CVE-2021-39803

CVE-2021-39803 affects Android Media Framework (Media Codecs) with the vulnerable component C2AllocatorIon.cpp. The root cause is an out-of-bounds read caused by a use-after-free, leading to remote information disclosure without executing code, with user interaction required for exploitation. Imp...

CVE-2019-9451

CVE-2019-9451 affects the Android kernel touchscreen driver. The flaw is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with System execution privileges. Exploitation is not dependent on user interaction. The available documents do not specify a pa...

CVE-2023-20950

CVE-2023-20950 affects Android (Android-11, Android-12, Android-12L) in AlarmManagerActivity.java, enabling a bypass of background activity launch restrictions via a pendingIntent. This could cause local elevation of privilege with no additional privileges or user interaction required. The Androi...

CVE-2021-39624

CVE-2021-39624 affects Android PackageManager and can trigger a permanent DoS via resource exhaustion. The issue enables local DoS with user privileges, no user interaction required. Public details confirm impact on Android 10–12/12L (including Android-11, Android-12, Android-12L) with the strong...

CVE-2022-20124

CVE-2022-20124 affects Android devices (Android-10 through Android-13) due to a flaw in DeletePackageHelper.deletePackageX where a Guest user can bypass permissions and reset pre-loaded applications for other users, enabling local privilege escalation with no extra execution privileges and no use...

CVE-2016-10044

CVE-2016-10044 is supported by connected advisories: the Linux kernel up to version 4.7.7 contains a vulnerability in the aio_mount path. Specifically, the aio_mount function in fs/aio.c did not properly restrict execute access, enabling local users to bypass SELinux W^X policy and gain privilege...

CVE-2019-9271

The CVE-2019-9271 issue is a race condition in the Android kernel MNH driver caused by insufficient locking, leading to a use-after-free and potential privilege escalation to System level. Affected component: MNH driver in Android kernel. Impact: elevation of privilege with partial/hardening impl...

CVE-2019-9461

CVE-2019-9461 affects the Android kernel VPN routing component. The issue enables a potential information disclosure by an adjacent-network attacker, with no additional execution privileges and no user interaction required. The vulnerability is listed under the Pixel/Android 2019-09-01 bulletin w...

CVE-2021-39697

CVE-2021-39697 affects Android 11/12 via the DownloadProvider.java checkFileUriDestination path, where a missing permission check may bypass external storage private directories protection. This could allow local elevation of privilege with User-level privileges and no user interaction required. ...

CVE-2022-20456

CVE-2022-20456 : In AutomaticZenRule.java, there is a vulnerability due to a failure to persist permissions settings caused by resource exhaustion, which could lead to local elevation of privilege with no additional execution privileges needed. Affected: Android 10–13 (Android-10, Android-11, And...

CVE-2022-20481

CVE-2022-20481 affects Android 10–13. The issue involves preserving WiFi settings due to residual data after a reset, enabling local information disclosure without extra execution privileges. Root cause: residual WiFi data in multiple files. Impact: confidentiality loss (high); no integrity/avail...

CVE-2014-9322

CVE-2014-9322 affects the Linux kernel pre-3.17.5 where arch/x86/kernel/entry_64.S mishandles faults on the Stack Segment (SS) during IRET, allowing a local user to escalate privileges by accessing a GS Base address from the wrong space. Public PoC/exploitation (BadIRET) exists, illustrating loca...

CVE-2021-0707

CVE-2021-0707 is a vulnerability in the Android kernel: in the function driven by the DMA buffer subsystem, specifically in dma_buf_release of dma-buf.c , there is a memory corruption due to a use-after-free. This can lead to local privilege escalation with no additional execution privileges requ...

CVE-2023-40123

CVE-2023-40123 affects the PipMenuView.java component in the Android framework, with a bug in updateActionViews that allows a confused deputy to bypass a multi-user security boundary, causing local information disclosure without extra execution privileges. Exploitation requires no user interactio...

CVE-2023-40139

The CVE-2023-40139 entry describes a local information-disclosure vulnerability in the Android FillUi component (FillUi.java) that allows an attacker to view another user’s images due to a confused deputy. Exploitation requires no user interaction and can occur with local access; no remote/vector...

CVE-2015-1538

CVE-2015-1538 affects libstagefright (Android) via an integer overflow in the SampleTable::setSampleToChunkParams handling of MP4 atoms. The issue occurs in libstagefright before Android 5.1.1 LMY48I and can enable remote code execution through crafted MP4 data. The documented impact is remote co...

CVE-2016-5300

Expat CVE-2016-5300 is a denial-of-service vulnerability in the Expat XML parser caused by insufficient entropy used for hash initialization. The issue allows context-dependent attackers to cause CPU exhaustion via crafted identifiers in XML documents. Connected material confirms this as an Expat...

CVE-2021-39706

CVE-2021-39706 affects Android (versions 10–12). In CredentialStorage.java, onResume allows cleanup of credentials storage due to a missing permission check, enabling local elevation of privilege. Exploitation requires user interaction. The issue is categorized as EoP withHigh impact (local acces...

CVE-2025-48572

The Android Framework is vulnerable to a privilege escalation flaw caused by improper input validation in multiple locations. An attacker can exploit this to launch activities from the background and achieve local escalation of privilege without needing additional execution privileges or user int...

CVE-2026-0047

CVE-2026-0047 identifies a Critical elevation of privilege vulnerability in the Android 16 QPR2 Beta (Baklava) system component. The root cause is a missing permission check (enforceCallingOrSelfPermission(DUMP)) in the ActivityManagerService.dumpBitmapsProto() function. This flaw allows any inst...

CVE-2016-0774

CVE-2016-0774 affects Linux kernel backports in Debian wheezy (before 3.2.73-2+deb7u3) and RHEL 7.1 (before 3.10.0-229.26.2). The flaw is in the pipe_read/pipe_write paths in fs/pipe.c where the side effects of failed __copy_to_user_inatomic/__copy_from_user_inatomic calls are not properly handle...

CVE-2022-20109

CVE-2022-20109 affects MediaTek’s ion component (ALPS platform). The issue is a use-after-free caused by improper update of reference counts, enabling local escalation of privilege without additional execution privileges or user interaction. Patch ALPS06399915 exists (Issue ALPS06399915) as the r...

CVE-2023-20696

CVE-2023-20696 affects MediaTek MT6880/MT6890 preloader. The flaw is an out-of-bounds write caused by a missing bounds check in the preloader, enabling local elevation of privilege with System privileges and no user interaction required. Reported impact is high for confidentiality, integrity, and...

CVE-2021-39794

CVE-2021-39794 affects Android 11–12/12L, in the AdbService.java method broadcastPortInfo . The issue is a missing permission check that can allow apps to execute code as the shell user when wireless debugging is enabled, causing local elevation of privilege. Exploitation requires user interactio...

CVE-2022-20355

CVE-2022-20355 affects PacProxyService.java in Android (Android-10/11/12, incl. 12L). The flaw is in get() with improper input validation, causing a locally exploitable system-service crash that yields a Denial of Service with Low privileges required; no user interaction needed. Mitigation per th...

CVE-2024-31320

CVE-2024-31320 relates to Android’s setSkipPrompt in AssociationRequest.java, where an attacker could establish a companion device association without user confirmation, enabling local elevation of privilege with no user interaction. The Red Hat and CNVD entries align on an Android elevation-of-p...

CVE-2021-39695

CVE-2021-39695 affects Android 11 Framework via BasePermission.java, where a logic error enables local elevation of privilege. Exploitation requires User privileges but not user interaction. Multiple connected sources confirm the issue and link to Android’s March 2022 bulletin; patched updates ad...

CVE-2022-20145

Android CVE-2022-20145 exposes VPN credentials via a downgrade in Vpn.java: startLegacyVpnPrivileged in Android 11, enabling remote privilege escalation when connected to a malicious Wi‑Fi AP and requiring no user interaction. Affected product: Android (Android-11) framework component; vulnerabil...

CVE-2022-20346

Android versions Android-10 , Android-11 , Android-12 , and Android-12L are vulnerable to an out-of-bounds read in the updateAudioTrackInfoFromESDS_MPEG4Audio function of MPEG4Extractor.cpp. The root cause is an incorrect bounds check , which could lead to remote information disclosure without re...

CVE-2023-21096

CVE-2023-21096: A use-after-free in OnWakelockReleased within attribution_processor.cc in Android can lead to remote code execution with no privileges and no user interaction. Public documentation identifies this as a critical RCE in the System component affecting Android 12, 12L, and 13, with pa...

CVE-2016-10200

CVE-2016-10200 describes a race condition in the Linux kernel’s L2TPv3 IP Encapsulation feature that can allow a local user to escalate privileges or cause a denial of service via repeated bind() calls without correctly checking SOCK_ZAPPED status. The issue affects Linux kernels prior to 4.8.14,...

CVE-2022-20423

CVE-2022-20423 is an Android kernel vulnerability arising in rndis_set_response() in rndis.c that allows an out-of-bounds write due to integer overflow. The issue can enable local privilege escalation when a malicious USB device is attached, with physical access required (no user interaction). Pu...

CVE-2022-20572

CVE-2022-20572 affects Android kernel components: in verity_target of dm-verity-target.c there is a missing permission check that could allow modification of read-only files, enabling local privilege escalation with System-level privileges. Exploitation is local and does not require user interact...

CVE-2017-0637

Android Mediaserver exposes a remote code execution in the libhevc component when processing specially crafted media files, leading to memory corruption. Affected Android versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 (Android ID A-34064500). CVSSv3 base score 7.8 (HIGH); attack vector LOC...

CVE-2023-20966

CVE-2023-20966 is described across multiple sources as a heap buffer overflow in the inflate.c function that can cause a local elevation of privilege. The vulnerability affects Android 11–13 (Android-11, -12, -12L, -13) and requires no user interaction, with exploitation characterized as a local ...

CVE-2023-21285

CVE-2023-21285 affects Android’s MediaSessionRecord.java, where a flawed setMetadata function could allow a local attacker to view another user’s images via a confused deputy. The issue enables local information disclosure without additional execution privileges and does not require user interact...

CVE-2019-2220

CVE-2019-2220 affects the Android Framework (AppOpsService) and involves a bypass of user interaction requirements caused by mishandling of application suspend. The vulnerability could allow local information disclosure without requiring additional privileges. Affected products are Android 9 and ...

CVE-2021-39707

CVE-2021-39707 affects Android 10–12, with the issue occurring in AppRestrictionsFragment.java onReceive. The underlying problem is a confused deputy that could allow starting a phone call without the caller having permissions, enabling local escalation of privilege with no additional execution p...

CVE-2022-21745

CVE-2022-21745 describes a memory corruption via a use-after-free in WIFI Firmware, enabling remote privilege escalation when devices connect to an attacker‑controlled Wi‑Fi hotspot. The issue requires no user interaction and is exploitable by an adjacent network. Public references indicate a pat...

CVE-2022-20348

CVE-2022-20348 affects LocationServicesWifiScanningPreferenceController.java in Android (Android-10/11/12/12L). The issue is an admin restriction bypass caused by a missing permission check in updateState, enabling local escalation of privilege without extra execution privileges and with no user ...

CVE-2022-20489

Summary: CVE-2022-20489 describes an elevation-of-privilege issue in Android related to AutomaticZenRule.java, allowing local escalation without extra execution privileges and no user interaction. Affected software: Android devices (Android-10 to Android-13) as listed in the CVE entry and Android...

CVE-2022-20219

CVE-2022-20219 affects Android Framework due to a logic error in StorageManagerService.java and UserManagerService.java that can leave user directories unencrypted, causing local information disclosure without extra privileges or user interaction. The issue is documented for Android-10, Android-1...

CVE-2023-20942

The CVE-2023-20942 issue affects Android’s AudioFlinger.cpp, specifically in openMmapStream, where a logic error can allow recording audio without showing the microphone privacy indicator. This vulnerability enables local privilege escalation with no extra execution privileges and requires no use...

CVE-2024-23717

Google Android is affected by an elevation of privilege vulnerability due to improper input validation in the access_secure_service_from_temp_bond method within the btm_sec.cc file. This flaw could allow an attacker to achieve keystroke injection , leading to a remote (proximal/adjacent) escalati...

CVE-2017-0553

CVE-2017-0553 is a libnl/libnl3 integer overflow in nlmsg_reserve() = 3.3.0 (or the specific patched package version as provided by distributions; examples include Arch Linux ASA-201706-35 recommending 3.3.0-1 and Red Hat/CentOS advisories updating libnl3). Several advisories reference this CVE (...

CVE-2019-2227

CVE-2019-2227 affects Android devices via a DeepCopy bug in btif_av.cc that can trigger an out-of-bounds read, enabling remote information disclosure over Bluetooth without user interaction. The entry covers Android 9 and 10, with impact described as information disclosure (confidentiality) and a...

CVE-2022-20011

CVE-2022-20011 : Affected Android versions 10–12/12L have a local information disclosure in NotificationManagerService.getArray, where a leak of one user’s notifications to another is possible due to a missing check. Exploitation requires local access with no user interaction; impact is informati...

CVE-2022-20140

CVE-2022-20140 is a Bluetooth GATT stack vulnerability in Android 12/12L where an out-of-bounds write occurs in read_multi_rsp in gatt_sr.cc due to an incorrect bounds check. This can lead to remote escalation of privilege with no user interaction and requires no additional execution privileges. ...

CVE-2023-20917

CVE-2023-20917 affects Android 11–13 and is related to a logic error in ResolverActivity.java (onTargetSelected) that could allow a local escalation of privilege by sharing the wrong file. The exploit requires local access with no user interaction; impact is described as high (C/H/I/A). The provi...

CVE-2023-21081

CVE-2023-21081 affects Google Android (Android 11, 12, 12L, 13) via the PackageInstallerService.java and related files. A logic error in multiple functions could bypass background activity launch restrictions, enabling local elevation of privilege without requiring additional execution privileges...