CVE-2021-0537

CVE-2021-0537 refers to an elevation-of-privilege in Android’s WiFiInstaller.java. The issue arises on Android 11 where an attacker could exploit a tapjacking/overlay attack during onCreate to install a malicious Hotspot 2.0 configuration, enabling local privilege escalation with user-interaction...

CVE-2021-0541

The CVE-2021-0541 issue affects Android 11, tied to phNxpNciHal_ext_process_nfc_init_rsp in phNxpNciHal_ext.cc. It describes a possible out-of-bounds read due to a missing bounds check, enabling local information disclosure in the NFC server with system-level privileges needed. Impact notes from ...

CVE-2021-0673

CVE-2021-0673 : In Audio Aurisys HAL, a missing permission check allows local escalation of privilege with no user interaction. Descriptions across sources confirm a permission bypass affecting the Audio HAL layer, with a patch identified as ALPS05977326 (Issue ID ALPS05977326). The vulnerability...

CVE-2021-0994

CVE-2021-0994 corresponds to an Android information-disclosure flaw described across multiple sources (NVD, Red Hat RH-CVE, CNVD, OSV) where an attacker can infer if a target app is installed by exploiting a missing permission check in ConnectivityService.java (requestRouteToHostAddress). This ca...

CVE-2021-1012

CVE-2021-1012 affects Android 12 and is described in multiple sources as a side-channel information-disclosure vulnerability within NotificationAccessDetails.java (onResume), enabling an app to infer whether another app is installed without query permissions. The core issue is a local information...

CVE-2021-1018

CVE-2021-1018 describes a local information-disclosure issue in Android 12: in AudioService.adjustStreamVolume, a side-channel could reveal whether an app is installed without query permissions, enabling limited information disclosure without extra privileges. Multiple connected records (NVD, Red...

CVE-2021-1047

CVE-2021-1047 affects Android kernel code (cm_access_control.c: valid_ipc_dram_addr). The issue arises from an integer overflow that enables an out-of-bounds read, leading to potential local information disclosure with system-level privileges. Exploitation is described as local and does not requi...

CVE-2021-25335

Technical details about CVE-2021-25335 are not publicly available in the provided connected documents. No affected product/version specifics or exploitation details are given here. Monitor for updates from Samsung security advisories and NVD entries.

CVE-2021-25444

CVE-2021-25444 is a vulnerability in Samsung’s Keymaster Trusted Application (TA) running in the ARM TrustZone Secure World. The issue is an IV reuse flaw in the Keymaster TA that decrypts custom key blobs, enabling a privileged process to access hardware-backed keys. Affected devices include Sam...

CVE-2022-20249

CVE-2022-20249 affects Android 13 via a side-channel vulnerability in the LocaleManager that can disclose whether an app is installed without query permissions, enabling local information disclosure with no extra execution privileges. The root cause is information leakage through a locale-related...

CVE-2022-20268

The CVE-2022-20268 entry concerns Android 13’s RestrictionsManager. A vulnerability allows sending a broadcast that should be restricted to system apps, bypassing permissions and enabling local privilege escalation on enterprise-managed devices without extra execution privileges. Exploitation req...

CVE-2022-20272

CVE-2022-20272 affects Android 13 and is tied to the PermissionController component. The issue stems from misleading text about the default SMS app’s permission set, which could lead to local information disclosure. Impact is limited to information exposure with user privileges required and explo...

CVE-2022-20299

CVE-2022-20299 affects the Android 13 ContentService. The vulnerability stems from a missing permission check that allows checking if a given account exists on the device, leading to local information disclosure. Exploitation would require local access with user privileges but does not require us...

CVE-2022-20311

CVE-2022-20311 affects Android 13 Telecomm: a missing permission check could disclose registered self-managed phone accounts, enabling local information disclosure with low risk of exploitation (attack vector LOCAL, UI:N). Root cause is a permission check omission in Telecomm that exposes sensiti...

CVE-2022-20331

CVE-2022-20331 affects the Android 13 Framework. A tapjacking/overlay flaw can enable a work profile without user consent, causing local escalation of privilege. Exploitation requires user interaction but does not need extra execution privileges. CVSS v3.1 base score is High (7.8) with LOCAL atta...

CVE-2022-30758

Technical details about CVE-2022-30758 are not publicly provided in the supplied documents. No affected versions, root cause, or remediation details are present here. Monitor for updates from security advisories and vendor advisories.

CVE-2022-32610

CVE-2022-32610 concerns the vcu component, where a race condition can cause a use-after-free, enabling local escalation to SYSTEM without user interaction. The underlying issue is a memory management flaw leading to a potential privilege compromise. A patch is available under Patch ID ALPS0720347...

CVE-2022-32634

CVE-2022-32634 concerns the MediaTek ccci component, with an out-of-bounds write caused by improper input validation. The vulnerability could enable local escalation of privilege with SYSTEM execution privileges, and exploitation does not require user interaction. A patch is identified as ALPS071...

CVE-2022-33722

Affected product: Samsung Smart View (prior to SMR Aug-2022 Release 1). Vulnerability: Implicit Intent hijacking that allows an attacker to access the MAC address of a connected device. Root cause / nature: Vulnerability in Smart View’s handling of implicit intents (modeled as an intent hijack). ...

CVE-2022-38680

In CVE-2022-38680, the vulnerability is in the WLAN driver where a missing parameter check can allow local denial of service against WLAN services. Affected component: WLAN driver (details on exact versions not provided). Root cause: insufficient validation of parameters leading to resource disru...

CVE-2022-38683

CVE-2022-38683 affects the contacts service, where a missing permission check could allow local denial of service without additional execution privileges. Public documents consistently describe a local, privilege-check issue in the contacts service as the root cause. The CVSS vector indicates LOC...

CVE-2022-42767

A security vulnerability exists in the wlan driver of the UNISOC chipset due to a missing bounds check . This flaw can result in a local denial of service (DoS) for wlan services. While the root cause is identified as an input validation error, specific affected versions of the driver are not pro...

CVE-2022-47327

CVE-2022-47327 affects WLAN driver components with a missing permission check that can lead to local information disclosure. Multiple connected sources (including Red Hat, NVD, CNNVD) corroborate the core flaw: unauthorized local access to sensitive information due to insufficient privilege valid...

CVE-2022-47332

The CVE-2022-47332 issue concerns a possible missing permission check in the wlan driver, leading to local information disclosure. Multiple connected sources (e.g., Red Hat advisory, NVD entry, CNNVD) describe the vulnerability as a privilege-check gap in the wlan driver that could enable an atta...

CVE-2022-47356

CVE-2022-47356 concerns a missing permission check in the log service, which can lead to local denial of service. The vulnerability is described consistently across multiple sources as enabling a local attacker to exhaust the log service’s availability due to inadequate authorization. The NVD ent...

CVE-2022-47361

In CVE-2022-47361, the issue is a missing permission check in the firewall service, enabling local privilege escalation to system execution privileges. The vulnerability is described across multiple sources with a CVSS v3.1 base score of 7.8 (LOCAL attack vector, LOW exploit complexity, LOW privi...

CVE-2022-47452

CVE-2022-47452 affects the gnss driver, caused by a missing bounds check that enables an out-of-bounds write. This can lead to a local denial of service in WLAN services. Exploit details, affected versions, and a concrete fix are not provided in the supplied documents; some sources (e.g., PT-2023...

CVE-2023-20661

CVE-2023-20661 affects the wlan component (MediaTek-related stack) and is caused by an out-of-bounds write resulting from an integer overflow. The vulnerability can lead to local privilege escalation with System execution privileges required and does not require user interaction. Reported impact ...

CVE-2023-42651

Technical details about CVE-2023-42651 are not publicly provided in the connected documents. The available sources reiterate a local information disclosure in engineermode without additional execution privileges, but do not specify affected products, versions, exploitability, or fixes. Monitor fo...

CVE-2024-20038

A security vulnerability exists in MediaTek chips within the pq module due to an incorrect bounds check . This flaw allows for a possible out-of-bounds read , which could result in local information disclosure . Exploitation requires System execution privileges and does not require user interacti...

CVE-2025-20642

CVE-2025-20642 describes an out-of-bounds write in the DA module caused by a missing bounds check. This could enable local privilege escalation when an attacker has physical access to the device, with user interaction required for exploitation. A patch is identified as ALPS09291146 (MSV-2057); no...

CVE-2025-20651

A buffer error vulnerability exists in MediaTek Chipsets due to a missing bounds check , which can lead to an out-of-bounds read . If an attacker has physical access to the device, they could cause local information disclosure without needing additional execution privileges. Exploitation requires...

CVE-2010-4832

The CVE-2010-4832 issue affects Android OS prior to 2.2, where an incorrect SSL certificate may be displayed in certain cases, allowing remote attackers to spoof trusted sites. The root cause is that certificate verification could be performed against the certificate of the last loaded resource o...

CVE-2014-9780

The CVE-2014-9780 issue affects the Qualcomm mdp3_ctrl.c driver in Android before 2016-07-05 on Nexus 5, 5X, and 6P. It does not validate start and length values, enabling local privilege escalation via a crafted app. Root cause: improper input validation in the MDSS hardware block. Impact stated...

CVE-2014-9880

CVE-2014-9880 affects Android on Nexus 7 (2013) via Qualcomm drivers: the venc.c video engine fails to validate VEN_IOCTL_GET_SEQUENCE_HDR ioctl, enabling privilege escalation with a crafted app. Root cause: lack of validation in drivers/video/msm/vidc/common/enc/venc.c. Android bug 28769352 and ...

CVE-2015-1528

CVE-2015-1528 is an Android local vulnerability: integer overflow in libcutils/native_handle.c:native_handle_create can allow a crafted app to escalate privileges or trigger Binder heap memory corruption (DoS) on Android versions prior to 5.1.1 LMY48M. The issue is tied to internal bug 19334482. ...

CVE-2015-3839

CVE-2015-3839 affects Android 5.1.1 and earlier. The vulnerability lies in the updateMessageStatus function, where a local user can trigger a NULL pointer dereference, causing a denial of service (process crash). The issue is documented across sources as a local-exploit scenario with no remote ac...

CVE-2015-8999

CVE-2015-8999: The vulnerability is described as a TrustZone buffer overflow that can occur in Android CAF builds when loading an ELF file. Connected sources corroborate a TrustZone buffer overflow in Android’s TrustZone component with potential for arbitrary code execution or denial of service, ...

CVE-2016-0834

CVE-2016-0834 affects Android 6.x mediaserver with an unspecified media codec vulnerability that allows remote code execution or memory corruption via a crafted media file (internal bug 26220548). The NVD entry notes a CVSSv3 base score of 8.4 (HIGH) with local attack vector, no privileges, and n...

CVE-2016-2463

CVE-2016-2463 affects Android Mediaserver’s libstagefright h264dec, where multiple integer overflows in the media parsing path can trigger memory corruption. The issue permits remote code execution or denial of service when processing crafted video files. Vulnerable Android versions include 4.x u...

CVE-2016-2475

CVE-2016-2475 refers to an input validation vulnerability in the Broadcom Wi‑Fi driver that, on Android devices, could enable a local attacker to gain privileges for certain system calls via a crafted application. The issue affects Nexus devices (Nexus 5, 6, 6P, 7 (2013), 9, Nexus Player, Pixel C...

CVE-2016-2489

CVE-2016-2489 is an elevation-of-privilege vulnerability in the Qualcomm video driver for Android, affecting Nexus devices (Nexus 5, 5X, 6, 6P) before 2016-06-01. A crafted local application could trigger memory/cpu access in the Qualcomm video driver, enabling code execution with kernel privileg...

CVE-2017-0413

CVE-2017-0413 is an information-disclosure vulnerability in AOSP Messaging on Android (versions 6.0, 6.0.1, 7.0, 7.1.1). The issue could allow a local malicious application to bypass OS protections that isolate app data, exposing data the app should not access. The description and connected sourc...

CVE-2017-0418

CVE-2017-0418 is an elevation of privilege in Android’s Audioserver that could allow a local malicious application to run arbitrary code in the context of a privileged process. Affected products are Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The provided documents consisten...

CVE-2017-0466

CVE-2017-0466 is a remote code execution vulnerability in Android’s Mediaserver. A specially crafted file could trigger memory corruption during media file and data processing, allowing an attacker to execute code within the Mediaserver process. Affected products/versions are Android 6.0, 6.0.1, ...

CVE-2017-0486

CVE-2017-0486 describes a denial-of-service vulnerability in Android’s Mediaserver. A specially crafted file could cause a device Hang or Reboot on affected Android versions (6.0, 6.0.1, 7.0, 7.1.1). The issue is described as High severity; attack vector is listed as Local (per CVSS3) with user i...

CVE-2017-0493

CVE-2017-0493 is an information-disclosure vulnerability in Android’s File-Based Encryption that could allow a local attacker to bypass lock-screen protections. Affected products/versions (from sources): Android 7.0 and 7.1.1. Root cause: information disclosure within File-Based Encryption (no fu...

CVE-2017-0555

CVE-2017-0555 is an information disclosure flaw in Android’s Mediaserver libavc component. The vulnerability could allow a local malicious app to access data outside its permissions by exploiting Mediaserver during media processing. Affected: Android 6.0–7.1.1 (versions 6.0, 6.0.1, 7.0, 7.1.1). R...

CVE-2017-0625

The CVE-2017-0625 entry corresponds to an information disclosure vulnerability in the MediaTek command queue driver affecting Android. Connected CNVD records describe impact as local information disclosure enabling a malicious local app to access data outside its permissions, with Android version...

CVE-2017-0646

CVE-2017-0646 is an information-disclosure vulnerability in the Android Bluetooth component that could allow a local malicious app to access data beyond its permissions. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID A-33899337). The connected...