CVE-2023-21369

CVE-2023-21369 concerns Android: a permissions bypass in Usage Access that can cause a local denial of service by displaying a Settings usage access restriction toggle screen. Exploitation requires user interaction but not remote code execution; impact is limited to DoS on the device. Affected co...

CVE-2023-21398

CVE-2023-21398 affects the Android ecosystem with a logic error in the sdksandbox component that enables a strandhogg-style overlay attack, leading to local elevation of privilege without extra execution privileges and with no user interaction required. Multiple sources (NVD, Red Hat, CNVD, CN) d...

CVE-2023-32828

The CVE-2023-32828 issue affects the vpu component and is described as an integer overflow causing an out-of-bounds write. This could enable local escalation of privilege with System-level execution privileges required; no user interaction is needed. Reported patch ID: ALPS07767817 (Issue ALPS077...

CVE-2023-42640

Technical details are not publicly provided in the supplied documents. Monitor for updates from vendors and CVEs to confirm affected products, root cause, and remediation.

CVE-2023-42644

CVE-2023-42644 affects the dm service, where a possible missing permission check could permit local information disclosure without requiring additional execution privileges. Connected sources consistently describe a local-privilege-check omission as the root cause. Consequences are limited to inf...

CVE-2024-20138

A security vulnerability exists in the wlan driver of MediaTek Chipsets due to improper input validation. This flaw can lead to an out-of-bounds read , potentially resulting in remote information disclosure without requiring additional execution privileges or user interaction. A patch is availabl...

CVE-2024-39438

The CVE-2024-39438 issue affects the linkturbonative service, caused by improper input validation that enables command injection. Exploitation could grant local escalation to SYSTEM-equivalent privileges. Connected sources (PT-2024-28497, NVD/ CVE records, Red Hat advisory) confirm the vulnerabil...

CVE-2026-0009

The CVE-2026-0009 entry describes a tapjacking vulnerability caused by a logic error in multiple locations. This flaw could lead to local escalation of privilege without requiring additional execution privileges or user interaction. Technical details regarding the specific affected software, comp...

CVE-2026-0029

A logic error in the _pkvm_init_vm function within pkvm.c in the Google Android operating system can lead to memory corruption . This vulnerability allows for local escalation of privilege without requiring additional execution privileges or user interaction. While the NCSC reports that Google h...

CVE-2011-2357

CVE-2011-2357 describes a cross-application scripting flaw in Android’s Browser URL loading, enabling a non-privileged app to inject JavaScript into arbitrary domains and break sandboxing. The vulnerability has two exploitation vectors: (1) exhausting MAX_TABS and loading a target URL followed by...

CVE-2014-9786

CVE-2014-9786 describes a heap-based buffer overflow in the Qualcomm camera actuator driver (drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c) within Android on Nexus 5 and 7 (2013) devices prior to 2016-07-05. The underlying fault allows a crafted application to escalate privi...

CVE-2014-9886

CVE-2014-9886 affects Android on Nexus 5 and Nexus 7 (2013) devices, specifically the Qualcomm component under arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c. The vulnerability is caused by improper validation of input parameters in USF, enabling a local attacker to gain privileges via a crafted appl...

CVE-2015-6634

CVE-2015-6634 concerns memory corruption/remote code execution in Android’s display drivers prior to 5.1.1 LMY48Z when processing a crafted media file. The vulnerability, tracked as internal bug 24163261, could allow remote attackers to execute arbitrary code or cause a denial of service via medi...

CVE-2016-2428

CVE-2016-2428 affects Android mediaserver: libAACdec/src/aacdec_drc.cpp in mediaserver allows a crafted media file to cause memory corruption via inadequate thread limiting, enabling remote code execution or a denial of service. Affected Android releases: 4.x before 4.4.4; 5.0.x before 5.0.2; 5.1...

CVE-2016-6492

CVE-2016-6492: In MediaTek's Linux driver, MT6573FDVT_SetRegHW (camera_fdvt.c) allows local privilege escalation via MT6573FDVTIOC_T_SET_FDCONF_CMD ioctl. The issue stems from input handling: code copies user data into a local buffer with copy_from_user, testing pREGIO->u4Count length without ...

CVE-2016-6733

The CVE-2016-6733 entry describes an elevation-of-privilege vulnerability in the NVIDIA GPU driver for Android prior to 2016-11-05 that could allow a local malicious app to execute code in the kernel context. The impact is described as Critical, including potential permanent device compromise req...

CVE-2016-6735

CVE-2016-6735 describes an elevation-of-privilege in the NVIDIA GPU driver on Android devices prior to 2016-11-05 that could allow a local malicious app to execute arbitrary code in the kernel context. The initial entry and multiple connected sources confirm the issue as a local privilege escalat...

CVE-2017-0326

CVE-2017-0326 affects the NVIDIA Tegra kernel driver (Tegra Display Controller). The vulnerability stems from copying an input buffer to an output buffer without checking input size, potentially enabling a denial of service. Affected component: NVIDIA Tegra kernel/Video driver; root cause: missin...

CVE-2017-0407

CVE-2017-0407 describes a remote code execution vulnerability in Android’s Mediaserver affecting the libhevc library. The issue can be triggered by processing a specially crafted media file, leading to memory corruption within the Mediaserver process. Affected products/versions are Android 6.0–7....

CVE-2017-0420

CVE-2017-0420 is an information-disclosure vulnerability in AOSP Mail. A local malicious app could bypass OS protections that isolate app data, potentially accessing data from other apps. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The connected sources conf...

CVE-2017-0449

CVE-2017-0449 describes an elevation-of-privilege in the Broadcom Wi‑Fi driver for Android devices using the 3.10 kernel (e.g., Nexus 6P/Nexus 6). A local, privileged process could be exploited by a malicious user/application to execute arbitrary code in the kernel context. The CNVD entry corrobo...

CVE-2017-0465

CVE-2017-0465 describes an elevation of privilege vulnerability in the Qualcomm ADSPRPC driver that could allow a local attacker to execute arbitrary code in the kernel context on Android devices. Affected components/versions in the public records include the Android kernel (Kernel-3.10, Kernel-3...

CVE-2017-0478

CVE-2017-0478 describes a remote code execution in the Android Framesequence library. A crafted file could cause an unprivileged process to execute arbitrary code within the attacker’s control. Affected Android versions include 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The available sources confi...

CVE-2017-0497

CVE-2017-0497 describes a denial-of-service vulnerability in Android's Mediaserver. A specially crafted file could cause a device hang or reboot on affected builds (Android 7.0 and 7.1.1). The issue is documented with moderate severity and an uncommon device configuration required for exploitatio...

CVE-2017-0517

CVE-2017-0517 is an elevation-of-privilege flaw in the MediaTek hardware sensor driver on Android. A local, privileged process or application could cause the kernel to execute arbitrary code. Affected component: MediaTek hardware sensor driver (Android). Impact: kernel context compromise; high se...

CVE-2017-0635

CVE-2017-0635 describes a remote denial-of-service in Android’s Mediaserver, via HevcUtils.cpp in libstagefright. An attacker can craft a file that causes a device hang or reboot. Affected products/versions (per the provided doc): Android 7.0, 7.1.1, and 7.1.2. The vulnerability arises from proce...

CVE-2017-0749

Technical details about CVE-2017-0749 are not publicly provided in the connected documents. The sources present only high-level descriptions (elevation of privilege in Android/Linux kernel). Monitor for updates from the vendors and security advisories.

CVE-2017-0780

CVE-2017-0780 is a DoS in Android's runtime (FrameSequenceDrawable) triggered when processing GIF-based frames in MMS. The root cause is a Null Pointer Exception path: acquireAndValidateBitmap can accept a null or invalid Bitmap from a custom FrameSequenceDrawable.BitmapProvider, leading to an NP...

CVE-2017-0794

CVE-2017-0794 is an elevation of privilege vulnerability affecting the Upstream kernel SCSI driver in the Android kernel. The issue is a local vulnerability (CVSSv3: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) that could allow a local attacker to escalate privileges, requiring user interaction for explo...

CVE-2017-0819

The CVE-2017-0819 entry concerns a DoS vulnerability in Android’s media framework. The connected Pixel/Nexus security bulletin entry IPTV (Android security bulletin) lists CVE-2017-0819 under the Media framework with type NSI/DoS and indicates affected Android versions 7.0, 7.1.1, 7.1.2, and 8.0,...

CVE-2017-0863

CVE-2017-0863 is an elevation-of-privilege vulnerability in the Upstream kernel video driver affecting the Android kernel on Pixel/Nexus devices. The issue enables a local attacker to escalate privileges (local exploit, low attack complexity, no user interaction), with partial confidentiality, in...

CVE-2017-13266

CVE-2017-13266 affects Android and is caused by a missing bounds check in the function avrc_pars_vendor_cmd of avrc_pars_tg.cc , leading to possible stack corruption. The consequence is remote code execution with no additional privileges and no user interaction required. Affected versions include...

CVE-2017-13282

CVE-2017-13282 affects Android where in the function avrc_ctrl_pars_vendor_rsp (file avrc_pars_ct.cc) a missing bounds check can cause a stack buffer overflow. The flaw could allow remote code execution with no privileges or user interaction required, affecting Android versions 7.0, 7.1.1, 7.1.2,...

CVE-2017-18054

CVE-2017-18054 describes a buffer overflow risk in Qualcomm WMA within Android CAF builds, caused by improper input validation for num_vdev_mac_entries in wma_pdev_hw_mode_transition_evt_handler() and the value received from firmware. The vulnerability affects Android for MSM, Firefox OS for MSM,...

CVE-2017-3748

CVE-2017-3748 concerns Lenovo VIBE phones with improper access controls in the nac_server component. The issue, described as enabling privilege escalation to root when used in conjunction with CVE-2017-3749 and CVE-2017-3750, affects Android devices running affected Lenovo software. The connected...

CVE-2017-6247

CVE-2017-6247 affects the NVIDIA Tegra kernel audio driver (Audio DSP). A vulnerability in the driver allows an attacker to copy an invalid user parameter without proper input size checking, potentially leading to denial of service or privilege escalation to the kernel. Impact is described as loc...

CVE-2017-8255

CVE-2017-8255 affects Qualcomm bootloader components in Android CAF builds that use the Linux kernel. The issue is described as an integer overflow in the bootloader, leading to elevation of privilege (EoP) within the kernel context. Public sources in the provided documents identify the vulnerabi...

CVE-2017-8260

CVE-2017-8260 is a Qualcomm component issue mapped to the Camera driver in Qualcomm parts. Root cause: a type downcast in CAF Linux kernel code allows a value to bypass validation, enabling an out-of-bounds write. Impact: local kernel context elevation via the Camera driver (per the CVE entry in ...

CVE-2018-21057

CVE-2018-21057 concerns a stack-based buffer overflow in the Shannon Baseband on Samsung mobile devices running N(7.x), O(8.x), and P(9.0) (Exynos chipsets). The vulnerability is identified by Samsung as SVE-2018-12757. Publicly provided details in the connected documents confirm the affected sub...

CVE-2018-21070

CVE-2018-21070 affects Samsung mobile devices running N(7.x) or O(8.0) on MSM8998/SDM845 chipsets. The issue is a missing Bootloader integrity check that allows bypassing Secure Boot and gaining root access. The description from multiple sources attributes the vulnerability to a bootloader integr...

CVE-2018-21087

CVE-2018-21087 affects Samsung mobile devices running L(5.x), M(6.x), and N(7.x) software. The vulnerability is a heap-based overflow in the vnswap path reached via the store function, leading to privilege escalation. Affected component/function: vnswap heap allocation/overflow within the store o...

CVE-2018-9340

An information disclosure vulnerability exists in the Framework component of Google Android . The root cause is located in ResStringPool::setTo of ResourceTypes.cpp, where an attacker can control the mStringPoolSize value to be out of bounds. This flaw allows an attacker to obtain unauthorized in...

CVE-2018-9366

CVE-2018-9366 affects Google/Android devices with the MediaTek IMSA component. In IMSA_Recv_Thread and VT_IMCB_Thread (IMSAClient.cpp and VideoTelephony.c), an out-of-bounds write due to an integer overflow is described, leading to local escalation of privilege with no user interaction required. ...

CVE-2018-9408

The CVE-2018-9408 issue affects the GPS subsystem, specifically the m3326_gps_write and m3326_gps_read handlers in gps.s. The vulnerability is described as an out-of-bounds read caused by a missing bounds check, enabling local information disclosure with system execution privileges required. Expl...

CVE-2018-9433

A type confusion vulnerability exists in the ArrayConcatVisitor of builtins-array.cc within the Framework component of Google Android versions 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 . This flaw stems from improper input validation and can be exploited via a specially crafted PAC file to achieve remote...

CVE-2018-9462

A vulnerability exists in the Google Android Kernel component, specifically within the Touchscreen driver. An incorrect bounds check in the store_cmd function of ftm4_pdc.c can lead to an out-of-bounds write . This flaw allows for a local elevation of privilege (EoP) , requiring System execution ...

CVE-2018-9509

CVE-2018-9509 affects Android devices with Bluetooth stack exposure. The issue is an out-of-bounds read in smp_proc_master_id of smp_act.cc due to a missing bounds check, which could allow remote information disclosure without extra privileges and without user interaction. Affected products/versi...

CVE-2019-2050

CVE-2019-2050 affects Android 8.0–9 due to a use-after-free in tearDownClientInterface() within WificondControl.java caused by improper locking. This enables local elevation of privilege with no additional execution privileges and no user interaction required. Public docs indicate a platform-wide...

CVE-2019-2067

CVE-2019-2067 affects libxaac in Android 10, where a missing bounds check allows an out-of-bounds write leading to remote code execution. Exploitation is network-scoped with user interaction required for exploitation (per CVE details). Root cause: bounds-check omission in libxaac. Affected produc...

CVE-2019-20777

CVE-2019-20777 affects LG mobile devices running Android 7.0–9.0 (V40 and G7 family). The issue is in WapService during OTA Provisioning, where OTA provisioning handling is mishandled, constituting the root cause. Documents describe the vulnerable component and affected OS versions but do not pro...