CVE-2016-5300

Expat CVE-2016-5300 is a denial-of-service vulnerability in the Expat XML parser caused by insufficient entropy used for hash initialization. The issue allows context-dependent attackers to cause CPU exhaustion via crafted identifiers in XML documents. Connected material confirms this as an Expat...

CVE-2022-20124

CVE-2022-20124 affects Android devices (Android-10 through Android-13) due to a flaw in DeletePackageHelper.deletePackageX where a Guest user can bypass permissions and reset pre-loaded applications for other users, enabling local privilege escalation with no extra execution privileges and no use...

CVE-2019-2232

CVE-2019-2232 affects Android Framework TextLine.java (handleRun) and can cause remote denial of service via improper input validation when processing Unicode. Impact: DoS with high severity (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Affected: Android 8.0–10; exploit requires no user interaction and ...

CVE-2019-9461

CVE-2019-9461 affects the Android kernel VPN routing component. The issue enables a potential information disclosure by an adjacent-network attacker, with no additional execution privileges and no user interaction required. The vulnerability is listed under the Pixel/Android 2019-09-01 bulletin w...

CVE-2021-39706

CVE-2021-39706 affects Android (versions 10–12). In CredentialStorage.java, onResume allows cleanup of credentials storage due to a missing permission check, enabling local elevation of privilege. Exploitation requires user interaction. The issue is categorized as EoP withHigh impact (local acces...

CVE-2022-20481

CVE-2022-20481 affects Android 10–13. The issue involves preserving WiFi settings due to residual data after a reset, enabling local information disclosure without extra execution privileges. Root cause: residual WiFi data in multiple files. Impact: confidentiality loss (high); no integrity/avail...

CVE-2019-9271

The CVE-2019-9271 issue is a race condition in the Android kernel MNH driver caused by insufficient locking, leading to a use-after-free and potential privilege escalation to System level. Affected component: MNH driver in Android kernel. Impact: elevation of privilege with partial/hardening impl...

CVE-2020-8899

CVE-2020-8899 covers a buffer/heap overflow in Samsung’s Quram qmg (Qmage) codec used by Android Skia, affecting O(8.x), P(9.0), and Q(10.0). An unauthenticated MMS can trigger an RCE via a heap-based overflow in the Quram/QMG image decoding path (QMG/QM formats), with Project Zero documenting th...

CVE-2021-0707

CVE-2021-0707 is a vulnerability in the Android kernel: in the function driven by the DMA buffer subsystem, specifically in dma_buf_release of dma-buf.c , there is a memory corruption due to a use-after-free. This can lead to local privilege escalation with no additional execution privileges requ...

CVE-2023-40123

CVE-2023-40123 affects the PipMenuView.java component in the Android framework, with a bug in updateActionViews that allows a confused deputy to bypass a multi-user security boundary, causing local information disclosure without extra execution privileges. Exploitation requires no user interactio...

CVE-2022-20456

CVE-2022-20456 : In AutomaticZenRule.java, there is a vulnerability due to a failure to persist permissions settings caused by resource exhaustion, which could lead to local elevation of privilege with no additional execution privileges needed. Affected: Android 10–13 (Android-10, Android-11, And...

CVE-2022-20109

CVE-2022-20109 affects MediaTek’s ion component (ALPS platform). The issue is a use-after-free caused by improper update of reference counts, enabling local escalation of privilege without additional execution privileges or user interaction. Patch ALPS06399915 exists (Issue ALPS06399915) as the r...

CVE-2022-20572

CVE-2022-20572 affects Android kernel components: in verity_target of dm-verity-target.c there is a missing permission check that could allow modification of read-only files, enabling local privilege escalation with System-level privileges. Exploitation is local and does not require user interact...

CVE-2023-40139

The CVE-2023-40139 entry describes a local information-disclosure vulnerability in the Android FillUi component (FillUi.java) that allows an attacker to view another user’s images due to a confused deputy. Exploitation requires no user interaction and can occur with local access; no remote/vector...

CVE-2016-0774

CVE-2016-0774 affects Linux kernel backports in Debian wheezy (before 3.2.73-2+deb7u3) and RHEL 7.1 (before 3.10.0-229.26.2). The flaw is in the pipe_read/pipe_write paths in fs/pipe.c where the side effects of failed __copy_to_user_inatomic/__copy_from_user_inatomic calls are not properly handle...

CVE-2016-10044

CVE-2016-10044 is supported by connected advisories: the Linux kernel up to version 4.7.7 contains a vulnerability in the aio_mount path. Specifically, the aio_mount function in fs/aio.c did not properly restrict execute access, enabling local users to bypass SELinux W^X policy and gain privilege...

CVE-2016-10200

CVE-2016-10200 describes a race condition in the Linux kernel’s L2TPv3 IP Encapsulation feature that can allow a local user to escalate privileges or cause a denial of service via repeated bind() calls without correctly checking SOCK_ZAPPED status. The issue affects Linux kernels prior to 4.8.14,...

CVE-2021-39794

CVE-2021-39794 affects Android 11–12/12L, in the AdbService.java method broadcastPortInfo . The issue is a missing permission check that can allow apps to execute code as the shell user when wireless debugging is enabled, causing local elevation of privilege. Exploitation requires user interactio...

CVE-2023-21096

CVE-2023-21096: A use-after-free in OnWakelockReleased within attribution_processor.cc in Android can lead to remote code execution with no privileges and no user interaction. Public documentation identifies this as a critical RCE in the System component affecting Android 12, 12L, and 13, with pa...

CVE-2025-48581

CVE-2025-48581 corresponds to a logic error in the Android system component apexd.cpp, within the VerifyNoOverlapInSessions function, that can block security updates. The impact is local privilege escalation with no additional execution privileges required and no user interaction needed for explo...

CVE-2026-0047

In Android, CVE-2026-0047 relates to a missing permission check in ActivityManagerService.java’s dumpBitmapsProto, allowing an app to access private information and achieve local privilege escalation with no extra execution privileges or user interaction required. The description notes a local es...

CVE-2015-1538

CVE-2015-1538 affects libstagefright (Android) via an integer overflow in the SampleTable::setSampleToChunkParams handling of MP4 atoms. The issue occurs in libstagefright before Android 5.1.1 LMY48I and can enable remote code execution through crafted MP4 data. The documented impact is remote co...

CVE-2021-39695

CVE-2021-39695 affects Android 11 Framework via BasePermission.java, where a logic error enables local elevation of privilege. Exploitation requires User privileges but not user interaction. Multiple connected sources confirm the issue and link to Android’s March 2022 bulletin; patched updates ad...

CVE-2022-20346

CVE-2022-20346 affects the Android Media Framework, specifically the updateAudioTrackInfoFromESDS_MPEG4Audio path in MPEG4Extractor.cpp. The root cause is an incorrect bounds check that enables an out-of-bounds read, which could lead to remote information disclosure. The description indicates no ...

CVE-2021-39707

CVE-2021-39707 affects Android 10–12, with the issue occurring in AppRestrictionsFragment.java onReceive. The underlying problem is a confused deputy that could allow starting a phone call without the caller having permissions, enabling local escalation of privilege with no additional execution p...

CVE-2022-20145

Android CVE-2022-20145 exposes VPN credentials via a downgrade in Vpn.java: startLegacyVpnPrivileged in Android 11, enabling remote privilege escalation when connected to a malicious Wi‑Fi AP and requiring no user interaction. Affected product: Android (Android-11) framework component; vulnerabil...

CVE-2017-0553

CVE-2017-0553 is a libnl/libnl3 integer overflow in nlmsg_reserve() = 3.3.0 (or the specific patched package version as provided by distributions; examples include Arch Linux ASA-201706-35 recommending 3.3.0-1 and Red Hat/CentOS advisories updating libnl3). Several advisories reference this CVE (...

CVE-2017-0637

Android Mediaserver exposes a remote code execution in the libhevc component when processing specially crafted media files, leading to memory corruption. Affected Android versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 (Android ID A-34064500). CVSSv3 base score 7.8 (HIGH); attack vector LOC...

CVE-2023-20966

CVE-2023-20966 is described across multiple sources as a heap buffer overflow in the inflate.c function that can cause a local elevation of privilege. The vulnerability affects Android 11–13 (Android-11, -12, -12L, -13) and requires no user interaction, with exploitation characterized as a local ...

CVE-2024-31320

CVE-2024-31320 relates to Android’s setSkipPrompt in AssociationRequest.java, where an attacker could establish a companion device association without user confirmation, enabling local elevation of privilege with no user interaction. The Red Hat and CNVD entries align on an Android elevation-of-p...

CVE-2019-2227

CVE-2019-2227 affects Android devices via a DeepCopy bug in btif_av.cc that can trigger an out-of-bounds read, enabling remote information disclosure over Bluetooth without user interaction. The entry covers Android 9 and 10, with impact described as information disclosure (confidentiality) and a...

CVE-2022-20355

CVE-2022-20355 affects PacProxyService.java in Android (Android-10/11/12, incl. 12L). The flaw is in get() with improper input validation, causing a locally exploitable system-service crash that yields a Denial of Service with Low privileges required; no user interaction needed. Mitigation per th...

CVE-2022-20423

CVE-2022-20423 is an Android kernel vulnerability arising in rndis_set_response() in rndis.c that allows an out-of-bounds write due to integer overflow. The issue can enable local privilege escalation when a malicious USB device is attached, with physical access required (no user interaction). Pu...

CVE-2023-21285

CVE-2023-21285 affects Android’s MediaSessionRecord.java, where a flawed setMetadata function could allow a local attacker to view another user’s images via a confused deputy. The issue enables local information disclosure without additional execution privileges and does not require user interact...

CVE-2025-48572

CVE-2025-48572 is an Android Framework privilege-escalation vulnerability. It stems from improper input validation in the Framework component, allowing a local application to launch activities from background and execute arbitrary code with elevated privileges. Affected products are Android devic...

CVE-2019-2220

CVE-2019-2220 affects the Android Framework (AppOpsService) and involves a bypass of user interaction requirements caused by mishandling of application suspend. The vulnerability could allow local information disclosure without requiring additional privileges. Affected products are Android 9 and ...

CVE-2022-20140

CVE-2022-20140 is a Bluetooth GATT stack vulnerability in Android 12/12L where an out-of-bounds write occurs in read_multi_rsp in gatt_sr.cc due to an incorrect bounds check. This can lead to remote escalation of privilege with no user interaction and requires no additional execution privileges. ...

CVE-2019-2225

CVE-2019-2225 describes an elevation-of-privilege vulnerability in Android Bluetooth pairing where a malicious device could pair without user confirmation and interact with the phone, enabling remote privilege escalation without user interaction. The affected platform versions listed are Android ...

CVE-2021-39796

CVE-2021-39796 affects HarmfulAppWarningActivity in Android (HarmfulAppWarningActivity.java). It enables a tapjacking/overlay technique to trick a user into installing a harmful app, potentially causing local escalation of privilege with User execution privileges and requiring user interaction fo...

CVE-2022-21745

CVE-2022-21745 describes a memory corruption via a use-after-free in WIFI Firmware, enabling remote privilege escalation when devices connect to an attacker‑controlled Wi‑Fi hotspot. The issue requires no user interaction and is exploitable by an adjacent network. Public references indicate a pat...

CVE-2023-20917

CVE-2023-20917 affects Android 11–13 and is related to a logic error in ResolverActivity.java (onTargetSelected) that could allow a local escalation of privilege by sharing the wrong file. The exploit requires local access with no user interaction; impact is described as high (C/H/I/A). The provi...

CVE-2023-40127

CVE-2023-40127 is an Android information-disclosure issue affecting the MediaProvider component across multiple locations. It arises from a confused deputy scenario, allowing local information disclosure with no additional execution privileges and without user interaction. The NVD entry notes a l...

CVE-2014-9322

CVE-2014-9322 affects the Linux kernel pre-3.17.5 where arch/x86/kernel/entry_64.S mishandles faults on the Stack Segment (SS) during IRET, allowing a local user to escalate privileges by accessing a GS Base address from the wrong space. Public PoC/exploitation (BadIRET) exists, illustrating loca...

CVE-2021-0694

The CVE-2021-0694 entry concerns Android 11, where in ActiveServices.java (setServiceForegroundInnerLocked) a background app can regain foreground permissions due to insufficient background restrictions, leading to local elevation of privilege without requiring user interaction. The impact is ele...

CVE-2022-20219

CVE-2022-20219 affects Android Framework due to a logic error in StorageManagerService.java and UserManagerService.java that can leave user directories unencrypted, causing local information disclosure without extra privileges or user interaction. The issue is documented for Android-10, Android-1...

CVE-2022-20348

CVE-2022-20348 affects LocationServicesWifiScanningPreferenceController.java in Android (Android-10/11/12/12L). The issue is an admin restriction bypass caused by a missing permission check in updateState, enabling local escalation of privilege without extra execution privileges and with no user ...

CVE-2022-20489

Summary: CVE-2022-20489 describes an elevation-of-privilege issue in Android related to AutomaticZenRule.java, allowing local escalation without extra execution privileges and no user interaction. Affected software: Android devices (Android-10 to Android-13) as listed in the CVE entry and Android...

CVE-2023-20937

CVE-2023-20937 concerns memory corruption via a use-after-free in several functions of the Android Linux kernel, enabling local privilege escalation with no user interaction required. The vulnerability is described across multiple sources as affecting the Android kernel and related MM subsystems,...

CVE-2023-20942

The CVE-2023-20942 issue affects Android’s AudioFlinger.cpp, specifically in openMmapStream, where a logic error can allow recording audio without showing the microphone privacy indicator. This vulnerability enables local privilege escalation with no extra execution privileges and requires no use...

CVE-2023-21081

CVE-2023-21081 affects Google Android (Android 11, 12, 12L, 13) via the PackageInstallerService.java and related files. A logic error in multiple functions could bypass background activity launch restrictions, enabling local elevation of privilege without requiring additional execution privileges...