CVE-2021-39650

CVE-2021-39650: In the Android kernel, an out-of-bounds write due to a missing bounds check enables local escalation to System privileges without user interaction. This is tied to Android kernel code and is documented with a MEDIUM base CVSS and LOCAL access. The provided connected documents conf...

CVE-2022-20246

CVE-2022-20246 affects Android 13 (WindowManager). The issue is an incorrect UID/permission check that allows bypassing background-activity start restrictions, leading to local escalation of privilege without user interaction. Exploitation is local and requires no additional privileges; CVSS indi...

CVE-2022-20304

CVE-2022-20304 affects Android 13 and describes a side-channel information disclosure that can determine a user’s account, enabling local information disclosure with User privileges and no user interaction required. Affected component: Android OS (Android 13). Root cause: side-channel information...

CVE-2022-26435

CVE-2022-26435: A type confusion in the mailbox component can cause an out-of-bounds write, enabling local privilege escalation to System level without user interaction. Documents (NVD/Red Hat/NVD list) cite Patch ALPS07138435/Issue ALPS07138435 as the remediation. Exploitation status is not prov...

CVE-2022-26458

CVE-2022-26458 affects MediaTek vow. Root cause: a missing bounds check causing an out-of-bounds write, enabling local privilege escalation to SYSTEM with no user interaction. The patch reference ALPS07032678 is noted, but no affected versions or exploitation details are provided in the supplied ...

CVE-2022-27567

This CVE (CVE-2022-27567) affects the libsimba library via a null pointer dereference in the parser_hvcC function, leading to an out-of-bounds write. The issue is triggered remotely by attackers and is tied to the libsimba code before SMR Apr-2022 Release 1. Several connected sources corroborate ...

CVE-2022-32591

CVE-2022-32591 describes an out-of-bounds/incorrect bounds check in ril that can cause a remote denial of service without user interaction, due to a system crash. The NVD entry notes a patch (ALPS07257259; Issue ID ALPS07257259). Connected sources (Red Hat RH/CVE, CNVD, CVE lists, PT-2022-21393) ...

CVE-2022-42538

CVE-2022-42538 is listed in the Chromecast Security Bulletin as an Elevation of Privilege affecting Chromecast devices, under the AMLogic Secure Monitor component. The NVD entry assigns a CVSS v3.1 base score of 9.8 (CRITICAL), with network attack vector, low attack complexity, and no user intera...

CVE-2022-47492

CVE-2022-47492 affects the UNISOC soter service module. The root cause described across connected sources is a missing permission check in the soter service, which could allow a local attacker to cause a denial of service without gaining execution privileges. Documented impact is local availabili...

CVE-2023-20613

The CVE-2023-20613 entry refers to a vulnerability in the MediaTek ril component where a missing bounds check allows an out-of-bounds write, potentially enabling local escalation of privileges to SYSTEM with no user interaction required. Exploitation status is not detailed in the documents, but t...

CVE-2023-20616

CVE-2023-20616 describes a type-confusion related out-of-bounds read in ion that could enable local privilege escalation with SYSTEM privileges; exploitation requires no user interaction. A patch is identified (ALPS07560720/ALPS07560720). The connected documents do not specify exact vendor/produc...

CVE-2023-20732

CVE-2023-20732 concerns a vulnerability in the MediaTek wlan module where a missing bounds check can cause an out-of-bounds read. The issue could enable local information disclosure with system-execution privileges required; user interaction is not needed. Affected component is the wlan implement...

CVE-2023-21151

CVE-2023-21151 affects the Google BMS kernel module in the Android kernel (Pixel devices). The issue is a heap buffer overflow that can cause an out-of-bounds write, enabling local escalation of privileges to System level. Exploitation requires local access; user interaction is not needed. Public...

CVE-2023-21153

CVE-2023-21153 affects Android kernel via Do_AIMS_SET_CALL_WAITING in imsservice.cpp, causing an out-of-bounds read due to a missing bounds check. This can allow local escalation of privilege to System level without user interaction. The issue impacts Android kernel components and is associated w...

CVE-2023-21160

CVE-2023-21160 affects the Android kernel via a heap buffer overflow in BuildSetTcsFci (protocolmiscbuilder.cpp) that can cause a local out-of-bounds read and information disclosure without requiring user interaction. Public details across sources confirm the impact as local information disclosur...

CVE-2023-21382

This CVE (CVE-2023-21382) concerns Android’s Content Resolver allowing local information disclosure due to a missing permission check. Affected: Android devices (Content Resolver metadata about content providers). Root cause: insufficient permission validation on access to content provider metada...

CVE-2023-32829

CVE-2023-32829 affects the apusys component: a possible out-of-bounds write caused by an integer overflow. This can lead to local escalation of privilege with System execution privileges required, and no user interaction is needed for exploitation. A patch is available: ALPS07713478 (Issue ALPS07...

CVE-2023-40637

CVE-2023-40637 involves UNISOC chipsets’ telecom service where a missing permission check could allow local information disclosure without executing code or elevating privileges. The NVD entry notes a local attack vector with low adversarial effort and low privileges required, exposing high-confi...

CVE-2023-48339

CVE-2023-48339 affects the jpg driver and is caused by a missing permission check in the driver, potentially enabling local information disclosure with System execution privileges required. The CVSSv3.1 vector indicates Local access, High privileges, Confidentiality impact High, and no documented...

CVE-2024-20031

A vulnerability exists in MediaTek chips (specifically referenced in relation to Mt6739 ) due to a lack of validation in the da module. This flaw can lead to an out-of-bounds write , potentially allowing for local escalation of privilege with System execution privileges required. Exploitation doe...

CVE-2024-20032

In aee, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08487630; Issue ID: MSV-1020.

CVE-2024-20047

CVE-2024-20047 is a MediaTek-related vulnerability in the battery component. The issue is described as an out-of-bounds read caused by an integer overflow, potentially enabling local information disclosure with System privileges required. User interaction is not needed for exploitation. A patch i...

CVE-2026-0034

CVE-2026-0034 affects Android, arising from improper input validation in setPackageOrComponentEnabled within ManagedServices.java, causing a possible notification policy desync and local privilege elevation with no extra execution privileges or user interaction required. The issue is described ac...

CVE-2009-2348

Android 1.5 CRBxx allows local users to bypass CAMERA and AUDIO_RECORD permission checks by installing an app that does not request permissions before using the camera or microphone. Affected: all 1.5 CRBxx variants. Root cause: improper permission verification in Android’s runtime/device policy ...

CVE-2014-9801

CVE-2014-9801 concerns Android components on Nexus 5 (Qualcomm) where multiple integer overflows in lib/libfdt/fdt_rw.c can be triggered by a crafted application to gain privileges. The issue is described as an Android internal bug 28822060 and a Qualcomm internal bug CR705078, affecting Qualcomm...

CVE-2016-0807

CVE-2016-0807 affects Android 6.x Debuggerd (get_build_id in elf_utils.cpp) where a crafted ELF Note Desc Size element mishandling enables privilege escalation. Root cause: improper handling in Debuggerd’s ELF note parsing. Impact: high (local attacker). Affected component: Android 6.x Debuggerd....

CVE-2016-2427

The CVE-2016-2427 entry concerns AES-GCM-ICVlen = 12 octets in the AES-GCM implementation used by Android 5.x–6.x. The NVD description cites a potential weakness that could defeat cryptographic protection and reveal an authentication key via a crafted app. However, Android’s vendor notes state th...

CVE-2016-6749

CVE-2016-6749 is an information-disclosure vulnerability in Qualcomm components used by Android (GPU driver, power driver, SMSM Point-to-Point driver, and sound driver) that could let a local malicious app access data outside its permissions if a privileged process is compromised. Android ID A-30...

CVE-2017-0439

CVE-2017-0439 describes a local privilege-escalation vulnerability in the Qualcomm Wi‑Fi driver for Android, affecting Kernel-3.10 and Kernel-3.18. The issue could allow a local malicious app to execute arbitrary code in the kernel context after compromising a privileged process. The Android Prod...

CVE-2017-0550

CVE-2017-0550 corresponds to a remote denial-of-service in libavc within Android’s Mediaserver. The vulnerability affects Android 6.0–7.1.1 and could be triggered by a specially crafted file, potentially causing device hang or reboot. Connected documents corroborate the Mediaserver/libavc context...

CVE-2017-0665

CVE-2017-0665 is an Android framework elevation of privilege (EoP) vulnerability affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. The issue is listed as high severity with local attack vector but user interaction required, per CVSS. Public details in the Android July...

CVE-2017-0820

CVE-2017-0820 is a DoS vulnerability in the Android media framework affecting Android versions 7.0, 7.1.1, 7.1.2 and 8.0. The issue is tracked in multiple feeds and is listed in the October 2017 Pixel/Nexus Security Bulletin under the Media framework with DoS as the type and NSI as the status. Th...

CVE-2017-0841

CVE-2017-0841 describes a remote code execution vulnerability in Android’s libutils affecting Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0 (Android ID: A-37723026). The Connected documents corroborate the affected component (libutils) and the Android product, but do not p...

CVE-2017-13312

CVE-2017-13312 affects Android’s Media framework (MediaCas.java) where a parcel read/write mismatch in createFromParcel, due to improper input validation, can enable local elevation of privilege on Android 8.0 (Oreo). An app could start an activity with system privileges without extra execution p...

CVE-2017-8259

CVE-2017-8259 is a buffer overflow in Qualcomm CAF Android/Linux kernel service locator. Root cause: a buffer size variable is not used to indicate the actual buffer size. Documented impact is high severity with local code execution possibilities, requiring user interaction (CVSS3: HIGH, LOCAL, U...

CVE-2018-9391

CVE-2018-9391 describes a security issue in the Mediatek GPS HAL: in gpshal_worker.c, update_gps_sv and output_vzw_debug, there is a possible out-of-bounds write due to a missing bounds check. This can lead to local escalation of privilege with System execution privileges required; exploitation i...

CVE-2018-9468

CVE-2018-9468 is a vulnerability in Android’s DownloadManager (DownloadManager.java, Framework) where a permissions bypass could permit reading/writing arbitrary files. This leads to local information disclosure and potential file rewriting without extra execution privileges, with exploitation no...

CVE-2019-2046

CVE-2019-2046 affects Android System; the vulnerability is in CalculateInstanceSizeForDerivedClass in objects.cc, causing memory corruption via integer overflow and enabling remote code execution in the proxy auto-config via PAC file processing. No user interaction required. Affected Android vers...

CVE-2019-9303

CVE-2019-9303 is an Android 10 vulnerability in the libFDK component caused by an integer overflow leading to an out-of-bounds write. The issue could enable remote code execution and is described as requiring user interaction for exploitation (no additional privileges required). The vulnerability...

CVE-2019-9363

CVE-2019-9363 affects Android 10 Bluetooth and describes an out-of-bounds write caused by a missing bounds check. This could allow remote code execution with no privileges, requiring user interaction to exploit. Affected product/area: Android 10 Bluetooth stack. Root cause: improper bounds checki...

CVE-2019-9369

CVE-2019-9369 affects Android 10 Bluetooth code, where a use of an uninitialized variable could lead to local information disclosure without user interaction. The NVD/Red Hat/CNVD entries all describe the same issue; impact is information disclosure (confidentiality partial), with local attack ve...

CVE-2019-9370

Summary: CVE-2019-9370 affects the Android 10 platform’s sonivox component, where an out-of-bounds read occurs due to an incorrect bounds check. This can lead to remote information disclosure, with no additional execution privileges required, and requires user interaction to exploit. The issue is...

CVE-2019-9396

CVE-2019-9396: In Android 10, a Bluetooth vulnerability can cause a remote denial-of-service due to a missing bounds check in Bluetooth handling. This allows an attacker to terminate the process without privileges or user interaction. Affected product: Android 10. Impact: DoS with availability lo...

CVE-2019-9398

CVE-2019-9398 affects the Android 10 Bluetooth stack. The issue is a missing bounds check in Bluetooth that can allow a remote attacker to cause a denial of service without user interaction. Impact is a DoS, with network-based exploitation. Exploitation status is not described in the provided mat...

CVE-2019-9401

CVE-2019-9401 affects Android 10 Bluetooth with a missing bounds check in a Bluetooth component, enabling remote Denial of Service over the network without user interaction or privileges. The CVSSv3.1 base score is 7.5 (Network, Privileges None, UI None, Availability High; scope Unchanged). Conne...

CVE-2019-9432

CVE-2019-9432 refers to an out-of-bounds read in Bluetooth on Android 10, caused by improper input validation. The issue can lead to remote information disclosure from the Bluetooth server without requiring user interaction or privileges. Documents confirm the affected platform as Android 10 and ...

CVE-2020-0056

CVE-2020-0056 is an Android 10 vulnerability affecting the btu_hcif_connection_comp_evt function in btu_hcif.cc, where a missing bounds check can trigger an out-of-bounds read. This may lead to local information disclosure without requiring privileges or user interaction. The issue is documented ...

CVE-2020-0295

CVE-2020-0295 affects Android 11’s Telecom stack, where an unsafe PendingIntent allows a permission bypass leading to local information disclosure with user-execution privileges required. Exploitation is listed as local and does not require user interaction, with the impact stated as partial conf...

CVE-2021-0402

CVE-2021-0402 affects Android 11 in the jpeg component, where an out-of-bounds write arises from improper input validation. This could enable local escalation of privilege with system execution privileges required, and exploitation reportedly does not require user interaction. The issue is corrob...

CVE-2021-0568

The CVE-2021-0568 entry relates to Android 11 and specifically the DevicePolicyManagerService.java onReceive path. The vulnerability is described as a missing permission check that could enable disabled profiles, resulting in local elevation of privilege with no extra execution privileges require...