CVE-2023-20809

CVE-2023-20809 concerns MediaTek’s vdec component, where a missing bounds check enables an out-of-bounds write. This can lead to local privilege escalation with system privileges, and exploitation does not require user interaction. The advisory notes a patch: DTV03751198 (Issue ID: DTV03751198). ...

CVE-2023-21306

CVE-2023-21306 affects Android’s ContentService, enabling local information disclosure by reading installed sync content providers via a side-channel. The vulnerability description states no additional execution privileges and no user interaction are required. The available sources (CVE entry and...

CVE-2023-21337

CVE-2023-21337 affects the Android InputMethod component and describes an information-disclosure side channel that can reveal whether an app is installed. This leads to local elevation of privilege with no extra execution privileges and no required user interaction, per the description in the NVD...

CVE-2023-21381

CVE-2023-21381 is an Android vulnerability reported across multiple sources, with concrete details indicating a local use-after-free in the Media Resource Manager that enables possible local arbitrary code execution and local escalation of privilege without user interaction. The Android 14 releas...

CVE-2023-30928

CVE-2023-30928 affects the telephony service and is due to a missing permission check in the telephony component, enabling local escalation of privilege with no additional execution privileges. Multiple sources (NVD, Red Hat, CNNVD, PRION, CVE lists) corroborate the issue as a local‑privilege‑esc...

CVE-2023-32808

The CVE-2023-32808 entry concerns a Bluetooth driver issue where improper access control of the register interface allows read/write access to registers, enabling local leakage of sensitive information with system-level privileges required. The description notes no user interaction is needed for ...

CVE-2023-40640

CVE-2023-40640 concerns the SoundRecorder service where a missing permission check could allow local information disclosure without requiring execution privileges. Affected detail across connected sources centers on UNISOC chipsets’ SoundRecorder component; root cause is insufficient access contr...

CVE-2023-42632

The CVE-2023-42632 issue affects validationtools, where a missing permission check could allow local information disclosure without requiring any additional execution privileges. Documented impact is limited to disclosure (Confidentiality Impact: HIGH) with local attack vector and no user interac...

CVE-2023-42646

CVE-2023-42646 concerns UNISOC-based systems with an Ifaa service that lacks a required permission check, enabling local information disclosure without additional privileges. The root cause is insufficient access-control in the Ifaa service, leading to exposure of sensitive data to an attacker wi...

CVE-2023-42647

CVE-2023-42647 affects the Ifaa service. The root cause is a missing permission check that allows writing permission usage records for apps, leading to local information disclosure without additional execution privileges. Adverse impact is confined to information disclosure (confidentiality) with...

CVE-2023-52344

A security vulnerability exists in UNISOC Chipsets within the modem-ps-nas-ngmm module. The flaw stems from incorrect error handling , which can lead to undefined behavior . This vulnerability may result in remote information disclosure without requiring additional execution privileges. No specif...

CVE-2023-52349

The CVE-2023-52349 issue affects the ril service and is caused by a missing bounds check that enables an out-of-bounds write. This can lead to local denial of service with System execution privileges required, as indicated by the NVD entry (AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) and corroborated by...

CVE-2023-52534

A security vulnerability exists in UNISOC Chipsets (from Purple Spreadtrum) due to incorrect error handling within the ngmm module. This flaw can lead to undefined behavior , potentially resulting in a remote denial of service (DoS) without requiring additional execution privileges. No specific a...

CVE-2024-39436

The CVE-2024-39436 entry concerns the LinkTurboNative service, with a command-injection due to improper input validation. Impact is local privilege escalation to SYSTEM. Multiple connected sources (Red Hat, NVD, CVE lists, and PT-Security) confirm the issue description; details on affected versio...

CVE-2025-32320

A confused deputy condition in the Android System UI allows an attacker to view images belonging to other users. This vulnerability can lead to a local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The issue is classified as High severity. Mi...

CVE-2026-0024

The CVE-2026-0024 issue is in Android’s MediaProvider.java (isRedactionNeededForOpenViaContentResolver). A missing permission check could reveal the location of media, causing local information disclosure with no extra privileges and without user interaction. The connected sources (NVD, Red Hat, ...

CVE-2026-0092

The CVE-2026-0092 entry is tied to the Android Package Manager and describes a device lock controller bypass caused by a missing permission check. The underlying issue enables local escalation of privilege with no extra execution privileges and requires no user interaction. The impact is describe...

CVE-2026-28577

A tapjacking/overlay attack vulnerability exists in the addWindow method of WindowManagerService.java within the Android Framework component. This flaw allows for a local escalation of privilege without requiring additional execution privileges, and it can be exploited without any user interactio...

CVE-2014-7917

CVE-2014-7917 concerns Android libstagefright’s SampleTable.cpp where an integer overflow exists in the MP4 processing path. Affected software: Android before version 5.0.0, referencing internal bug 15342615. The description notes unspecified impact and attack vectors. There is no explicit remedi...

CVE-2014-9783

The CVE-2014-9783 entry affects the Qualcomm component in Android on Nexus 7 (2013) devices, specifically the drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c. The root cause is that the code path does not validate certain values, enabling a local attacker with a crafted application to g...

CVE-2014-9784

CVE-2014-9784 affects Qualcomm components in Android on Nexus 5 and Nexus 7 (2013) devices. The issue arises from multiple buffer overflows in drivers/char/diag/diag_debugfs.c, enabling a local attacker with a crafted application to gain privileges. Root cause: buffer overflow in the diag_debugfs...

CVE-2014-9867

The CVE-2014-9867 issue affects Qualcomm camera components in Android (Nexus 5/7 2013) where msm_isp_axi_util.c fails to validate the number of streams, enabling privilege escalation via a crafted app. Root cause: missing validation in the camera driver path. Impact: local privilege escalation wi...

CVE-2014-9887

CVE-2014-9887 affects drivers/misc/qseecom.c in the Qualcomm component used on Android devices (Nexus 5 and Nexus 7 (2013)) prior to 2016-08-05. The flaw does not validate certain length values, enabling a local attacker with a crafted application to gain privileged access. Exploitation details o...

CVE-2014-9902

CVE-2014-9902 involves a buffer overflow in the Qualcomm Wi‑Fi driver’s file CORE/SYS/legacy/src/utils/src/dot11f.c on Nexus 7 (2013) devices. An attacker could trigger arbitrary code execution by sending a crafted Information Element in an 802.11 management frame, exploiting the vulnerability in...

CVE-2015-1536

CVE-2015-1536 is an integer overflow in Bitmap_createFromParcel() in Android’s core/jni/android/graphics/Bitmap.cpp, affecting Android versions prior to 5.1.1 (LMY48I). The flaw arises from improper bitmap unmarshalling and can allow a crafted application to crash the system_server (denial of ser...

CVE-2015-3858

CVE-2015-3858 affects Android before 5.1.1 LMY48M. The issue is in the checkDestination function of internal/telephony/SMSDispatcher.java, which relies on an obsolete permission name for an authorization check, enabling a crafted app to bypass the user-confirmation requirement for SMS short-code ...

CVE-2015-3877

CVE-2015-3877 concerns Skia used in Android before 5.1.1 LMY48T. A vulnerability in libskia/media processing can allow a remote attacker to cause memory corruption, enabling remote code execution or a denial of service via a specially crafted media file. The issue is described as a remote-code-ex...

CVE-2015-6605

CVE-2015-6605 concerns the Android mediaserver component. In affected Android releases prior to 5.1.1 LMY48T, a denial-of-service condition can be triggered in mediaserver, causing a process crash via unspecified vectors. The vulnerability is linked to internal bugs 20915134 and 23142203 and is d...

CVE-2015-8072

CVE-2015-8072 describes a media server (mediaserver) remote code execution/memory corruption vulnerability in Android 4.4 through 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01, exploitable via a crafted media file. The issue is cited across multiple sources (NVD/CNVD entries and related CVEs)...

CVE-2015-8074

CVE-2015-8074 affects Android mediaserver prior to 5.1.1 LMY48X. The vulnerability allows remote attackers to obtain sensitive information and bypass an unspecified protection mechanism via unknown vectors, tied to internal bugs 23540907 and 23515142. This entry is distinguished from CVE-2015-661...

CVE-2016-0826

CVE-2016-0826 affects libcameraservice in mediaserver on Android 4.x (before 4.4.4), 5.x (before 5.1.1 LMY49H), and 6.x (before 2016-03-01). The issue is that the camera service dump path does not require use of ICameraService::dump, allowing a crafted application to dump data directly and obtain...

CVE-2016-0829

The CVE-2016-0829 issue affects Android mediaserver and is triggered in the BnGraphicBufferProducer::onTransact path within libs/gui/IGraphicBufferConsumer.cpp. The root cause is failure to initialize a specific output data structure in Mediaserver, allowing an attacker to read leaked data and by...

CVE-2016-10339

CVE-2016-10339 affects CAF Android builds using the Linux kernel. The issue allows HLOS to overwrite secure memory or read the keystore contents. Details across sources indicate the vulnerability impacts Android devices in CAF releases and were addressed in the 2017 Android security patches (June...

CVE-2016-10342

CVE-2016-10342 is a buffer overflow in an Android CAF Linux kernel syscall handler. Attack requires local access and user interaction, with potential for high impact (admin privileges) per CVSS data. Affected: Android CAF builds using the Linux kernel; exploit details are not provided in the link...

CVE-2016-2421

The CVE-2016-2421 entry documents a vulnerability in Android’s Setup Wizard that allows physically proximate attackers to bypass Factory Reset Protection and delete data. Affected: Android 5.1.x before 5.1.1 and 6.x before 2016-04-01. Root cause is an exploit in the Setup Wizard flow that enables...

CVE-2016-2425

CVE-2016-2425 describes an information-disclosure vulnerability in AOSP Mail’s ComposeActivity.java where Android versions 4.x (before 4.4.4), 5.0.x (before 5.0.2), 5.1.x (before 5.1.1), and 6.x (before 2016-04-01) allow file:///data attachments, enabling a local attacker to obtain sensitive info...

CVE-2016-2432

CVE-2016-2432 concerns the Qualcomm TrustZone component in Android prior to the 2016-05-01 patch level, affecting Nexus 6 and Android One devices. The root cause is elevation of privilege via a crafted application, enabling a local attacker to gain higher privileges within TrustZone. The CVE is d...

CVE-2016-2451

CVE-2016-2451 affects Android Mediaserver (libstagefright) and its VPX handling in SoftVPX.cpp. The vulnerability arises from not validating VPX output buffer sizes, enabling local privilege escalation to Signature or SignatureOrSystem via a crafted application. Affected Android versions: 4.x bef...

CVE-2016-2473

CVE-2016-2473 describes a privilege-escalation vulnerability in the Qualcomm Wi‑Fi driver used by the Android stack on the Nexus 7 (2013) . The issue exists in Android builds prior to the 2016-06-01 patch level and can be triggered by a crafted application , enabling an attacker to gain elevated ...

CVE-2016-2479

CVE-2016-2479 affects the mm-video-v4l2 vdec in Mediaserver on Android. The vulnerability arises from mishandling a buffer count, enabling a local attacker to elevate privileges to Signature or SignatureOrSystem via a crafted application. Affected Android versions include 4.x prior to 4.4.4, 5.0....

CVE-2016-2493

CVE-2016-2493 describes an elevation-of-privilege vulnerability in the Broadcom Wi‑Fi driver used by Android on Nexus devices (N5, N6, N6P, 7 (2013), Nexus Player, Pixel C) prior to 2016-06-01. A local attacker could exploit a crafted application to gain privileged access (internal bug 26571522)....

CVE-2016-2494

CVE-2016-2494 involves an off-by-one error in sdcard/sdcard.c on Android, enabling a local attacker to gain privileges via a crafted app. Affected: Android 4.x before 4.4.4; 5.0.x before 5.0.2; 5.1.x before 5.1.1; 6.x before 2016-06-01. Root cause: off-by-one in sdcard.c leading to Elevation of P...

CVE-2016-2499

Technical details (affected products, root cause, remediation) are not publicly provided in the supplied documents for CVE-2016-2499. Monitor for updates.

CVE-2016-3764

CVE-2016-3764 affects Android Mediaserver: media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver is vulnerable. A crafted application can cause information disclosure by obtaining sensitive pointer information. Affected Android versions include 4.x before 4.4.4, 5.0.x before 5.0....

CVE-2016-3793

CVE-2016-3793 affects the NVIDIA camera driver (NVIDIA Tegra/Kernel driver) on Android, where a race condition use-after-free in the camera kernel path could allow a local attacker to gain privileges via a crafted app on affected Nexus devices (e.g., Nexus 9). The issue is described as a race con...

CVE-2016-3809

CVE-2016-3809 is an information-disclosure vulnerability in Android’s networking component. The iovy/iovy_pxn2 flows describe using CVE-2016-3809 to leak the kernel address of a sock structure, enabling subsequent steps to corrupt kernel data and escalate privileges. Affected devices include Andr...

CVE-2016-3938

CVE-2016-3938 affects the Qualcomm video driver (drivers/video/msm/mdss/mdss_mdp_overlay.c) on several Android devices (Nexus 5X, Nexus 6, Nexus 6P, and Android One) with Android versions older than 2016-10-05. The vulnerability allows a locally installed application to escalate privileges due to...

CVE-2016-6750

CVE-2016-6750 denotes an information-disclosure vulnerability in Qualcomm components used by Android—specifically the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver. The issue could allow a local malicious app to access data outside its permission levels, but only after co...

CVE-2016-6771

CVE-2016-6771 = Elevation of privilege in Android Telephony. A local malicious application could bypass restrictions in a constrained Telephony process and gain access to system functions beyond its granted level. Affected products/versions identified in the entry: Android 6.0, 6.0.1, and 7.0 (An...

CVE-2016-8419

CVE-2016-8419 is a local elevation-of-privilege vulnerability in the Qualcomm Wi‑Fi driver affecting Android. The issue could allow a local malicious application to execute arbitrary code in the kernel context by exploiting the Qualcomm Wi‑Fi driver. Affected components/files are tied to the Andr...