CVE-2025-48626

CVE-2025-48626 pertains to Google Android where a precondition check failure can allow launching an application from the background, enabling remote escalation of privilege without user interaction. Documented across multiple feeds (NVD, Red Hat advisory, CNVD, EUVD, OSV, CVE list, and regional b...

CVE-2014-7921

CVE-2014-7921 affects Android mediaserver (Android 4.0.3 through 5.x prior to 5.1). The vulnerability is a privilege-escalation flaw enabled by mediaserver, per the CVE entry. Connected sources corroborate the same affected component and version range. The initial description does not provide roo...

CVE-2015-1541

CVE-2015-1541 affects Android before version 5.1.1 (LMY48I). The issue resides in AppWidgetServiceImpl in Settings, where an application can obtain a URI permission by sending an Intent with FLAG_GRANT_READ_URI_PERMISSION or FLAG_GRANT_WRITE_URI_PERMISSION. This bypasses intended restrictions and...

CVE-2015-3827

Android Stagefright: CVE-2015-3827 is a vulnerability in libstagefright’s MPEG4 covr handling. The MPEG4Extractor::parseChunk path does not validate the relationship between chunk sizes and skip sizes, causing an integer underflow that can lead to remote code execution or memory corruption via cr...

CVE-2015-3836

The CVE-2015-3836 entry concerns Android devices affected by a buffer overflow in the Sonivox Parse_wave routine (arm-wt-22k/lib_src/eas_mdls.c) used by the DLS-to-EAS converter. The issue arises because a negative value in a size field is not rejected, enabling remote attackers to execute arbitr...

CVE-2016-0824

The CVE-2016-0824 issue affects Android 6.x via the libmpeg2 component in libstagefright. The vulnerability arises in libmpeg2’s handling of crafted Bitstream data, enabling an information disclosure that could bypass a protection mechanism and grant Signature or SignatureOrSystem access. Affecte...

CVE-2017-0433

CVE-2017-0433 is an elevation-of-privilege flaw in the Synaptics touchscreen driver for Android, tied to the Kernel-3.10 platform. The vulnerability could allow a local, privileged attacker to execute arbitrary code within the touchscreen chipset context. Several connected sources (including NVD ...

CVE-2017-0446

CVE-2017-0446: Elevation of privilege in the HTC touchscreen driver on Android kernel 3.18, allowing a local attacker to execute arbitrary code in kernel context. Exploitation requires compromising a privileged process and local access. Publicly available patch/fix details are not provided in the...

CVE-2017-0472

CVE-2017-0472 involves a remote code execution in Android’s Mediaserver triggered by specially crafted media files, leading to memory corruption during media/file processing. Affected products and versions (per sources) include Android 6.0–7.1.1. The issue is described as Critical due to potentia...

CVE-2017-0474

CVE-2017-0474 is a remote code execution vulnerability in Android’s Mediaserver. The issue allows memory corruption when processing specially crafted media files, enabling a remote attacker to execute code within the Mediaserver process on affected devices. Affected products/versions identified i...

CVE-2017-0594

CVE-2017-0594 affects Android Mediaserver’s Mediaserver component, specifically codecs/aacenc/SoftAACEncoder2.cpp in libstagefright. The issue is an elevation of privilege vulnerability that could allow a local malicious application to execute arbitrary code within the context of a privileged pro...

CVE-2017-0672

CVE-2017-0672 is a DoS vulnerability in the Android libraries affecting Android 7.0, 7.1.1, and 7.1.2. Public sources (NVD entry and CVE list in the 2017 Android bulletin) describe a denial of service affecting the libraries, with the NVD noting partial availability impact (DoS). The Android bull...

CVE-2017-0679

CVE-2017-0679 is a remote code execution vulnerability in the Android media framework. Affected products/versions: Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. Description in CVE notes a remote code execution vulnerability within the Media framework, with impact described as requiring user interact...

CVE-2017-0798

CVE-2017-0798 is an elevation of privilege vulnerability in the MediaTek kernel within Android’s kernel. The issue affects MediaTek kernel components (kernel level) and is classified as an EoP with High impact, enabling a local attacker with some access to gain higher privileges. The CVE entry re...

CVE-2017-13236

CVE-2017-13236 affects the Android KeyStore service (Android 8.0/8.1). The issue is a permissions bypass in KeyStore that can grant access to protected resources, enabling local elevation of privilege with system execution privileges required. Exploitation is local and does not require user inter...

CVE-2017-13253

CVE-2017-13253 affects Android 8.0–8.1 via the Media framework CryptoPlugin::decrypt, where a missing bounds check in CryptoPlugin.cpp allows an out-of-bounds write. This can lead to local elevation of privilege, with user interaction required for exploitation. There is a patch listed in the Andr...

CVE-2017-8240

CVE-2017-8240 is described as an off-by-one kernel driver over-read in CAF Android releases using the Linux kernel. Connected Nessus advisories for Unity Linux 20.1050e/20.1060e/20.1070e reference UTSA advisories (UTSA-2026-001627, UTSA-2026-003309, UTSA-2026-002623) noting a security update addr...

CVE-2018-6240

CVE-2018-6240 affects NVIDIA Tegra BootRom. A local attacker with kernel privileges can write an arbitrary value to an arbitrary physical address, enabling escalation of privileges. Connected NVIDIA advisories confirm this vulnerability and map fixes to specific Jetson/Linux-for-Tegra releases: T...

CVE-2018-9586

The CVE-2018-9586 issue affects Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1 and 9.0. It stems from a race condition in InstallPackageTask.java that can leave package verification turned off, enabling local elevation of privilege with no extra execution privileges or user interaction required. Affected pr...

CVE-2019-2059

CVE-2019-2059 affects Android 10 in the libxaac library, where a missing bounds check can cause an out-of-bounds write. This vulnerability could enable remote code execution with user interaction required. The issue is documented across multiple sources (e.g., NVD and Red Hat advisories) with And...

CVE-2019-2113

CVE-2019-2113 affects Android 9 (Pie) in the System component. The issue stems from a bypass in the setup wizard that skips certain checks when Wi-Fi is not connected, enabling a factory reset protection bypass with no additional privileges and no required user interaction. The vulnerability is c...

CVE-2019-2119

CVE-2019-2119 affects Android: multiple functions in key_store_service.cpp allow local information disclosure due to improper locking. Impact is disclosure of protected data with no extra privileges and no user interaction required. Affected versions (from discussed entries): Android 8.0, 8.1, an...

CVE-2019-2160

CVE-2019-2160 affects the Android 10 libxaac library, where a missing bounds check can cause an out-of-bounds read. This leads to potential information disclosure without executing code, with user interaction required for exploitation. The vulnerability is documented across multiple feeds (NVD/Re...

CVE-2019-9412

CVE-2019-9412 affects Android 10 via the libSBRdec component, where an out-of-bounds read due to an incorrect bounds check could allow remote information disclosure. Exploitation requires user interaction; no execution privileges are needed. The connected sources describe the issue and reference ...

CVE-2020-0014

CVE-2020-0014 is an Android elevation-of-privilege vulnerability affecting Android 8.0–10, where a malicious app could manually construct a TYPE_TOAST window to be clickable, enabling local privilege escalation without extra execution privileges. The issue requires user interaction to exploit and...

CVE-2020-0334

CVE-2020-0334 is described as an NFC out-of-bounds write on Android 11 that enables local privilege escalation without user interaction. Affected component: NFC handling in Android 11; root cause: missing bounds check leading to out-of-bounds write. Impact is listed as local elevation of privileg...

CVE-2020-0373

CVE-2020-0373 affects Android 11, specifically the SoundTriggerHwService component. The issue is a race-condition causing an out-of-bounds read, leading to local information disclosure without extra privileges or user interaction. Exploitation details are not provided in the documents. Mitigation...

CVE-2020-35554

CVE-2020-35554 affects LG mobile devices running Android 8.x–10 with a WebView SSL error-handler vulnerability. The issue is described as an SSL handling weakness in WebView, linked to LG’s internal identifier LVE-SMP-200026 (December 2020). Connected sources corroborate the vulnerability across ...

CVE-2021-0735

CVE-2021-0735 affects Android 13, where a missing permission check in PackageManager allows information disclosure about installed packages without extra privileges. Vulnerable component: PackageManager; root cause: failure to enforce Android 11+ limitations, enabling local information disclosure...

CVE-2021-0769

The CVE-2021-0769 issue affects Google Android 12, specifically the AllowBindAppWidgetActivity.java onCreate path where an unclear UI can bypass user interaction requirements. This leads to local privilege escalation with no additional execution privileges needed, with exploitation requiring user...

CVE-2021-0976

CVE-2021-0976 concerns an out-of-bounds read in Android’s toBARK implementation (floor0.c). The root cause is a missing bounds check, enabling possible remote information disclosure with no execution privileges; exploitation requires user interaction. Affected software is Android 12 (Android ID A...

CVE-2021-0977

CVE-2021-0977 affects Android 12 via phNxpNHal_DtaUpdate in phNxpNciHal_dta.cc, where an out-of-bounds write results from an incorrect bounds check. This can enable local escalation of privilege with System execution privileges required and does not require user interaction. Multiple connected so...

CVE-2021-0982

CVE-2021-0982 affects Android 12 and is due to a missing permission check in getOrganizationNameForUser within DevicePolicyManagerService.java, leading to local information disclosure without requiring user interaction. The vulnerability enables disclosure of organization name information with lo...

CVE-2021-1017

Consolidated findings for CVE-2021-1017 (Android 12): The issue arises from a missing permission check in AdapterService and GattService definitions in AndroidManifest.xml, enabling local privilege escalation by disabling Bluetooth connectivity. Affected component(s): Android’s Bluetooth framewor...

CVE-2021-1020

CVE-2021-1020 affects Android 12 via snoozeNotification in NotificationListenerService.java, where improper input validation could allow disabling notifications for an arbitrary user, enabling local privilege escalation with user interaction required. In-text impact is described as local escalati...

CVE-2021-1021

CVE-2021-1021 affects Google Android 12 (and related Android builds) where a flaw in SnoozeNotificationInt within NotificationManagerService.java allows disabling notifications for an arbitrary user due to improper input validation. This can enable local elevation of privilege with user-execution...

CVE-2022-20281

In Android 13, CVE-2022-20281 affects the Core/Framework area, where a missing permission check could allow starting an activity from the background. This could lead to local elevation of privilege with user privileges and requires no user interaction for exploitation. The Android 13 security rel...

CVE-2022-20290

CVE-2022-20290 affects Android 13 and involves a permissions bypass in the Midi component that can reveal private MIDI devices, enabling local privilege escalation without user interaction. Exploitation details are not provided in the supplied documents. The issue is associated with Android 13 se...

CVE-2022-20305

CVE-2022-20305 affects Android 13 ContentService. The issue is a missing permission check that allows a local attacker to disclose information about available account types. Exploitation requires user execution privileges but does not require user interaction. The CVSSv3.1 vector indicates a Loca...

CVE-2022-21777

CVE-2022-21777 affects MediaTek Autoboot: a permission bypass caused by a missing permission check enables local escalation of privileges without user interaction. Multiple sources (NVD entry and Red Hat/CVE pages) describe the issue as allowing an attacker with local access to elevate privileges...

CVE-2022-21791

CVE-2022-21791 affects MediaTek camera ISP components, causing an out-of-bounds read due to a missing bounds check. This could enable local information disclosure with SYSTEM execution privileges needed and requires no user interaction. Patch ALPS06478059 (Issue ALPS06478059) has been issued; aff...

CVE-2022-26426

The CVE-2022-26426 entry concerns MediaTek’s camera ISP (in-camera image signal processor) with an out-of-bounds write caused by a missing bounds check. The vulnerability could allow local privilege escalation with System execution privileges, and does not require user interaction. Connected sour...

CVE-2022-30712

CVE-2022-30712 relates to an elevation-of-privilege issue in Samsung KfaOptions on Samsung mobile devices. The root cause is a lack of proper authentication logic in KfaOptions, permitting an attacker to launch certain activities. Multiple sources corroborate this vulnerability description and ti...

CVE-2022-33688

CVE-2022-33688 refers to a local-information-disclosure vulnerability in Samsung SecTelephonyProvider’s EventType, allowing a user with log access to extract IMSI from device logs prior to the SMR July 2022 Release 1. The issue is described across multiple feeds (NVD, Red Hat, CNVD, CVE records) ...

CVE-2022-33692

CVE-2022-33692 refers to an information-disclosure vulnerability in Samsung’s Message App on Samsung mobile devices. The available connected documents describe that prior to the SMR July 2022 Release 1, a local attacker could access IMSI and ICCID via logs produced by the Messaging application. T...

CVE-2022-42769

CVE-2022-42769 concerns a vulnerability in the WLAN driver where a missing bounds check could enable local denial of service in WLAN services. Multiple connected sources corroborate a local impact through an out‑of‑bounds condition in the WLAN stack, with references to UNISOC chipset/WLAN context...

CVE-2022-47342

CVE-2022-47342: Affected via engineermode services on Unisoc chipsets; root cause is a missing permission check that allows local access to sensitive engineermode functionality, causing local denial of service. Impact is indicated as High for availability with local attack vector and low privileg...

CVE-2022-48250

CVE-2022-48250 concerns UNISOC chipsets’ audio service where a missing permission check may allow local privilege escalation. The connected documents consistently describe a lack of privilege verification in the audio service as the root cause, with impact stated as local escalation of privilege ...

CVE-2023-20607

CVE-2023-20607 affects the ccu component in MediaTek devices. The vulnerability is a memory corruption caused by a race condition, enabling local escalation of privilege with System execution privileges required. It does not require user interaction for exploitation. The issue is mitigated by Pat...

CVE-2023-20609

CVE-2023-20609 affects the MediaTek chip ccu component. The vulnerability is described as an out-of-bounds read caused by a logic error, potentially leading to local information disclosure with SYSTEM-level privileges required. Exploitation does not require user interaction. A patch is identified...