CVE-2024-0019

The CVE-2024-0019 issue affects Android’s AppOpsControllerImpl.setListening in the Framework. A missing check for active recordings can allow hiding the microphone privacy indicator when SystemUI restarts, enabling local denial of service without extra privileges. Impact is limited to DoS on the ...

CVE-2024-0016

CVE-2024-0016 is an Android/Bluetooth-related issue described as an out-of-bounds read caused by a missing bounds check. It could lead to disclosure of paired device information without any user interaction or privileges. The connected documents confirm the vulnerability exists in multiple locati...

CVE-2024-0032

CVE-2024-0032 affects the Android Framework (FileSystemProvider.java, queryChildDocuments) and enables local escalation of privilege due to improper input validation. Impact is described as Elevation of Privilege with HIGH confidentiality/integrity/availability impact; exploit requires user inter...

CVE-2021-0920

CVE-2021-0920 is confirmed with concrete details in the connected sources: a race condition in unix_scm_to_skb within af_unix.c can trigger a use-after-free, potentially enabling local privilege escalation on the Android kernel. The vulnerability affects the Linux kernel used in Android (via the ...

CVE-2023-45866

CVE-2023-45866 affects BlueZ Bluetooth HID Hosts. The description states that an unauthenticated Peripheral role HID Device could initiate, establish an encrypted connection, and send HID keyboard reports, potentially injecting HID messages when there is no user interaction in the Central role to...

CVE-2019-9456

CVE-2019-9456 stems from the Android kernel Pixel C USB monitor driver. The issue is an out-of-bounds write caused by a missing bounds check in the Pixel C USB monitor driver, enabling local escalation of privilege to System with no user interaction required. This is described in the CVE entry as...

CVE-2018-9405

CVE-2018-9405 describes a potential out-of-bounds write in BnDmAgent::onTransact (dm_agent.cpp) due to a missing bounds check, enabling local privilege escalation to System level without user interaction. Affected context shown in multiple sources (Android Pixel/Nexus bulletin references and vend...

CVE-2022-26461

CVE-2022-26461 affects the vow component; it involves undefined behavior caused by API misuse that could enable local privilege escalation with system execution privileges required. No user interaction is needed. The vulnerability is associated with patch ALPS07032604 (Issue ALPS07032604). Multip...

CVE-2017-0785

CVE-2017-0785 is an Android Bluetooth SDP information-disclosure vulnerability in the Bluetooth stack. The SDP server can leak memory/allow an out-of-bounds read by manipulating the SDP continuation state in requests, enabling information disclosure. Affected Android versions include 4.4.4–8.0 (a...

CVE-2025-26423

CVE-2025-26423 is tied to Android’s WifiConfigurationUtil.java, in the function validateIpConfiguration . The issue arises from a missing bounds check that can be triggered to cause a permanent DoS and potentially enable a local escalation of privilege with no extra privileges required. The CVE d...

CVE-2024-56189

CVE-2024-56189 describes an out-of-bounds read in SAEMM_DiscloseMsId of SAEMM_RadioMessageCodec.c due to a missing bounds check. The available sources indicate this could allow remote information disclosure after authentication with no additional execution privileges and no user interaction requi...

CVE-2025-26441

CVE-2025-26441 affects Google Android: an out-of-bounds read in the add_attr path of sdp_discovery.cc can cause remote information disclosure without extra privileges or user interaction. The issue is described across NVD, Red Hat, OSV, and CNVD/CVE aggregations, all citing a missing bounds check...

CVE-2023-21264

CVE-2023-21264 affects the Linux kernel (ARM64 KVM) where a memory access check in mem_protect.c can permit access to hypervisor memory due to the check being in the wrong place. The result is local elevation of privilege to System execution level, with exploitation not requiring user interaction...

CVE-2023-21400

CVE-2023-21400 affects the Linux kernel io_uring subsystem, specifically in multiple functions within io_uring.c where improper locking on rings with IOPOLL can cause kernel memory corruption. This memory corruption could enable local privilege escalation to kernel System execution privileges wit...

CVE-2024-40673

CVE-2024-40673 affects Google Android (System component via ZipFile.java) with improper input validation of dynamic code loading, enabling remote code execution without privileges or user interaction. Public details confirm the issue and reference Android security bulletin guidance indicating pat...

CVE-2019-9448

CVE-2019-9448 affects the Android kernel FingerTipS touchscreen driver. It is an out-of-bounds write due to a missing bounds check, enabling local escalation of privilege to System, with no user interaction required. The Pixel update bulletin indicates this issue is addressed by patches in 2019-0...

CVE-2019-9454

CVE-2019-9454 affects the Android kernel, specifically the i2c driver, where an out-of-bounds write could corrupt memory. This leads to local escalation of privilege with SYSTEM execution privileges required; no user interaction is needed for exploitation. Public references describe the vulnerabi...

CVE-2020-0305

CVE-2020-0305: A use-after-free due to a race in cdev_get of char_dev.c on Android 10 could allow local privilege escalation. Exploitation requires local access; no user interaction. The available connected documents confirm the vulnerability and affected product (Android-10), but do not specify ...

CVE-2019-9447

CVE-2019-9447 affects the Android kernel FingerTipS touchscreen driver. The root cause is a use-after-free due to improper locking in the touch driver, enabling local escalation of privilege with System execution privileges required; exploitation does not require user interaction. Public referenc...

CVE-2020-0431

CVE-2020-0431 refers to an out-of-bounds write in the kernel’s keyboard.c function kbd_keycode, caused by a missing bounds check. The vulnerability could enable local privilege escalation without user interaction. Public connected advisories ( MiracleLinux AXSA:2021-2148:12 and Unity Linux UTSA-2...

CVE-2019-9450

The CVE-2019-9450 issue affects the Android kernel FingerTipS touchscreen driver. The vulnerability is a memory corruption caused by a race condition in the touch driver, enabling local escalation of privilege with System execution privileges required; exploitation does not require user interacti...

CVE-2019-9442

CVE-2019-9442 affects the Android kernel MNH driver. The issue is memory corruption due to a use-after-free, enabling local elevation of privilege with System privileges required. User interaction is not needed for exploitation. The vulnerability is documented across multiple sources (NVD, RH, CN...

CVE-2019-9426

CVE-2019-9426 affects the Android kernel Bluetooth, where a missing bounds check can cause an out-of-bounds write. This vulnerability can enable local escalation of privilege to System level without user interaction. The issue is documented across multiple sources (Android/Bluetooth context, Red ...

CVE-2023-21237

CVE-2023-21237 affects Android Framework UI logic in NotificationContentInflater.java (applyRemoteView) that can hide a foreground service notification due to misleading or insufficient UI, enabling local information disclosure without extra privileges. Public sources confirm impact on Android 13...

CVE-2021-0342

The CVE-2021-0342 issue affects the Android kernel, where a use-after-free in tun_get_user (tun.c) can cause memory corruption, enabling local privilege escalation with kernel/system privileges; exploitation requires no user interaction. No patch/version details are provided in the connected docu...

CVE-2022-23432

CVE-2022-23432 records an improper input validation in the SMC_SRPMB_WSM handler of RPMB ldfw, before SMR Feb-2022 Release 1, that allows arbitrary memory writes and code execution. Affected: RPMB ldfw/SMSC SRPMB WSM handler (pre-Release 1 Feb-2022). Impact: local attacker could corrupt memory an...

CVE-2019-9276

CVE-2019-9276 affects the Android kernel’s synaptics_dsx_htc touchscreen driver. It describes a possible out-of-bounds write caused by a use-after-free, enabling local escalation of privilege to SYSTEM without user interaction. Remedies are not detailed in this document, but the Pixel update bull...

CVE-2019-9274

CVE-2019-9274 affects the Android kernel MNH driver. The issue is an out-of-bounds write caused by a missing bounds check, enabling local privilege escalation to System with no user interaction required. Confirmed details across multiple sources (NVD entry and vendor advisories) describe the MNH ...

CVE-2019-9273

CVE-2019-9273 is a local elevation-of-privilege vulnerability in the Android kernel’s synaptics_dsx_htc touchscreen driver, caused by an improper locking leading to a use-after-free. The issue could allow a privileged attacker to gain System execution rights without user interaction. Public detai...

CVE-2019-9441

CVE-2019-9441 describes an elevation-of-privilege vulnerability in the Android kernel MNH driver. The issue is an out-of-bounds write caused by improper input validation, which could allow a local attacker to gain System-level execution privileges without user interaction. Public documentation in...

CVE-2019-9446

CVE-2019-9446 affects the Android kernel FingerTipS touchscreen driver. The issue is an out-of-bounds write caused by improper input validation, enabling a local escalation of privilege with System execution privileges required. Exploitation does not require user interaction. The connected docume...

CVE-2019-9436

CVE-2019-9436 affects the LG Bootloader component in Android (per Pixel Update Bulletin). The issue is described as a secure boot bypass enabling local elevation of privilege (EoP) with SYSTEM privileges, with exploitation described as requiring user interaction. The vulnerability is listed as Ty...

CVE-2019-9248

The CVE-2019-9248 entry concerns the Android kernel FingerTipS touchscreen driver, where a missing bounds check enables a local out-of-bounds write that can escalate privileges to System with no user interaction. Affected component: FingerTipS touchscreen driver in the Android kernel. Root cause:...

CVE-2017-0783

CVE-2017-0783 is described in connected documents as the Bluetooth Pineapple vulnerability affecting the Android Bluetooth stack. The flaw allows an attacker to create a malicious network interface on a victim device, reconfigure IP routing, and force all communications to pass through the attack...

CVE-2021-39665

CVE-2021-39665 affects Android 12 with a vulnerability in checkSpsUpdated (AAVCAssembler.cpp) that can trigger a heap-based out-of-bounds read, enabling remote information disclosure. Exploitation requires user interaction (per the description); no explicit patch/version is provided in the connec...

CVE-2019-9433

CVE-2019-9433 is a libvpx vulnerability identified in multiple advisories. The issue is described as an information disclosure caused by improper input validation in libvpx, enabling remote information disclosure without extra execution privileges (user interaction required per the CVE entry). Th...

CVE-2020-0213

CVE-2020-0213 affects Android Media Framework (ihevcd_fmt_conv_420sp_to_420sp_av8) and is caused by a heap buffer overflow leading to a possible out-of-bounds write. Impact: remote information disclosure with no execution privileges required, exploitable with user interaction. Affected products/v...

CVE-2020-6616

CVE-2020-6616 involves Broadcom BCM4361 Bluetooth RNG: a low-entropy PRNG is used where a Hardware RNG should be, enabling spoofing risks. Publicly documented impact references include Apple’s iOS 13.5/iPadOS 13.5 notes, which list CVE-2020-6616 under Bluetooth with a low-entropy PRNG issue, affe...

CVE-2022-20369

CVE-2022-20369 : In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out-of-bounds write due to improper input validation, leading to local escalation of privileges with System execution privileges needed. User interaction is not required. Connected Astra Linux bulletin reiterates this de...

CVE-2019-9443

CVE-2019-9443 affects the Android kernel VL53L0 driver. The issue is an out-of-bounds write caused by a permissions bypass in the set_fs path, enabling local elevation of privilege without user interaction. Public exploitation details are not provided in the available documents. The vulnerability...

CVE-2015-8956

CVE-2015-8956 detailed in connected sources: The Linux kernel’s rfcomm_sock_bind in net/bluetooth/rfcomm/sock.c, vulnerable before 4.2, may allow a local attacker to obtain sensitive information or cause a denial of service (NULL pointer dereference) via a bind system call on a Bluetooth RFCOMM s...

CVE-2021-39803

CVE-2021-39803 affects Android Media Framework (Media Codecs) with the vulnerable component C2AllocatorIon.cpp. The root cause is an out-of-bounds read caused by a use-after-free, leading to remote information disclosure without executing code, with user interaction required for exploitation. Imp...

CVE-2022-20409

CVE-2022-20409 : The vulnerability exists in the Linux kernel’s io_uring.c, specifically in io_identity_cow, where a use-after-free can corrupt memory and enable local privilege escalation. The Android/Linux kernel context is affected (Android kernel and EulerOS advisories reference this CVE). Ex...

CVE-2019-9451

CVE-2019-9451 affects the Android kernel touchscreen driver. The flaw is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with System execution privileges. Exploitation is not dependent on user interaction. The available documents do not specify a pa...

CVE-2019-9461

CVE-2019-9461 affects the Android kernel VPN routing component. The issue enables a potential information disclosure by an adjacent-network attacker, with no additional execution privileges and no user interaction required. The vulnerability is listed under the Pixel/Android 2019-09-01 bulletin w...

CVE-2019-9271

The CVE-2019-9271 issue is a race condition in the Android kernel MNH driver caused by insufficient locking, leading to a use-after-free and potential privilege escalation to System level. Affected component: MNH driver in Android kernel. Impact: elevation of privilege with partial/hardening impl...

CVE-2022-20572

CVE-2022-20572 affects Android kernel components: in verity_target of dm-verity-target.c there is a missing permission check that could allow modification of read-only files, enabling local privilege escalation with System-level privileges. Exploitation is local and does not require user interact...

CVE-2019-2227

CVE-2019-2227 affects Android devices via a DeepCopy bug in btif_av.cc that can trigger an out-of-bounds read, enabling remote information disclosure over Bluetooth without user interaction. The entry covers Android 9 and 10, with impact described as information disclosure (confidentiality) and a...

CVE-2016-0774

CVE-2016-0774 affects Linux kernel backports in Debian wheezy (before 3.2.73-2+deb7u3) and RHEL 7.1 (before 3.10.0-229.26.2). The flaw is in the pipe_read/pipe_write paths in fs/pipe.c where the side effects of failed __copy_to_user_inatomic/__copy_from_user_inatomic calls are not properly handle...

CVE-2020-0182

CVE-2020-0182 affects libexif, where exif_entry_get_value may perform an out-of-bounds read due to a missing bounds check, enabling local information disclosure without extra privileges. The published advisories and vendor bulletins (e.g., Red Hat RHSA-2020:4040; Debian DLA-2249-1; ALAS2-2020-152...