.cpp, causing an out-of-bounds read due to a missing bounds check. This can allow local escalation of privilege to System level without user interaction. The issue impacts Android kernel components and is associated w...

CVE-2023-21170

CVE-2023-21170 affects Android 13 devices (notably Pixel). Root cause: a missing bounds check in the function executeSetClientTarget inside ComposerCommandEngine.h, causing a possible out-of-bounds read. Impact: local information disclosure with system privileges required; exploitation does not r...

CVE-2023-21174

CVE-2023-21174 is a vulnerability in Android 13 affecting the isPageSearchEnabled function of BillingCycleSettings.java. The issue allows a guest user to bypass permissions and change data limits, resulting in local privilege escalation with no additional execution privileges and with no user int...

CVE-2023-21176

The vulnerability CVE-2023-21176 affects Android 13 via the list_key_entries function in utils.rs, where a path to disable user credentials could exhaust resources, enabling a local DoS with SYSTEM privileges and no user interaction. Exploitation details, affected builds, and official fixes are n...

CVE-2023-21184

CVE-2023-21184 affects Android 13 and is tied to CarrierPrivilegesTracker.java in getCurrentPrivilegedPackagesForAllUsers, where a logic error enables a local privilege bypass with no extra execution privileges and no user interaction required. Public documents consistently describe a permission ...

CVE-2023-21391

CVE-2023-21391 is documented in Android 14 release notes as a DoS affecting the System area, attributed to improper input validation in the Messaging context. The impact is remote denial of service without user interaction or elevated privileges, with a network-based attack vector (AV:N, PR:N, UI...

CVE-2023-32891

CVE-2023-32891 relates to an out-of-bounds write in the bluetooth service caused by improper input validation. Affected component is described as the Bluetooth service (no specific vendor/version in provided text beyond MediaTek-linked sources). The underlying root cause is input validation weakn...

CVE-2023-35694

CVE-2023-35694 corresponds to an out-of-bounds read in DMPixelLogger_ProcessDmCommand within DMPixelLogger.cpp. The issue allows remote information disclosure without extra execution privileges and does not require user interaction. Documents consistently describe a bounds-check omission as the r...

CVE-2024-44100

CVE-2024-44100 relates to information disclosure on Google Pixel devices prior to 2024-10-05, specifically in the modem component (A-299774545). The issue stems from a vulnerability in the Pixel modem that enables leakage of information, with a CVSS v3.1 base score of 7.5 (High). Affected product...

CVE-2025-22407

CVE-2025-22407 is a use-after-free in the Android HID (hidd) component, specifically in hidd_check_config_done of hidd_conn.cc, enabling potential arbitrary code execution and local information disclosure without extra privileges or user interaction. The vulnerability is discussed across multiple...

CVE-2025-48539

CVE-2025-48539: In SendPacketToPeer of acl_arbiter.cc there is a possible out-of-bounds read due to a use-after-free, which could enable remote code execution with no additional privileges and no user interaction. Connected documents identify this as an Android System component issue with high se...

CVE-2011-3918

The CVE-2011-3918 entry concerns the Android Zygote process: on Android 4.0.3 and earlier, Zygote accepts fork requests from processes with arbitrary UIDs, enabling a crafted app to cause a denial-of-service reboot loop. The issue is described in multiple sources (e.g., NVD/Red Hat entries) and i...

CVE-2012-4220

CVE-2012-4220 / CVE-2012-4221 affect the Qualcomm DIAG kernel-mode driver for Android 2.3–4.2. diagchar_core.c (CVE-2012-4220) and diagchar_core.c with an untrusted pointer dereference (CVE-2012-4221) allow a local application to exploit crafted arguments via diagchar_ioctl to execute arbitrary c...

CVE-2014-7911

CVE-2014-7911 affects Android's deserialization path in ObjectInputStream (Android before 5.0.0). The vulnerability allows an attacker to achieve arbitrary code execution via a crafted serialized object, invoked through an ArrayMap Parcel inside an intent to system_service, demonstrated by the fi...

CVE-2015-3837

CVE-2015-3837 affects Android’s OpenSSLX509Certificate class (org/conscrypt/OpenSSLX509Certificate.java) in builds prior to 5.1.1 LMY48I. The root cause is improper inclusion of certain context data during serialization and deserialization, enabling a malicious local application to trigger code e...

CVE-2015-6608

Mediaserver on Android is affected: versions 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 are vulnerable to remote code execution or memory corruption via a crafted media file. Root cause cited as memory corruption in mediaserver. CVE-2015-6608 is the umbrella entry; associated internal bugs...

CVE-2016-0805

CVE-2016-0805 affects Qualcomm ARM kernels, specifically the Qualcomm Performance Module in Android. The issue resides in the kernel function get_krait_evtinfo, which returns an index into an array used by other kernel functions; crafted input can generate a malicious index and cause a buffer ove...

CVE-2016-10398

CVE-2016-10398 affects Android 6.0 where an authentication bypass exists for attackers with root and physical access. AuthTokens used by the Trusted Execution Environment (TEE) are protected by a weak challenge, enabling replay of captured responses and use of the TEE without authenticating. All ...

CVE-2016-6729

CVE-2016-6729 is an elevation-of-privilege vulnerability in the Qualcomm bootloader used by Android prior to 2016-11-05. A local malicious app could execute arbitrary code in kernel context, potentially leading to permanent device compromise that may require reflashing. Android ID: A-30977990; re...

CVE-2017-0427

CVE-2017-0427 is an elevation-of-privilege vulnerability in the Android kernel file system. A local attacker could execute arbitrary code in the kernel context on devices running Kernel-3.10 or Kernel-3.18, with a potential for permanent device compromise. The CVE’s patch status is not publicly a...

CVE-2017-0678

CVE-2017-0678 is a remote code execution vulnerability in Android's media framework affecting Android 7.0, 7.1.1 and 7.1.2. The issue appears in the 2017 July Android Security Bulletin under Media framework, with patches released via the July 2017 patch levels (2017-07-01 and 2017-07-05). No expl...

CVE-2017-13280

CVE-2017-13280 affects the Android/libframesequence library, specifically the FrameSequence_gif function. The issue is an out-of-bounds read due to a missing bounds check, leading to a remote DoS without user interaction. Affected Android versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. The vul...

CVE-2018-6267

CVE-2018-6267 affects NVIDIA’s Tegra OpenMax driver (libnvomx): a missing/incorrect validation of input can affect control or data flow, potentially enabling DoS or elevation of privilege. Public NVIDIA bulletins confirm this CVE is addressed as part of Jetson TX1/TX2 L4T updates; remediation inv...

CVE-2018-9411

CVE-2018-9411 describes an out-of-bounds write in decrypt of ClearKeyCasPlugin.cpp caused by a missing bounds check, enabling remote code execution with no extra privileges and requiring user interaction for exploitation. Public sources consistently mirror this description, with Android’s July 20...

CVE-2018-9425

CVE-2018-9425 affects the Android Platform (Platform) on Android 10, where a missing permission check enables bypass of user interaction requirements, causing local escalation of privilege without extra execution privileges. The issue is categorized as Elevation of Privilege (EoP) with local atta...

CVE-2018-9429

CVE-2018-9429 involves an out-of-bounds read due to uninitialized data in the function buildImageItemsIfPossible of ItemTable.cpp, leading to possible information disclosure without extra privileges. The vulnerability is linked to Google Pixel/Nexus security context (Pixel bulletin) with a public...

CVE-2018-9431

CVE-2018-9431 : The connected documents confirm a local elevation of privilege due to improper input validation in OSUInfo.java (OSUInfo component). The impact is described as local Privilege Escalation without user interaction. No exploit pathways, affected product versions, or fix/patch details...

CVE-2019-2047

CVE-2019-2047 is an Android vulnerability in the UpdateLoadElement path of the ic.cc file, caused by a type confusion that can trigger an out-of-bounds write. This could allow remote code execution in the proxy auto-config (PAC) context, with no required privileges and no user interaction. The we...

CVE-2019-9243

CVE-2019-9243 affects wpa_supplicant_8 in Android 10. The vulnerability is an out-of-bounds read caused by a missing bounds check in a component of wpa_supplicant_8, leading to local information disclosure without requiring privileges; no user interaction is needed. Several connected records corr...

CVE-2019-9297

CVE-2019-9297 affects Android 10, within the Android Media Framework (libAACdec). The issue is a potential out-of-bounds write caused by an integer overflow in a decoder component, which could enable remote code execution. Exploitation requires user interaction, and successful exploitation would ...

CVE-2019-9396

CVE-2019-9396: In Android 10, a Bluetooth vulnerability can cause a remote denial-of-service due to a missing bounds check in Bluetooth handling. This allows an attacker to terminate the process without privileges or user interaction. Affected product: Android 10. Impact: DoS with availability lo...

CVE-2020-0085

CVE-2020-0085 affects Android 10 where an issue in PanService.java: setBluetoothTethering can bypass a permission check, enabling local escalation of privilege to activate tethering without extra execution privileges. The vulnerability is local, requires no user interaction, and could grant eleva...

CVE-2020-13833

CVE-2020-13833 affects Samsung mobile devices running O(8.x), P(9.0), and Q(10.0). The issue enables arbitrary file overwrites in the system area via a symlink attack. The root cause is a symlink-based overwrite vulnerability in the system area, leading to potential integrity impact (unauthorized...

CVE-2021-0534

CVE-2021-0534 affects Android 11, stemming from an insecure default in DeviceAdminReceiver.java permission declarations, which can allow local privilege escalation without extra privileges or user interaction. The issue’s root cause is lack of broadcast protection due to insufficient default prot...

CVE-2021-0553

CVE-2021-0553 affects Android 11 (AppSwitchPreference.java, onBindViewHolder). The issue is a possible bypass of device admin settings caused by an unclear UI, enabling local privilege escalation with user execution privileges required. Exploitation reportedly requires user interaction. The provi...

CVE-2021-0568

The CVE-2021-0568 entry relates to Android 11 and specifically the DevicePolicyManagerService.java onReceive path. The vulnerability is described as a missing permission check that could enable disabled profiles, resulting in local elevation of privilege with no extra execution privileges require...