CVE-2024-0029

CVE-2024-0029 describes a logic error across multiple Android files that could allow capturing the device screen in violation of device policy, enabling local elevation of privilege with no extra execution privileges required. Exploitation details are not provided in the supplied documents. Affec...

CVE-2024-0015

CVE-2024-0015 affects the Android Framework via DreamService.java: convertToComponentName can be abused to launch arbitrary protected activities through intent redirection, enabling local elevation of privilege with low privileges and no user interaction required. Public references indicate this ...

CVE-2023-40106

CVE-2023-40106 concerns a BAL bypass in Android’s NotificationManagerService.java (sanitizeSbn) that could allow launching an activity from the background, enabling local privilege escalation without extra privileges or user interaction. Affected component is the background handling path in the A...

CVE-2024-0021

CVE-2024-0021 affects Android’s NotificationAccessConfirmationActivity in the work profile. A logic error could let an app enable notification listener services, enabling local elevation of privilege with no extra privileges; exploitation requires user interaction. The issue is documented across ...

CVE-2024-0023

CVE-2024-0023: In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not needed for exploitation. Connected...

CVE-2023-40111

The provided documents only repeat the CVE description (MediaSessionRecord.java, possible local privilege escalation via a confused deputy) with no additional technical details, affected versions, or fixes. Public technical details are not available here; monitor for updates.

CVE-2024-0035

The CVE 2024-0035 entry concerns Android’s TileLifecycleManager.java, specifically onNullBinding, where a missing null check could allow launching an activity from the background. This creates a local elevation of privilege with no extra execution privileges or user interaction required. Affected...

CVE-2023-40110

CVE-2023-40110 is tied to a heap buffer overflow in multiple MtpPacket.cpp functions, causing an out-of-bounds write that could enable local privilege escalation with user interaction required. Connected sources (NVD/Red Hat/PRION/CNNVD/Android bulletin) consistently reference MtpPacket.cpp as th...

CVE-2023-40107

CVE-2023-40107 concerns a use-after-free in ARTPWriter (ARTPWriter.cpp) related to uninitialized data, enabling local privilege escalation without extra user interaction. The affected component is ARTPWriter (ARTPWriter.cpp); underlying issue is use-after-free, leading to potential arbitrary code...

CVE-2024-0036

CVE-2024-0036 describes a logic error in startNextMatchingActivity within Android’s ActivityTaskManagerService.java that could bypass restrictions on starting activities from the background, enabling local privilege escalation without extra execution privileges and without user interaction. The v...

CVE-2023-40109

CVE-2023-40109 affects the Android USB configuration path: createFromParcel in UsbConfiguration.java. The issue enables a background activity launch via a permissions bypass, causing local privilege escalation with no extra execution privileges, requiring user interaction for exploitation. Report...

CVE-2023-40104

CVE-2023-40104 affects ca-certificates with an information-disclosure flaw due to untrusted cryptographic certificates, enabling remote read of encrypted TLS data and requiring no user interaction. Connected sources confirm this vulnerability across multiple ecosystems (NVD/Red Hat/NASL/Nessus pl...

CVE-2024-0040

CVE-2024-0040 centers on a heap buffer overflow in the setParameter function of MtpPacket.cpp, causing a possible out-of-bounds read and remote information disclosure without privileges or user interaction. Multiple trusted sources (NVD, Red Hat, PRION, Vuln enrichment, CVE lists, and Android sec...

CVE-2024-0034

Technical details beyond the BAL Bypass description are not publicly provided in the supplied documents. Monitor Android security advisories and vendor advisories for affected products, versions, and fixes.

CVE-2025-48617

A permissions bypass in the overrideConfig function of CarrierConfigLoader.java allows for a UID check bypass within the Android System component. This vulnerability can lead to a local escalation of privilege without requiring additional execution privileges or user interaction. This issue is ad...

CVE-2024-0044

CVE-2024-0044 is a high-severity vulnerability in the Android framework (affecting versions 12, 12L, 13, and 14 *) caused by improper input validation in the createSessionInternal function of PackageInstallerService.java. This flaw enables a "run-as any app" attack, allowing an attacker with ADB ...

CVE-2024-29740

A security vulnerability exists in the ACPM subcomponent of Google Pixel devices. The flaw is caused by a missing bounds check in the tmu_set_table function of the tmu.c file, leading to a potential out-of-bounds write . This vulnerability can result in a local escalation of privilege (EoP) witho...

CVE-2019-2215

CVE-2019-2215 is a use-after-free in the Android binder driver (binder.c) that enables local privilege escalation from an app to the Linux kernel. The issue is local, with no user interaction required, and exploitation may lead to memory corruption, denial of service, or escalation per the cited ...

CVE-2024-23706

CVE-2024-23706 affects Google Android via health data permissions bypass in the HealthFitness pathway, caused by improper input validation. The result is local escalation of privilege with no additional execution privileges required and no user interaction needed. Affected context appears in Andr...

CVE-2021-39793

Summary of CVE-2021-39793 : A vulnerability in the Mali GPU kernel driver (kbase_jd_user_buf_pin_pages in mali_kbase_mem.c) causes an out-of-bounds write due to a logic error. This can enable local privilege escalation with no required user interaction. Affected: Android devices using Mali GPU ke...

CVE-2020-0041

CVE-2020-0041 affects the Android kernel binder subsystem: in binder_transaction there is an out-of-bounds write caused by an incorrect bounds check, enabling local privilege escalation with no user interaction. The vulnerability is documented across multiple advisories (upstream kernel/UTSA entr...

CVE-2021-1048

CVE-2021-1048 is a use-after-free in Android's upstream Linux kernel ep_loop_check_proc (eventpoll.c) that can cause memory corruption and local privilege escalation without user interaction. The issue existed in the Android kernel but upstream Linux patched it; Android device patch timing varied...

CVE-2020-0069

The CVE-2020-0069 issue affects MediaTek CMDQ driver ioctl handlers in Android kernel, where insufficient input sanitization and missing SELinux restrictions can cause an out-of-bounds write, enabling local privilege escalation without extra privileges or user interaction. Public material confirm...

CVE-2024-49734

A vulnerability in multiple functions of ConnectivityService.java within Google Android allows a Wi-Fi access point to determine the specific site a device is accessing through a VPN . This is caused by a side channel information disclosure , which can lead to remote information disclosure withou...

CVE-2017-14496

CVE-2017-14496: dnsmasq contains an integer underflow in the EDNS0 add_pseudoheader handling when --add-mac, --add-cpe-id, or --add-subnet is used, allowing a denial of service via crafted DNS requests. Public advisories (CentOS/RH, Arch Linux, AWS ALAS) and Arista note fixes, with upgrades to dn...

CVE-2024-0042

Technical details are not publicly available in the provided documents. No affected products/versions or remediation specifics are listed. Monitor for updates.

CVE-2024-49744

Google Android is impacted by an elevation of privilege vulnerability (CVE-2024-49744 ) caused by unsafe deserialization within the checkKeyIntentParceledCorrectly function of AccountManagerService.java. An attacker can exploit this flaw to bypass parcel mismatch mitigation , potentially leading ...

CVE-2011-1823

The CVE-2011-1823 entry concerns the vold volume manager daemon in Android (Android 3.0 and 2.x up to 2.3.4). The vulnerability arises from trusting PF_NETLINK messages, enabling a local attacker to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only ...

CVE-2023-20963

CVE-2023-20963 affects Android WorkSource: a parcel/unparcel mismatch can enable local privilege escalation with no additional execution privileges required. Affected versions include Android 11–13 (11, 12, 12L, 13); patch information is in the March 2023 Android Security Bulletin, with mitigatio...

CVE-2018-9434

A flaw in Android's Binder IPC allows applications to craft Parcels where binder-object metadata overlaps with string data. During unmarshalling, the kernel inserts genuine kernel pointers into attacker-controlled buffers. These pointers can be leaked back through services like the clipboard, res...

CVE-2024-49738

Google Android is affected by an out-of-bounds write vulnerability within the writeInplace function of Parcel.cpp . This flaw arises from a failure to properly check boundaries, which could allow for local escalation of privilege without requiring additional execution privileges or user interacti...

CVE-2018-9401

This vulnerability affects the cameraisp component within the MediaTek components of Google Pixel and Nexus devices. The root cause is an incorrect bounds check , which allows an attacker to access kernel memory from user space. This flaw can lead to local escalation of privilege (EoP) without re...

CVE-2023-40132

The Android operating system contains an Elevation of Privilege (EoP) vulnerability (CVE-2023-40132) within the Framework component, specifically in RingtoneManager.java at the setActualDefaultRingtoneUri function. The root cause is a missing permission check , which allows an attacker to bypass ...

CVE-2024-43765

Google Android is affected by an elevation of privilege vulnerability in the System component and the Documents UI subcomponent of Project Mainline. The flaw originates from multiple locations where a tapjacking/overlay attack or eavesdropping hijacking/overwriting attack can be exploited to gain...

CVE-2024-49737

Google Android is affected by an elevation of privilege vulnerability (CVE-2024-49737) caused by a logic error in the applyTaskFragmentOperation function of the WindowOrganizerController.java file. An attacker can exploit this flaw to launch arbitrary activities as the system UID . This local esc...

CVE-2024-31310

CVE-2024-31310 affects Android: in AutofillManagerServiceImpl.newServiceInfoLocked, improper input validation can allow hiding an enabled Autofill service in the Autofill service settings. Impact is local privilege escalation with high confidentiality/integrity/availability implications, requirin...

CVE-2022-20007

The CVE-2022-20007 issue is a race-condition vulnerability in Android's RootWindowContainer.java (startActivityForAttachedApplicationIfNeeded) that could allow an overlay to fool a foreground app, enabling local privilege escalation. Affected: Android 10–12 (including 12L). Root cause: a race bet...

CVE-2024-49724

Google Android is affected by an elevation of privilege vulnerability in the Framework component. A race condition (competitive condition) flaw exists in multiple functions within AccountManagerService.java , allowing an attacker to bypass permissions and launch protected activities. This can lea...

CVE-2024-49735

Google Android is affected by a local elevation of privilege vulnerability (CVE-2024-49735). The root cause is a failure to persist permissions settings due to resource exhaustion , which may lead to the program incorrectly retaining setup privileges. An attacker can exploit this to elevate privi...

CVE-2018-9461

A race condition exists in the onAttachFragment method of ShareIntentActivity.java within the Android operating system. This vulnerability allows an application to read files from the messages app without requiring additional execution privileges. The flaw can be exploited without user interactio...

CVE-2019-9458

CVE-2019-9458 is a Linux kernel video driver use-after-free caused by a race condition, leading to local privilege escalation without user interaction. Multiple connected advisories confirm the issue exists in the Android/Linux kernel/video driver stack and note kernel fixes are needed; no public...

CVE-2024-32927

CVE-2024-32927 affects Google's Pixel devices via the RadioExt.cpp function sendDeviceState_1_6, where a use-after-free due to improper locking is reported. The vulnerability enables local escalation of privilege with no additional execution privileges required and no user interaction needed, per...

CVE-2024-49742

Google Android is affected by a local elevation of privilege vulnerability (CWE-269) caused by a missing permission check in the onCreate method of NotificationAccessConfirmationActivity.java. This flaw could allow an application with notification access to be hidden within the system Settings, p...

CVE-2024-31317

CVE-2024-31317 is a Zygote command-injection vulnerability affecting Android 9–13, enabling a non-privileged app with WRITE_SECURE_SETTINGS to trigger code execution in the Zygote process via unsafe deserialization and manipulated Zygote arguments (e.g., runtime-flags, hidden_api_blacklist_exempt...

CVE-2018-9382

A missing permission check in multiple functions of WifiServiceImpl.java allows for the activation of a Wi-Fi hotspot from a non-owner profile. This vulnerability enables a local escalation of privilege without requiring additional execution privileges or user interaction. The issue specifically ...

CVE-2018-9375

The UserDictionaryProvider component, specifically within UserDictionaryProvider.java , is vulnerable to a confused deputy flaw in multiple functions. This vulnerability allows an attacker to add or delete words in the user dictionary, potentially leading to a local escalation of privilege withou...

CVE-2018-9387

The mnh_sm driver component in Google Pixel and Nexus devices is vulnerable to a heap overflow caused by an integer overflow in multiple functions of mnh-sm.c . This vulnerability allows for local escalation of privilege without requiring additional execution privileges or user interaction. Remed...

CVE-2020-0466

CVE-2020-0466 is a use-after-free in eventpoll.c (do_epoll_ctl and ep_loop_check_proc) that can enable local privilege escalation without user interaction. Publicly documented in multiple advisories linked to kernel packages (Unity Linux UTSA-2026-004002/004258, MiracleLinux AXSA advisories, Cent...

CVE-2018-9568

This CVE-2018-9568 entry concerns the Linux kernel socket code: In sk_clone_lock of sock.c, a memory corruption due to type confusion could allow local privilege escalation without user interaction. Affected product/version in the initial doc is Android kernel; connected MiracleLinux advisory con...

CVE-2024-43769

A logic error in the isPackageDeviceAdmin function of PackageManagerService.java within Google Android creates a possible edge case that could prevent the uninstallation of CloudDpc . This vulnerability allows for local escalation of privilege without requiring additional execution privileges or ...