CVE-2020-0230

CVE-2020-0230 is an Android-related issue described as an out-of-bounds write caused by an incorrect bounds check. The connected records identify the vulnerability as affecting the MediaTek vcu component in Android, with an Elevation of Privilege (EoP) impact classified as High. The Android bulle...

CVE-2022-20047

CVE-2022-20047 affects MediaTek video decoder with a missing bounds check leading to an out-of-bounds write and local privilege escalation without user interaction. The issue is documented with patch ALPS05917489 (Issue ID: ALPS05917489). Connected sources also corroborate the vulnerability as a ...

CVE-2022-20144

CVE-2022-20144 affects Android (AvatarPhotoController.java) on Android 10–11, where a confused deputy in multiple functions could allow access to content owned by system content providers. This could enable local escalation of privilege with no additional execution privileges and no user interact...

CVE-2014-9322

CVE-2014-9322 affects the Linux kernel pre-3.17.5 where arch/x86/kernel/entry_64.S mishandles faults on the Stack Segment (SS) during IRET, allowing a local user to escalate privileges by accessing a GS Base address from the wrong space. Public PoC/exploitation (BadIRET) exists, illustrating loca...

CVE-2019-9464

CVE-2019-9464 is a targeted Elevation of Privilege vulnerability in the Android Framework affecting Android 10, caused by an incorrect warning about an app accessing the user’s location in RecentLocationApps.java, DevicePolicyManagerService.java, and RecognitionService.java. This could undermine ...

CVE-2022-20123

CVE-2022-20123 affects Android 10–12 (including 12L) via a missing bounds check in phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, causing an out-of-bounds read and potential remote information disclosure without user interaction. The issue is categorized in the Android Security Bulletin as a hi...

CVE-2022-20134

CVE-2022-20134 concerns a mitigation-resistant input validation flaw in Android’s UI flow. In readArguments of CallSubjectDialog.java, an improper validation allows an attacker to trick a user into dialing the wrong phone number, enabling local elevation of privilege with no additional execution ...

CVE-2022-20411

CVE-2022-20411 is an Android Bluetooth heap/bounds issue in avdt_msg_asmbl (avdt_msg.cc) where a missing bounds check enables an out-of-bounds write. This can lead to remote code execution over Bluetooth with no user interaction or privileges required. Affected: Android-10, Android-11, Android-12...

CVE-2023-20914

CVE-2023-20914 affects Android 11 in the Framework via onSetRuntimePermissionGrantStateByDeviceAdmin (AdminRestrictedPermissionsUtils.java). It enables a permissions bypass that could allow the work profile to read SMS messages, causing local information disclosure with low privileges and no user...

CVE-2021-39669

CVE-2021-39669 affects Android 11–12, in InstallCaCertificateWarning.java (onCreate). It enables a tapjacking/overlay flow to mislead users during CA certificate installation, leading to local elevation of privilege. Exploitation requires user interaction; no additional privileges are needed. Pat...

CVE-2023-21095

CVE-2023-21095 affects Android 12L and Android 13, in the canStartSystemGesture function of RecentsAnimationDeviceState.java. A race condition can cause a partial lockscreen bypass, enabling local privilege escalation without additional privileges or user interaction. Public references across mul...

CVE-2020-0182

CVE-2020-0182 affects libexif, where exif_entry_get_value may perform an out-of-bounds read due to a missing bounds check, enabling local information disclosure without extra privileges. The published advisories and vendor bulletins (e.g., Red Hat RHSA-2020:4040; Debian DLA-2249-1; ALAS2-2020-152...

CVE-2020-0411

CVE-2020-0411 affects Android media framework (Media Framework) with an out-of-bounds write in AACExtractor.cpp due to uninitialized data, potentially enabling remote information disclosure. The Android 10/11 patch details in the 2020-10 bulletin list CVE-2020-0411 as an Information Disclosure is...

CVE-2021-39693

CVE-2021-39693 affects Android 12 via a logic error in AppOpsService.java (onUidStateChanged) that may allow access to location without a visible indicator, causing local privilege escalation with no extra execution privileges and no user interaction required. Connected sources confirm the issue ...

CVE-2022-20130

CVE-2022-20130 : In Android Media Framework, an out-of-bounds write due to a heap buffer overflow in transportDec_OutOfBandConfig (tpdec_lib.cpp) could enable remote code execution with no privileges or user interaction. Affected: Android 10–12–12L; patches released per the 2022-06 Android Bullet...

CVE-2022-20498

Technical details for CVE-2022-20498 are not provided in the connected documents. The initial description mentions an out-of-bounds read in fdt_ro.c causing local information disclosure, but lacks concrete product/version data or mitigations beyond the Android bulletin reference. Monitor for upda...

CVE-2022-23427

CVE-2022-23427 concerns a PendingIntent hijacking flaw in Samsung’s KnoxPrivacyNoticeReceiver. The vulnerability allows a local attacker to access media files via an implicit Intent prior to the SMR Feb-2022 Release 1. The descriptions across NVD, Red Hat, CNVD, CVE list, and related advisories a...

CVE-2019-2181

CVE-2019-2181 affects the Android/Linux kernel binder implementation (binder.c: binder_transaction), where an integer overflow can cause an out-of-bounds write. This enables local privilege escalation with no extra privileges; exploitation requires user interaction per the description. Public ref...

CVE-2019-2222

CVE-2019-2222 affects Android Media Framework, specifically the ihevcd_parse_slice_data path in ihevcd_parse_slice.c, where a missing bounds check can cause an out-of-bounds write. This could allow remote code execution in a privileged context, requiring user interaction to exploit. Affected Andr...

CVE-2019-2223

CVE-2019-2223 is a remote code execution in Android’s Media Framework caused by an out-of-bounds write in ihevcd_ref_list.c due to a missing bounds check. Affected: Android 8.0–10 (per Android Security Bulletin December 2019). Exploitation described in connected sources requires a crafted media f...

CVE-2020-0225

CVE-2020-0225 affects Android 10 and is triggered by an out-of-bounds write in the function a2dp_vendor_ldac_decoder_decode_packet within a2dp_vendor_ldac_decoder.cc, caused by a missing bounds check. This leads to remote code execution with no privileges or user interaction required, as describe...

CVE-2021-0316

CVE-2021-0316 affects Android’s Bluetooth stack (AVRC) due to an out-of-bounds write in avrc_pars_vendor_cmd within avrc_pars_tg.cc caused by a missing bounds check. This leads to remote code execution over Bluetooth with no privileges and no user interaction required. Affected Android versions i...

CVE-2021-39619

CVE-2021-39619 affects Android (Android 11 and 12) in the UsageStatsService.java updatePackageMappingsData path. The root cause enables bypassing security/privacy settings for app usage, permitting local escalation of privilege without extra execution privileges and without user interaction. Expl...

CVE-2021-39633

CVE-2021-39633 affects the Android/Linux kernel’s gre_handle_offloads path in ip_gre.c, where a memory access fault can cause a page fault and local information disclosure with no extra privileges or user interaction. Public details in connected Nessus advisories (Unity Linux UTSA advisories) con...

CVE-2022-20358

CVE-2022-20358 affects Android 10–12 (including 12L) and is tied to a flaw in AbstractThreadedSyncAdapter.startSync where a missing permission check could allow access to protected content in content providers. This is a local information-disclosure vulnerability with user privileges required, an...

CVE-2023-20943

CVE-2023-20943 describes an elevation of privilege in Android via a path traversal in clearApplicationUserData within ActivityManagerService. The issue could allow removal of system files and local EoP with low privileges and no user interaction, affecting Android 10–13 (including 12/12L). The vu...

CVE-2023-21267

The CVE-2023-21267 issue affects Android’s KeyguardViewMediator.java in the framework, enabling bypass of lockdown mode via screen pinning due to a logic error. This leads to local information disclosure without extra privileges or user interaction. Exploitation can occur on devices with access t...

CVE-2024-43762

CVE-2024-43762 is a local Elevation of Privilege vulnerability affecting Android components (notably Framework and System in the 2024-12 Android bulletin). The issue arises from a logic error that can prevent unbinding a service from the system, enabling a local attacker to escalate privileges wi...

CVE-2019-2221

CVE-2019-2221 affects Android 10, related to hasActivityInVisibleTask in WindowProcessController.hasActivityInVisibleTask. Root cause: incorrect handling of top activities in the INITIALIZING state, allowing bypass of user interaction requirements. Impact: local elevation of privilege (EoP) with ...

CVE-2019-2231

CVE-2019-2231 affects the Android blob handling in Blob::Blob (blob.cpp), where improper input validation can lead to an unencrypted master key and local information disclosure. The issue requires local access with system privileges to exploit, with no user interaction needed. Public sources conf...

CVE-2021-39702

CVE-2021-39702 affects Android 12; in onCreate of RequestManageCredentials.java, a tapjacking/overlay attack could allow a third‑party app to install certificates without user approval, enabling local elevation of privilege with User interaction required . Documented impact: EoP with high confide...

CVE-2022-20230

CVE-2022-20230 affects Android 10–12 (including 12L). In KeyChain.java, choosePrivateKeyAlias, improper input validation may allow access to the user’s certificate, enabling local information disclosure. Exploitation requires user interaction and does not grant additional execution privileges. Th...

CVE-2023-21116

CVE-2023-21116 affects Android 11–13 and stems from a logic error in InstallPackageHelper.java, in verifyReplacingVersionCode, which could downgrade system apps below the system image version and enable local elevation of privilege with System privileges. Exploitation details are not provided in ...

CVE-2023-21287

The CVE-2023-21287 entry concerns a type confusion vulnerability in Google Android that could allow remote code execution without user interaction. Connected sources corroborate that this issue is listed under the Android security bulletin as a high-severity, remote code execution vulnerability a...

CVE-2019-2176

CVE-2019-2176 affects Android 8.0–9 where ihevcd_parse_buffering_period_sei in ihevcd_parse_headers.c can write out of bounds due to a missing bounds check, enabling remote code execution with user interaction required. The issue resides in the Android Media framework, with high/critical severity...

CVE-2019-2218

CVE-2019-2218 affects Android Framework (PackageInstallerService.java) with a missing permission check in createSessionInternal, enabling local elevation of privilege by installing malicious packages. Exploitation is local with no user interaction required and could grant complete confidentiality...

CVE-2022-20347

CVE-2022-20347 affects Android 10–12(12L) with a vulnerability in the onAttach path of ConnectedDeviceDashboardFragment.java that enables a permission bypass via a confused deputy, enabling remote escalation of privilege in Bluetooth settings without extra execution privileges or user interaction...

CVE-2023-40117

CVE-2023-40117 affects the Android SettingsProvider.java resetSettingsLocked path and describes a local privilege-escalation via a lockscreen bypass caused by a permissions bypass. The vulnerability enables elevation of privilege with LOCAL attack vector and LOW required privileges, without user ...

CVE-2019-9325

The CVE-2019-9325 issue affects the libvpx library (VP8/VP9 SDK) and is described as an out-of-bounds read caused by a missing bounds check. According to the provided documents, this could lead to remote information disclosure with no inherent execution privileges, and exploitation requires user ...

CVE-2021-39668

CVE-2021-39668 is an Android elevation-of-privilege issue identified in onActivityViewReady within DetailDialog.kt, caused by an Intent Redirect (confused deputy) that could allow local escalation of privileges to the System UI. Affected versions are Android 11 and 12; exploitation requires user ...

CVE-2021-39690

CVE-2021-39690 affects Android 12, where the vulnerability lies in setDisplayPadding within WallpaperManagerService.java. The issue permits a persistent Denial of Service (DoS) due to improper input validation, with local attack vector and no user interaction required. Exploitation status is not ...

CVE-2022-20126

The vulnerability CVE-2022-20126 affects Android (Android-10 to Android-12L) via the Bluetooth stack: in AdapterService.java, setScanMode can enable Bluetooth discovery mode without user interaction due to a missing permission check. This creates local elevation of privilege with user execution p...

CVE-2022-20137

CVE-2022-20137 affects Android 12/Android 12L. The issue resides in NetworkProviderSettings.java onCreateContextMenu, where a missing permission check could allow a non-owner user to change WiFi settings, enabling local elevation of privilege. Exploitation requires user interaction, and the impac...

CVE-2022-20566

CVE-2022-20566 affects the Android kernel via a use-after-free in l2cap_core::l2cap_chan_put caused by improper locking, enabling local privilege escalation with no user interaction. Affected component is L2CAP handling in the Android kernel; upstream kernel mention confirms the underlying bug, a...

CVE-2019-1986

CVE-2019-1986 affects the Android Framework, specifically a vulnerability in SkSwizzler (SkSwizzler.cpp) where a missing bounds check enables an out-of-bounds write. This can allow remote escalation of privilege to system_server, with execution in a privileged context, requiring user interaction ...

CVE-2019-2217

CVE-2019-2217 is a memory corruption via use-after-free in GpuStats.cpp (setCpuVulkanInUse) leading to local privilege escalation on Android 10. Public docs confirm the flaw is in the Android Framework (GpuStats.cpp) and cause is memory corruption with use-after-free. The Android Security Bulleti...

CVE-2022-20147

CVE-2022-20147 affects Google/Android: the out-of-bounds write in nfa_dm_check_set_config within nfa_dm_main.cc is caused by a missing bounds check. This yields local privilege escalation with no additional execution privileges and no user interaction required. Affected: Android 10–12/12L. Root c...

CVE-2024-43097

CVE-2024-43097 : The issue is a possible out-of-bounds write in SkRegion.cpp in resizeToAtLeast caused by an integer overflow, which could lead to local privilege escalation with no user interaction required. The vulnerability is referenced across multiple advisories for Mozilla components (Firef...

CVE-2019-2229

CVE-2019-2229 affects Android (Android-8.0/8.1/9/10) where BaseWidgetProvider.java::updateWidget can leak user data due to a missing permission check. The vulnerability enables local information disclosure without additional execution privileges and does not require user interaction. Exploitation...

CVE-2022-20113

CVE-2022-20113 affects Android 12/12L via a logic error in mPreference of DefaultUsbConfigurationPreferenceController.java that could enable file transfer mode, enabling local elevation of privilege with no extra execution privileges and no user interaction required. Documented impact is high (CV...