CVE-2022-20123

CVE-2022-20123 affects Android 10–12 (including 12L) via a missing bounds check in phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, causing an out-of-bounds read and potential remote information disclosure without user interaction. The issue is categorized in the Android Security Bulletin as a hi...

CVE-2022-20134

CVE-2022-20134 concerns a mitigation-resistant input validation flaw in Android’s UI flow. In readArguments of CallSubjectDialog.java, an improper validation allows an attacker to trick a user into dialing the wrong phone number, enabling local elevation of privilege with no additional execution ...

CVE-2022-23427

CVE-2022-23427 concerns a PendingIntent hijacking flaw in Samsung’s KnoxPrivacyNoticeReceiver. The vulnerability allows a local attacker to access media files via an implicit Intent prior to the SMR Feb-2022 Release 1. The descriptions across NVD, Red Hat, CNVD, CVE list, and related advisories a...

CVE-2021-39694

CVE-2021-39694 affects Android 12 via a RoleParser.java issue that allows a default app to have user-denied permissions bypassed, enabling local escalation of privilege with no additional execution privileges and no user interaction required. Public exploitation details are not provided in the co...

CVE-2022-20219

CVE-2022-20219 affects Android Framework due to a logic error in StorageManagerService.java and UserManagerService.java that can leave user directories unencrypted, causing local information disclosure without extra privileges or user interaction. The issue is documented for Android-10, Android-1...

CVE-2024-23717

CVE-2024-23717 affects Google's Android Bluetooth stack. The vulnerability is in the function access_secure_service_from_temp_bond of btm_sec.cc , caused by improper input validation, enabling keystroke injection and potential remote (proximal/adjacent) elevation of privilege without additional e...

CVE-2014-9322

CVE-2014-9322 affects the Linux kernel pre-3.17.5 where arch/x86/kernel/entry_64.S mishandles faults on the Stack Segment (SS) during IRET, allowing a local user to escalate privileges by accessing a GS Base address from the wrong space. Public PoC/exploitation (BadIRET) exists, illustrating loca...

CVE-2016-10044

CVE-2016-10044 is supported by connected advisories: the Linux kernel up to version 4.7.7 contains a vulnerability in the aio_mount path. Specifically, the aio_mount function in fs/aio.c did not properly restrict execute access, enabling local users to bypass SELinux W^X policy and gain privilege...

CVE-2020-0182

CVE-2020-0182 affects libexif, where exif_entry_get_value may perform an out-of-bounds read due to a missing bounds check, enabling local information disclosure without extra privileges. The published advisories and vendor bulletins (e.g., Red Hat RHSA-2020:4040; Debian DLA-2249-1; ALAS2-2020-152...

CVE-2020-0411

CVE-2020-0411 affects Android media framework (Media Framework) with an out-of-bounds write in AACExtractor.cpp due to uninitialized data, potentially enabling remote information disclosure. The Android 10/11 patch details in the 2020-10 bulletin list CVE-2020-0411 as an Information Disclosure is...

CVE-2022-20358

CVE-2022-20358 affects Android 10–12 (including 12L) and is tied to a flaw in AbstractThreadedSyncAdapter.startSync where a missing permission check could allow access to protected content in content providers. This is a local information-disclosure vulnerability with user privileges required, an...

CVE-2022-20411

CVE-2022-20411 is an Android Bluetooth heap/bounds issue in avdt_msg_asmbl (avdt_msg.cc) where a missing bounds check enables an out-of-bounds write. This can lead to remote code execution over Bluetooth with no user interaction or privileges required. Affected: Android-10, Android-11, Android-12...

CVE-2022-20498

Technical details for CVE-2022-20498 are not provided in the connected documents. The initial description mentions an out-of-bounds read in fdt_ro.c causing local information disclosure, but lacks concrete product/version data or mitigations beyond the Android bulletin reference. Monitor for upda...

CVE-2023-40139

The CVE-2023-40139 entry describes a local information-disclosure vulnerability in the Android FillUi component (FillUi.java) that allows an attacker to view another user’s images due to a confused deputy. Exploitation requires no user interaction and can occur with local access; no remote/vector...

CVE-2019-2222

CVE-2019-2222 affects Android Media Framework, specifically the ihevcd_parse_slice_data path in ihevcd_parse_slice.c, where a missing bounds check can cause an out-of-bounds write. This could allow remote code execution in a privileged context, requiring user interaction to exploit. Affected Andr...

CVE-2020-0225

CVE-2020-0225 affects Android 10 and is triggered by an out-of-bounds write in the function a2dp_vendor_ldac_decoder_decode_packet within a2dp_vendor_ldac_decoder.cc, caused by a missing bounds check. This leads to remote code execution with no privileges or user interaction required, as describe...

CVE-2020-8899

CVE-2020-8899 covers a buffer/heap overflow in Samsung’s Quram qmg (Qmage) codec used by Android Skia, affecting O(8.x), P(9.0), and Q(10.0). An unauthenticated MMS can trigger an RCE via a heap-based overflow in the Quram/QMG image decoding path (QMG/QM formats), with Project Zero documenting th...

CVE-2021-0316

CVE-2021-0316 affects Android’s Bluetooth stack (AVRC) due to an out-of-bounds write in avrc_pars_vendor_cmd within avrc_pars_tg.cc caused by a missing bounds check. This leads to remote code execution over Bluetooth with no privileges and no user interaction required. Affected Android versions i...

CVE-2021-39619

CVE-2021-39619 affects Android (Android 11 and 12) in the UsageStatsService.java updatePackageMappingsData path. The root cause enables bypassing security/privacy settings for app usage, permitting local escalation of privilege without extra execution privileges and without user interaction. Expl...

CVE-2024-43762

CVE-2024-43762 is a local Elevation of Privilege vulnerability affecting Android components (notably Framework and System in the 2024-12 Android bulletin). The issue arises from a logic error that can prevent unbinding a service from the system, enabling a local attacker to escalate privileges wi...

CVE-2019-2218

CVE-2019-2218 affects Android Framework (PackageInstallerService.java) with a missing permission check in createSessionInternal, enabling local elevation of privilege by installing malicious packages. Exploitation is local with no user interaction required and could grant complete confidentiality...

CVE-2019-2221

CVE-2019-2221 affects Android 10, related to hasActivityInVisibleTask in WindowProcessController.hasActivityInVisibleTask. Root cause: incorrect handling of top activities in the INITIALIZING state, allowing bypass of user interaction requirements. Impact: local elevation of privilege (EoP) with ...

CVE-2021-39702

CVE-2021-39702 affects Android 12; in onCreate of RequestManageCredentials.java, a tapjacking/overlay attack could allow a third‑party app to install certificates without user approval, enabling local elevation of privilege with User interaction required . Documented impact: EoP with high confide...

CVE-2022-20130

CVE-2022-20130 : In Android Media Framework, an out-of-bounds write due to a heap buffer overflow in transportDec_OutOfBandConfig (tpdec_lib.cpp) could enable remote code execution with no privileges or user interaction. Affected: Android 10–12–12L; patches released per the 2022-06 Android Bullet...

CVE-2022-20230

CVE-2022-20230 affects Android 10–12 (including 12L). In KeyChain.java, choosePrivateKeyAlias, improper input validation may allow access to the user’s certificate, enabling local information disclosure. Exploitation requires user interaction and does not grant additional execution privileges. Th...

CVE-2022-20347

CVE-2022-20347 affects Android 10–12(12L) with a vulnerability in the onAttach path of ConnectedDeviceDashboardFragment.java that enables a permission bypass via a confused deputy, enabling remote escalation of privilege in Bluetooth settings without extra execution privileges or user interaction...

CVE-2023-21116

CVE-2023-21116 affects Android 11–13 and stems from a logic error in InstallPackageHelper.java, in verifyReplacingVersionCode, which could downgrade system apps below the system image version and enable local elevation of privilege with System privileges. Exploitation details are not provided in ...

CVE-2023-21287

The CVE-2023-21287 entry concerns a type confusion vulnerability in Google Android that could allow remote code execution without user interaction. Connected sources corroborate that this issue is listed under the Android security bulletin as a high-severity, remote code execution vulnerability a...

CVE-2019-2176

CVE-2019-2176 affects Android 8.0–9 where ihevcd_parse_buffering_period_sei in ihevcd_parse_headers.c can write out of bounds due to a missing bounds check, enabling remote code execution with user interaction required. The issue resides in the Android Media framework, with high/critical severity...

CVE-2019-2231

CVE-2019-2231 affects the Android blob handling in Blob::Blob (blob.cpp), where improper input validation can lead to an unencrypted master key and local information disclosure. The issue requires local access with system privileges to exploit, with no user interaction needed. Public sources conf...

CVE-2021-39633

CVE-2021-39633 affects the Android/Linux kernel’s gre_handle_offloads path in ip_gre.c, where a memory access fault can cause a page fault and local information disclosure with no extra privileges or user interaction. Public details in connected Nessus advisories (Unity Linux UTSA advisories) con...

CVE-2021-39693

CVE-2021-39693 affects Android 12 via a logic error in AppOpsService.java (onUidStateChanged) that may allow access to location without a visible indicator, causing local privilege escalation with no extra execution privileges and no user interaction required. Connected sources confirm the issue ...

CVE-2023-20943

CVE-2023-20943 describes an elevation of privilege in Android via a path traversal in clearApplicationUserData within ActivityManagerService. The issue could allow removal of system files and local EoP with low privileges and no user interaction, affecting Android 10–13 (including 12/12L). The vu...

CVE-2019-2181

CVE-2019-2181 affects the Android/Linux kernel binder implementation (binder.c: binder_transaction), where an integer overflow can cause an out-of-bounds write. This enables local privilege escalation with no extra privileges; exploitation requires user interaction per the description. Public ref...

CVE-2019-2223

CVE-2019-2223 is a remote code execution in Android’s Media Framework caused by an out-of-bounds write in ihevcd_ref_list.c due to a missing bounds check. Affected: Android 8.0–10 (per Android Security Bulletin December 2019). Exploitation described in connected sources requires a crafted media f...

CVE-2023-40117

CVE-2023-40117 affects the Android SettingsProvider.java resetSettingsLocked path and describes a local privilege-escalation via a lockscreen bypass caused by a permissions bypass. The vulnerability enables elevation of privilege with LOCAL attack vector and LOW required privileges, without user ...

CVE-2019-1986

CVE-2019-1986 affects the Android Framework, specifically a vulnerability in SkSwizzler (SkSwizzler.cpp) where a missing bounds check enables an out-of-bounds write. This can allow remote escalation of privilege to system_server, with execution in a privileged context, requiring user interaction ...

CVE-2019-2217

CVE-2019-2217 is a memory corruption via use-after-free in GpuStats.cpp (setCpuVulkanInUse) leading to local privilege escalation on Android 10. Public docs confirm the flaw is in the Android Framework (GpuStats.cpp) and cause is memory corruption with use-after-free. The Android Security Bulleti...

CVE-2022-20113

CVE-2022-20113 affects Android 12/12L via a logic error in mPreference of DefaultUsbConfigurationPreferenceController.java that could enable file transfer mode, enabling local elevation of privilege with no extra execution privileges and no user interaction required. Documented impact is high (CV...

CVE-2022-20126

The vulnerability CVE-2022-20126 affects Android (Android-10 to Android-12L) via the Bluetooth stack: in AdapterService.java, setScanMode can enable Bluetooth discovery mode without user interaction due to a missing permission check. This creates local elevation of privilege with user execution p...

CVE-2022-20137

CVE-2022-20137 affects Android 12/Android 12L. The issue resides in NetworkProviderSettings.java onCreateContextMenu, where a missing permission check could allow a non-owner user to change WiFi settings, enabling local elevation of privilege. Exploitation requires user interaction, and the impac...

CVE-2022-20147

CVE-2022-20147 affects Google/Android: the out-of-bounds write in nfa_dm_check_set_config within nfa_dm_main.cc is caused by a missing bounds check. This yields local privilege escalation with no additional execution privileges and no user interaction required. Affected: Android 10–12/12L. Root c...

CVE-2019-2229

CVE-2019-2229 affects Android (Android-8.0/8.1/9/10) where BaseWidgetProvider.java::updateWidget can leak user data due to a missing permission check. The vulnerability enables local information disclosure without additional execution privileges and does not require user interaction. Exploitation...

CVE-2019-9325

The CVE-2019-9325 issue affects the libvpx library (VP8/VP9 SDK) and is described as an out-of-bounds read caused by a missing bounds check. According to the provided documents, this could lead to remote information disclosure with no inherent execution privileges, and exploitation requires user ...

CVE-2021-39690

CVE-2021-39690 affects Android 12, where the vulnerability lies in setDisplayPadding within WallpaperManagerService.java. The issue permits a persistent Denial of Service (DoS) due to improper input validation, with local attack vector and no user interaction required. Exploitation status is not ...

CVE-2022-20566

CVE-2022-20566 affects the Android kernel via a use-after-free in l2cap_core::l2cap_chan_put caused by improper locking, enabling local privilege escalation with no user interaction. Affected component is L2CAP handling in the Android kernel; upstream kernel mention confirms the underlying bug, a...

CVE-2023-21095

CVE-2023-21095 affects Android 12L and Android 13, in the canStartSystemGesture function of RecentsAnimationDeviceState.java. A race condition can cause a partial lockscreen bypass, enabling local privilege escalation without additional privileges or user interaction. Public references across mul...

CVE-2021-39668

CVE-2021-39668 is an Android elevation-of-privilege issue identified in onActivityViewReady within DetailDialog.kt, caused by an Intent Redirect (confused deputy) that could allow local escalation of privileges to the System UI. Affected versions are Android 11 and 12; exploitation requires user ...

CVE-2022-20129

The CVE-2022-20129 issue affects Android (Android-10, Android-11, Android-12, Android-12L) in the PhoneAccountRegistrar.java function registerPhoneAccount. Root cause: improper input validation that can prevent a user from selecting a phone account, leading to local Denial of Service without requ...

CVE-2019-2090

CVE-2019-2090 affects Android Framework code (PackageManagerService.java) where isPackageDeviceAdminOnAnyUser lacks a necessary permissions check, enabling local elevation of privilege without extra permissions. Documented impact is local compromise with high impact on confidentiality, integrity,...