CVE-2024-20043

CVE-2024-20043 concerns a potential out-of-bounds write in the MediaTek component/module labeled as “da,” caused by a missing bounds check. The issue could allow local escalation of privilege to SYSTEM privileges without user interaction. Public exploitation details are not provided in the docume...

CVE-2024-20044

In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541784; Issue ID: ALPS08541784.

CVE-2025-20648

CVE-2025-20648 affects MediaTek chipsets' apu component, with a possible out-of-bounds read caused by a missing bounds check. This could lead to local information disclosure without user interaction. Exploitation details are not provided in the connected documents. A patch is referenced (ALPS0945...

CVE-2025-20979

CVE-2025-20979 concerns an out-of-bounds write in Samsung’s libsavscmn prior to Android 15. Affected component: libsavscmn (cell phone software). Root cause: an out-of-bounds write issue that enables local attackers to execute arbitrary code. Impact: high (local code execution with high confident...

CVE-2025-22411

CVE-2025-22411 affects the Android Bluetooth SDP discovery path: use-after-free in process_service_attr_rsp (sdp_discovery.cc) due to a logic error, enabling remote code execution with no privileges and no user interaction. Exploitation is described as proximal/adjacent (Bluetooth range). Root ca...

CVE-2025-32350

The CVE-2025-32350 issue affects Google Android Framework: in maybeShowDialog of ControlsSettingsDialogManager.kt there can be an overlay/tapjacking that causes a ControlsSettingsDialog to overlap, enabling local elevation of privilege without extra user interaction. The Android Security Bulletin...

CVE-2026-0078

CVE-2026-0078 affects Android’s DevicePolicyManagerService (setGlobalProxy). The issue is a desync in persistence caused by improper input validation, enabling local privilege escalation with no extra execution privileges required. Exploitation is described as local and does not require user inte...

CVE-2026-28618

CVE-2026-28618 is a heap buffer overflow in dec_frm_prepare of OpenAPV (oapv.c), the APV (Advanced Professional Video, RFC 9924) decoder in Android's Media Codecs component. A crafted APV bitstream with a frame height exceeding the allocated 64×64 plane triggers an out-of-bounds write, enabling r...

CVE-2015-1530

The CVE-2015-1530 issue affects Android’s media/libmedia/IAudioPolicyService.cpp prior to Android 5.1. It describes an integer overflow in BnAudioPolicyService::onTransact that can be exploited by a crafted application with an invalid array size to either execute arbitrary code with media_server ...

CVE-2016-0819

CVE-2016-0819 affects the Qualcomm performance component in Android, with exploitation possible by a crafted application to gain privileges in the kernel. Affected versions are Android 4.x up to 4.4.3, 5.x up to 5.1.0 LMY49H, and 6.x before 2016-03-01. The issue is described as an elevation-of-pr...

CVE-2017-0392

CVE-2017-0392 is a denial-of-service flaw in Android’s Mediaserver, specifically VBRISeeker.cpp in libstagefright. A crafted media file can cause a device hang or reboot via Mediaserver. Affected products/versions include Android 4.4.4–7.1.1. Public details describe the vulnerability’s root cause...

CVE-2017-0421

CVE-2017-0421 is an information-disclosure vulnerability in the Android Framework APIs that could allow a local malicious app to bypass OS protections and access data it should not. Affected products/versions per the CVE entry include Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. In the conne...

CVE-2017-0807

CVE-2017-0807 is an Elevation of Privilege in the Android framework’s UI subsystem. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID: A-35056974). The reference materials indicate this issue resides in the Framework UI component and was addresse...

CVE-2017-11067

CVE-2017-11067 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels. The vulnerability stems from an improper address sanity check in the Athdiag procfs entry, which may allow an out-of-range pointer offset. This is a local issue with a low attacker profile ...

CVE-2017-13283

CVE-2017-13283 affects Android devices via a flaw in the Bluetooth stack: in avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out-of-bounds write on the stack due to a missing bounds check. This could enable remote code execution with no privileges or user interaction requir...

CVE-2017-15849

CVE-2017-15849 affects Qualcomm Display in Android/CAF builds for MSM, where a LayerStack can be destroyed between Validate and Commit by the application, causing a Use-After-Free condition. The issue is described in multiple sources (NVD entry and related CVEs) as a high-severity (EoP) vulnerabi...

CVE-2018-9377

CVE-2018-9377 affects Android’s ActivityManagerService.getIntentForIntentSender, enabling local escalation of privilege via a pending Intent to access user metadata with no user interaction. The issue is tied to the getIntentForIntentSender path and can be exploited locally without extra privileg...

CVE-2018-9395

The CVE-2018-9395 issue affects the Mediatek WLAN driver (mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config) in drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_vendor.c. It describes a possible out-of-bounds write due to a missing bounds check, enabling local...

CVE-2018-9407

CVE-2018-9407 : In emmc_rpmb_ioctl of emmc_rpmb.c there is a Missing Bounds Check, leading to potential information disclosure of kernel data. Connected sources confirm this issue on Google Pixel devices and reference the Android Pixel/Nexus security bulletin, which states that patch levels of 20...

CVE-2018-9411

CVE-2018-9411 describes an out-of-bounds write in decrypt of ClearKeyCasPlugin.cpp caused by a missing bounds check, enabling remote code execution with no extra privileges and requiring user interaction for exploitation. Public sources consistently mirror this description, with Android’s July 20...

CVE-2018-9431

CVE-2018-9431 : The connected documents confirm a local elevation of privilege due to improper input validation in OSUInfo.java (OSUInfo component). The impact is described as local Privilege Escalation without user interaction. No exploit pathways, affected product versions, or fix/patch details...

CVE-2018-9488

CVE-2018-9488 is an Android local‑privilege-escalation vulnerability rooted in SELinux permissions for crash_dump.te, allowing an unprivileged user to escalate to System via a multi-stage chain (zygote → crash_dump → vold → init/kernel). Publicly linked PoCs and analyses describe how an attacker ...

CVE-2018-9539

CVE-2018-9539 is a local elevation-of-privilege in the Android ClearKey CAS descrambler caused by a use-after-free race condition. Affects Android 8.0–9; exploitation requires local access with no user interaction. The Android Security Bulletin indicates patches at the 2018-11-01/2018-11-05 patch...

CVE-2019-2029

CVE-2019-2029 is a real Android vulnerability affecting Bluetooth handling in tm_ble.c (btm_proc_smp_cback), described as memory corruption via use-after-free that could enable remote code execution with no extra privileges and requires user interaction to exploit. The issue impacts Android versi...

CVE-2019-2118

CVE-2019-2118 affects Android (8.0–9) due to uninitialized/partially initialized stack variables in Parcel.cpp, enabling local information disclosure without user interaction. Impact and exploitation details are limited to the Android security bulletin references; no explicit exploit code or vect...

CVE-2019-2128

CVE-2019-2128 is an elevation-of-privilege vulnerability in Android’s Media/ACELP code path. The issue is an out-of-bounds write in ACELP_4t64_fx (c4t64fx.c) caused by a missing bounds check, enabling local privilege escalation without extra execution privileges. Affected products include Android...

CVE-2019-2169

CVE-2019-2169 affects the Android 10 libxaac library, where an information disclosure can occur due to uninitialized data. The issue could expose partial confidential data with no additional execution privileges required, and exploitation requires user interaction. | Affected component: libxaac i...

CVE-2019-9272

CVE-2019-9272 is an Android 10 information-disclosure issue described as a WiFi state leak via a permissions bypass, enabling local disclosure of WiFi state and potential device location without user interaction. Documents agree the affected product is Android 10, with no explicit vendor/componen...

CVE-2019-9367

CVE-2019-9367 concerns Bluetooth on Android 10 with a missing bounds check causing an out-of-bounds read and potential remote information disclosure. The vulnerability requires no user interaction and can be exploited over the network; exploitation status is not detailed in the provided documents...

CVE-2020-0007

CVE-2020-0007 affects Android 8.0–10 in the System component; the root cause is information disclosure from uninitialized data in Sensor.cpp:flattenString8, leading to local heap memory disclosure with no user interaction. Public details confirm the issue and affected versions; no remediation ver...

CVE-2020-28341

The CVE-2020-28341 entry concerns Samsung mobile devices running Q(10.0) on Exynos990 chips, where the S3K250AF Secure Element CC EAL 5+ chip is affected. The underlying issue is a buffer overflow in the Secure Element component, leading to arbitrary code execution and leakage of sensitive inform...

CVE-2021-0545

CVE-2021-0545 affects Google Android on Android 11. The issue occurs in the NFC subsystem, specifically in phNxpNciHal_print_res_status within phNxpNciHal.cc, where a missing bounds check enables an out-of-bounds write. This could allow local escalation of privilege on the NFC server with system ...

CVE-2021-0553

CVE-2021-0553 affects Android 11 (AppSwitchPreference.java, onBindViewHolder). The issue is a possible bypass of device admin settings caused by an unclear UI, enabling local privilege escalation with user execution privileges required. Exploitation reportedly requires user interaction. The provi...

CVE-2021-1001

CVE-2021-1001 describes a vulnerability in the Android Media/Video encoding path: In PVInitVideoEncoder of mp4enc_api.cpp, an out-of-bounds read caused by a heap buffer overflow can lead to local information disclosure without additional privileges or user interaction. Affected is Android 12; exp...

CVE-2021-1029

CVE-2021-1029 affects the Android graphics SurfaceFlinger component. In setClientStateLocked, a use-after-free leads to an out-of-bounds write, enabling local privilege escalation with no extra execution privileges required. This vulnerability is reported across multiple sources (NVD, Red Hat, CN...

CVE-2021-1030

CVE-2021-1030 affects Android 12 with a vulnerability in NotificationManagerService.setNotificationsShownFromListener that allows a local attacker to deduce whether an app is installed without query permissions via a side-channel. Impact is local information disclosure with no execution privilege...

CVE-2021-25344

The CVE-2021-25344 issue affects Samsung knox_custom service (mobile app). Root cause: missing privilege check in knox_custom before SMR Mar-2021 Release 1. Impact: attacker may access the device serial number without permission (local attack). Public details confirm the vulnerability and timing;...

CVE-2021-39646

CVE-2021-39646 is an information-disclosure issue affecting the Android kernel Bootloader, listed under the Pixel vulnerability bulletin with type ID and moderate severity for that component. Public details in the connected records indicate an information-disclosure impact (confidentiality) with ...

CVE-2021-39767

CVE-2021-39767 affects Android 12L via the miniadb component, where an insecure default value permits read/write access to recovery system properties, enabling local elevation of privilege without extra execution privileges or user interaction. Impact is described as local elevation of privilege ...

CVE-2021-39780

CVE-2021-39780 affects Android 12L Traceur: a missing permission check allows bypassing developer settings to capture system traces, enabling local privilege escalation with user interaction required. The Android 12L security release notes indicate this issue is addressed in Android 12L; devices ...

CVE-2022-20234

CVE-2022-20234 affects Android 12L in the Car/AAOS context where the NotificationAccessConfirmationActivity is exported. An unprivileged app can supply a malicious component name while presenting a benign package title (e.g., Settings) to persuade users to grant notification access to the malicio...

CVE-2022-20262

The CVE-2022-20262 issue affects Android 13, specifically the ActivityManager component. It describes a missing permission check that could allow a local attacker to check another process’s capabilities, resulting in potential local information disclosure with no user interaction required. The NV...

CVE-2022-20271

CVE-2022-20271 affects Android 13, originating in the PermissionController. The issue enables a user-visible misdirection/insufficient UI to grant certain permissions without proper user consent, resulting in potential local elevation of privilege. The vulnerability is categorized as an EoP issue...

CVE-2022-20314

CVE-2022-20314 affects Google Android KeyChain on Android-13. The issue is a spoof keychain chooser activity request caused by improper input validation in KeyChain, enabling local escalation of privilege with System execution privileges required. Exploitation requires no user interaction. The An...

CVE-2022-20323

CVE-2022-20323 affects Android 13, with a missing permission check in the PackageManager that can disclose local information. The issue enables a local information disclosure vulnerability without user interaction, requiring user privileges. Vulnerable component: PackageManager (Android framework...

CVE-2022-26456

The vulnerability CVE-2022-26456 affects the vow component (MediaTek vow module) where symbolic link following can lead to local information disclosure with System execution privileges required. Exploitation does not require user interaction. The public entries consistently cite the Patch ID ALPS...

CVE-2022-27570

CVE-2022-27570 is a heap-based buffer overflow in the parser_single_iref function of the Samsung SMR/libsimba library prior to the April 2022 SMR Release 1 . The vulnerability allows remote code execution with network-based access and no user interaction, due to an overflow in heap memory handlin...

CVE-2022-27824

CVE-2022-27824 : The exposed issue is an improper size check in the function sapefd_parse_meta_DESCRIPTION within the libsapeextractor library, before the Samsung SMR Apr-2022 Release 1. This causes an out-of-bounds read when processing a crafted media file. Publicly documented variations describ...

CVE-2022-28794

CVE-2022-28794 describes a sensitive information exposure in Samsung mobile devices. The issue concerns the low-battery dumpstate log, which can reveal SIM card information to a local attacker. The root cause is exposure of stored log data prior to SMR Jun-2022 Release 1, enabling local access to...

CVE-2022-32628

CVE-2022-32628 describes an out-of-bounds write in the isp component caused by a missing bounds check, enabling local escalation of privilege with System-level execution privileges required. User interaction is not required. The vulnerability impact is described with high confidentiality, integri...