CVE-2024-29740

A security vulnerability exists in the ACPM subcomponent of Google Pixel devices. The flaw is caused by a missing bounds check in the tmu_set_table function of the tmu.c file, leading to a potential out-of-bounds write . This vulnerability can result in a local escalation of privilege (EoP) witho...

CVE-2021-0920

CVE-2021-0920 is confirmed with concrete details in the connected sources: a race condition in unix_scm_to_skb within af_unix.c can trigger a use-after-free, potentially enabling local privilege escalation on the Android kernel. The vulnerability affects the Linux kernel used in Android (via the ...

CVE-2019-2215

CVE-2019-2215 is a use-after-free in the Android binder driver (binder.c) that enables local privilege escalation from an app to the Linux kernel. The issue is local, with no user interaction required, and exploitation may lead to memory corruption, denial of service, or escalation per the cited ...

CVE-2021-39793

Summary of CVE-2021-39793 : A vulnerability in the Mali GPU kernel driver (kbase_jd_user_buf_pin_pages in mali_kbase_mem.c) causes an out-of-bounds write due to a logic error. This can enable local privilege escalation with no required user interaction. Affected: Android devices using Mali GPU ke...

CVE-2020-0041

CVE-2020-0041 affects the Android kernel binder subsystem: in binder_transaction there is an out-of-bounds write caused by an incorrect bounds check, enabling local privilege escalation with no user interaction. The vulnerability is documented across multiple advisories (upstream kernel/UTSA entr...

CVE-2021-1048

CVE-2021-1048 is a use-after-free in Android's upstream Linux kernel ep_loop_check_proc (eventpoll.c) that can cause memory corruption and local privilege escalation without user interaction. The issue existed in the Android kernel but upstream Linux patched it; Android device patch timing varied...

CVE-2023-21036

The CVE-2023-21036 issue affects Google Pixel devices' Markup tool (BitmapExport.java) where a logic error prevents proper truncation of image data after edits, potentially leaving remnants of the original image in cropped/edited PNGs. Public sources (NVD/NVD entry, CVE lists) describe a local, p...

CVE-2020-0069

The CVE-2020-0069 issue affects MediaTek CMDQ driver ioctl handlers in Android kernel, where insufficient input sanitization and missing SELinux restrictions can cause an out-of-bounds write, enabling local privilege escalation without extra privileges or user interaction. Public material confirm...

CVE-2018-9416

CVE-2018-9416 concerns memory corruption in the Linux kernel SCSI driver, specifically in sg_remove_scat (scsi/sg.c). The root cause is described as an unusual root cause leading to local escalation of privilege with System execution privileges needed; no user interaction required. Connected docu...

CVE-2024-0042

Technical details are not publicly available in the provided documents. No affected products/versions or remediation specifics are listed. Monitor for updates.

CVE-2018-9401

This vulnerability affects the cameraisp component within the MediaTek components of Google Pixel and Nexus devices. The root cause is an incorrect bounds check , which allows an attacker to access kernel memory from user space. This flaw can lead to local escalation of privilege (EoP) without re...

CVE-2019-9456

CVE-2019-9456 stems from the Android kernel Pixel C USB monitor driver. The issue is an out-of-bounds write caused by a missing bounds check in the Pixel C USB monitor driver, enabling local escalation of privilege to System with no user interaction required. This is described in the CVE entry as...

CVE-2019-9458

CVE-2019-9458 is a Linux kernel video driver use-after-free caused by a race condition, leading to local privilege escalation without user interaction. Multiple connected advisories confirm the issue exists in the Android/Linux kernel/video driver stack and note kernel fixes are needed; no public...

CVE-2024-32927

CVE-2024-32927 affects Google's Pixel devices via the RadioExt.cpp function sendDeviceState_1_6, where a use-after-free due to improper locking is reported. The vulnerability enables local escalation of privilege with no additional execution privileges required and no user interaction needed, per...

CVE-2018-9405

A security vulnerability exists in the dm_agent.cpp file within the BnDmAgent::onTransact function due to a missing bounds check . This flaw allows for a possible out-of-bounds write , which could lead to a local escalation of privilege requiring System execution privileges . Exploitation does no...

CVE-2018-9387

The mnh_sm driver component in Google Pixel and Nexus devices is vulnerable to a heap overflow caused by an integer overflow in multiple functions of mnh-sm.c . This vulnerability allows for local escalation of privilege without requiring additional execution privileges or user interaction. Remed...

CVE-2019-9506

CVE-2019-9506 affects Bluetooth KNOB (Key Negotiation of Bluetooth) by allowing nearby attackers to influence encryption key length during BR/EDR negotiation, enabling potential eavesdropping and ciphertext injection. Connected sources show this vulnerability being acknowledged by Apple across iO...

CVE-2020-0466

CVE-2020-0466 is a use-after-free in eventpoll.c (do_epoll_ctl and ep_loop_check_proc) that can enable local privilege escalation without user interaction. Publicly documented in multiple advisories linked to kernel packages (Unity Linux UTSA-2026-004002/004258, MiracleLinux AXSA advisories, Cent...

CVE-2018-9568

This CVE-2018-9568 entry concerns the Linux kernel socket code: In sk_clone_lock of sock.c, a memory corruption due to type confusion could allow local privilege escalation without user interaction. Affected product/version in the initial doc is Android kernel; connected MiracleLinux advisory con...

CVE-2020-0404

CVE-2020-0404 affects the Android kernel via a vulnerability in uvc_scan_chain_forward() in uvc_driver.c, where an unusual root cause can cause linked list corruption and local privilege escalation without user interaction. Upstream kernel reports indicate this is a kernel linked-list corruption ...

CVE-2024-50302

CVE-2024-50302 affects the Linux kernel HID core by leaving the HID report buffer potentially uninitialized, enabling possible memory leakage via crafted reports. The fixed behavior is to zero-initialize the report buffer at allocation time. Public advisories (including AstraLinux and AlmaLinux f...

CVE-2019-9455

CVE-2019-9455: In the Android kernel video driver, there is a kernel pointer leak caused by a WARN_ON statement, leading to local information disclosure with System execution privileges needed. Local exploitation is possible without user interaction. The connected Nessus advisories corroborate th...

CVE-2020-0427

CVE-2020-0427 is confirmed in the connected documents as an Android kernel issue affecting the pinctrl subsystem (core.c). The vulnerability arises in create_pinctrl, where an out-of-bounds read can occur due to a use-after-free, potentially allowing local information disclosure without extra exe...

CVE-2022-20141

CVE-2022-20141 (Android kernel) : In igmp.c, the function ip_check_mc_rcu has a use-after-free due to improper locking, enabling local escalation of privilege when opening/closing inet sockets without extra privileges. This vulnerability is associated with the Android kernel and upstream referenc...

CVE-2020-0444

CVE-2020-0444 affects the Android kernel. The issue is in audit_free_lsm_field in auditfilter.c, caused by a logic error in audit_data_to_entry that may allow local escalation of privilege with no extra privileges or user interaction. The connected Nessus advisories (Unity Linux UTSA-2026-004184/...

CVE-2023-21264

CVE-2023-21264 affects the Linux kernel (ARM64 KVM) where a memory access check in mem_protect.c can permit access to hypervisor memory due to the check being in the wrong place. The result is local elevation of privilege to System execution level, with exploitation not requiring user interaction...

CVE-2024-56189

A vulnerability exists in the Modem component of Google Pixel devices due to a missing bounds check in the SAEMM_DiscloseMsId function within SAEMM_RadioMessageCodec.c. This out-of-bounds read can lead to remote information disclosure after authentication, requiring no additional execution privil...

CVE-2023-20938

CVE-2023-20938 affects the Android kernel via binder_transaction_buffer_release in binder.c, causing a use-after-free due to improper input validation. This can enable local privilege escalation with no extra execution privileges required and without user interaction; the advisory consistently no...

CVE-2024-49739

A security vulnerability exists in Google Android involving an out-of-bounds write within the MMapVAccess function of pmr_os.c . This flaw stems from improper input validation and allows a local attacker to achieve local escalation of privilege without requiring additional execution privileges or...

CVE-2019-9453

CVE-2019-9453 corresponds to an out-of-bounds read in the Android kernel F2FS touch driver, caused by improper input validation. This can enable local information disclosure and could potentially allow system-level privileges; exploitation requires local access with no user interaction. Publicly ...

CVE-2024-32896

The CVE-2024-32896 issue is a local Elevation of Privilege (EoP) in the Android Framework affecting Pixel devices, caused by a logic error that could enable privilege escalation with no extra execution privileges. Exploitation requires user interaction per the description, with the Android bullet...

CVE-2021-0512

CVE-2021-0512 is a Linux kernel/Android-hid input issue: out-of-bounds write caused by a heap buffer overflow in __hidinput_change_resolution_multipliers of hid-input.c, enabling local privilege escalation with no user interaction. Affected: Android kernel HID input path; exploitation described a...

CVE-2023-21400

CVE-2023-21400 affects the Linux kernel io_uring subsystem, specifically in multiple functions within io_uring.c where improper locking on rings with IOPOLL can cause kernel memory corruption. This memory corruption could enable local privilege escalation to kernel System execution privileges wit...

CVE-2020-0465

CVE-2020-0465 refers to the Android kernel HID multitouch vulnerability. In hid-multitouch.c, there is an out-of-bounds write due to a missing bounds check, which could enable local privilege escalation with no additional privileges and no user interaction required. The description confirms affec...

CVE-2026-0163

A use-after-free vulnerability exists in multiple functions of the vpu_ioctl.c file within the Video Processing Unit (VPU) driver on Android. The flaw occurs when the driver retrieves a driver instance from an array and resets the reference counter before closing it, leading to memory being used ...

CVE-2024-29745

CVE-2024-29745 affects Google Pixel devices in the bootloader component, with an information-disclosure flaw caused by uninitialized data. The NVD entry describes local information disclosure without extra privileges or user interaction. The Pixel Update Bulletin notes this vulnerability as poten...

CVE-2023-21102

CVE-2023-21102 is a local EoP vulnerability in the Android kernel related to a bypass of shadow stack protection in __efi_rt_asm_wrapper of efi-rt-wrapper.S. The issue enables local privilege escalation without user interaction, as documented in upstream kernel and Android May 2023 bulletin entri...

CVE-2023-20928

CVE-2023-20928 : A use-after-free in binder_vma_close of binder.c enables local privilege escalation due to improper locking. Exploitation requires no user interaction; impact is described as local escalation of privilege with high severity. Affected reference material cites upstream kernel chang...

CVE-2020-0423

CVE-2020-0423 is a use-after-free in the Android/Linux binder driver (binder_release_work in binder.c) caused by improper locking. It enables local privilege escalation with no extra user interaction required. The description appears consistently across multiple connected sources (e.g., Astra Lin...

CVE-2025-36911

A logic error in the Google Fast Pair protocol implementation (referred to as WhisperPair ) allows for unauthorized pairing with millions of Bluetooth audio devices without user interaction. The vulnerability stems from manufacturers failing to verify if a device is in pairing mode before process...

CVE-2019-2182

CVE-2019-2182 is an Android/Linux kernel vulnerability in the MMU/arm64 memory management path. The issue is a race condition that can leave kernel text and rodata pages writable, enabling local privilege escalation without user interaction. The description in connected advisories confirms the ro...

CVE-2020-0431

CVE-2020-0431 refers to an out-of-bounds write in the kernel’s keyboard.c function kbd_keycode, caused by a missing bounds check. The vulnerability could enable local privilege escalation without user interaction. Public connected advisories ( MiracleLinux AXSA:2021-2148:12 and Unity Linux UTSA-2...

CVE-2022-20008

CVE-2022-20008 affects the Android kernel via mmc_blk_read_single in block.c, where uninitialized data can allow reading kernel heap memory. This enables local information disclosure when reading from an SD card that triggers errors, with no additional privileges and no user interaction required....

CVE-2024-29779

CVE-2024-29779 is a local elevation of privilege in Android (System component) caused by an unusual root-cause logic issue. No user interaction is required for exploitation. It is addressed in Android patch levels 2024-11-01/2024-11-05 with vendor updates (Android and partner advisories indicate ...

CVE-2019-9448

CVE-2019-9448 affects the Android kernel FingerTipS touchscreen driver. It is an out-of-bounds write due to a missing bounds check, enabling local escalation of privilege to System, with no user interaction required. The Pixel update bulletin indicates this issue is addressed by patches in 2019-0...

CVE-2019-9454

CVE-2019-9454 affects the Android kernel, specifically the i2c driver, where an out-of-bounds write could corrupt memory. This leads to local escalation of privilege with SYSTEM execution privileges required; no user interaction is needed for exploitation. Public references describe the vulnerabi...

CVE-2022-20421

CVE-2022-20421 : In the Android kernel, the memory corruption arises from a use-after-free in binder_inc_ref_for_node() inside binder.c, enabling a possible local escalation of privilege with no extra execution privileges and without user interaction. The affected software is the Android kernel; ...

CVE-2019-9275

In the Android kernel, the MNH driver contains a use-after-free caused by improper locking, enabling local escalation of privilege to the System level with no user interaction required. The issue is officially documented as CVE-2019-9275 and is listed in the Pixel 2019-09-01 bulletin as a Moderat...

CVE-2019-9447

CVE-2019-9447 affects the Android kernel FingerTipS touchscreen driver. The root cause is a use-after-free due to improper locking in the touch driver, enabling local escalation of privilege with System execution privileges required; exploitation does not require user interaction. Public referenc...

CVE-2019-9449

The CVE-2019-9449 entry affects the Android kernel FingerTipS touchscreen driver. It describes a possible out-of-bounds read caused by a missing bounds check, leading to local information disclosure with system execution privileges required. No user interaction is needed for exploitation, and exp...