CVE-2024-0018

The vulnerability CVE-2024-0018 affects Android Media Codecs (ColorConverter.cpp) in ColorConverter::convertYUV420Planar16ToY410, where a heap-based out-of-bounds write is possible. This could enable local escalation of privilege with no additional execution privileges and requires no user intera...

CVE-2023-40100

CVE-2023-40100 affects Android via a memory corruption in the discovery_thread of Dns64Configuration.cpp caused by a use-after-free. This can lead to local elevation of privilege with no extra execution privileges required and no user interaction needed, per multiple sources. The vulnerability is...

CVE-2024-0014

CVE-2024-0014: The UpdateFetcher.java startInstall path contains a logic error that could allow a malicious config update, enabling local privilege escalation with no extra privileges and no user interaction required. This vulnerability is described across multiple sources (NVD/Red Hat/UVD enrich...

CVE-2024-0041

CVE-2024-0041 describes a race condition in SystemStatusAnimationSchedulerImpl.kt (removePersistentDot) that could allow local escalation of privilege with no extra privileges and without user interaction. Connected docs corroborate the same description across multiple feeds (NVD, Red Hat, CNVD, ...

CVE-2023-40114

CVE-2023-40114 relates to an out-of-bounds write caused by a use-after-free in MtpFfsHandle.cpp, leading to local elevation of privilege with no additional execution privileges required. Exploitation requires user interaction. The public details identify the affected area (Android-related code pa...

CVE-2024-0038

Summary of CVE-2024-0038: The issue lies in Android’s AccessibilityManagerService.java within the function injectInputEventToInputFilter, where a missing permission check enables arbitrary input event injection. This can lead to local escalation of privilege without additional execution privilege...

CVE-2024-0033

CVE-2024-0033 concerns Android’s ashmem-dev.cpp, where a heap buffer overflow may cause a missing seal. The effect is local elevation of privilege with no extra user interaction required, per the documents. The available sources consistently describe the issue’s presence in ashmem-dev.cpp and its...

CVE-2024-43096

CVE-2024-43096 involves a possible out-of-bounds write in the Bluetooth stack (gatt_sr.cc) within the function build_read_multi_rsp. The root cause is a missing bounds check, which could allow remote code execution with no privileges and no user interaction, when the attacker is proximal/adjacent...

CVE-2023-35674

The CVE-2023-35674 issue affects the Android Framework, specifically an onCreate path in WindowState.java that can launch a background activity due to a logic error. This enables local elevation of privilege without extra execution privileges and without user interaction. The Android Security Bul...

CVE-2023-21273

CVE-2023-21273 describes an out-of-bounds write in the Android SDP_AddAttribute path (sdp_db.cc), caused by an incorrect bounds check. The issue can enable remote code execution with no extra privileges and no user interaction, as stated in multiple public sources. Public documents consistently i...

CVE-2017-0781

CVE-2017-0781 is a remote code execution vulnerability in the Android Bluetooth stack (BNEP) that allows crafting packets to overflow a heap buffer and execute code. Connected PoC/Exploit references (BlueBorne) describe Android RCE via the BNEP service and related Bluetooth flaws across Android v...

CVE-2025-48593

The CVE-2025-48593 entry concerns a remote code execution flaw in Android’s system code, specifically within the bta_hf_client_main.cc path (bta_hf_client_cb_init). The root cause is a missing bounds check during processing of network packets, enabling a buffer overflow via memcpy into a fixed-si...

CVE-2025-48595

CVE-2025-48595 is an Android Framework vulnerability involving an integer overflow that could enable code execution and local privilege escalation without user interaction. The Android Security Bulletin (June 2026) lists this CVE under Framework in the 2026-06-01 patch level with an overall high/...

CVE-2019-9506

CVE-2019-9506 affects Bluetooth KNOB (Key Negotiation of Bluetooth) by allowing nearby attackers to influence encryption key length during BR/EDR negotiation, enabling potential eavesdropping and ciphertext injection. Connected sources show this vulnerability being acknowledged by Apple across iO...

CVE-2023-21127

CVE-2023-21127 affects Android (11, 12, 12L, 13) via the NuMediaExtractor.cpp function readSampleData, where an out-of-bounds write on uninitialized data is possible. This can lead to remote code execution with no additional privileges required, with user interaction needed for exploitation. Mult...

CVE-2025-48530

CVE-2025-48530 affects the Android System component. It arises from out-of-bounds access due to incorrect bounds checking in multiple locations, enabling remote code execution with no extra privileges and no user interaction. The issue is characterized as a global Android risk in the System table...

CVE-2025-48543

The CVE-2025-48543 entry describes a use-after-free vulnerability in the Android Runtime (ART) that can escape the Chrome sandbox to attack system_server, enabling local privilege escalation without user interaction. Affected scope per sources includes ART-related code paths in Android 13–16, wit...

CVE-2019-9278

CVE-2019-9278 affects libexif. The vulnerability is an out-of-bounds write caused by an integer overflow in libexif, leading to remote escalation of privilege in the media content provider. Exploitation requires user interaction. Affected versions include Android-10 (and related platforms in the ...

CVE-2023-21108

CVE-2023-21108 affects Android 11–13 via the Bluetooth SDP discovery path: in sdpu_build_uuid_seq of sdp_discovery.cc, an out-of-bounds write caused by a use-after-free can lead to remote code execution if Hands Free Profile (HFP) is enabled. No user interaction is required. The vulnerability is ...

CVE-2025-26438

CVE-2025-26438 is a vulnerability in Android Bluetooth SMP authentication due to an incorrect implementation in smp_process_secure_connection_oob_data (smp_act.cc). The issue enables remote elevation of privilege with network access and no user interaction, as described in multiple sources. Conne...

CVE-2018-5383

CVE-2018-5383 is a Bluetooth input-validation vulnerability affecting Apple platforms (e.g., macOS High Sierra and later, iOS 11.4 and later; also appearing in tvOS/watchOS updates per Apple advisories). The issue arises from insufficient validation of elliptic-curve parameters used during Diffie...

CVE-2023-21282

CVE-2023-21282 affects Google Android components via TRANSPOSER_SETTINGS in lpp_tran.h, with an out-of-bounds write caused by an incorrect bounds check. The impact is remote code execution with user interaction required, as stated in the CVE description and mirrored by multiple advisories (NVD en...

CVE-2022-20345

CVE-2022-20345 affects Android 12/12L with a vulnerability in the Bluetooth L2C BLE implementation. The issue is a missing bounds check in l2cble_process_sig_cmd (l2c_ble.cc) that can cause an out-of-bounds write, enabling remote code execution over Bluetooth without user interaction. Android bul...

CVE-2023-20938

CVE-2023-20938 affects the Android kernel via binder_transaction_buffer_release in binder.c, causing a use-after-free due to improper input validation. This can enable local privilege escalation with no extra execution privileges required and without user interaction; the advisory consistently no...

CVE-2024-32896

The CVE-2024-32896 issue is a local Elevation of Privilege (EoP) in the Android Framework affecting Pixel devices, caused by a logic error that could enable privilege escalation with no extra execution privileges. Exploitation requires user interaction per the description, with the Android bullet...

CVE-2023-21085

CVE-2023-21085 involves Android’s System component where a missing bounds check in function nci_snd_set_routing_cmd (in file nci_hmsgs.cc ) can cause an out-of-bounds write. This flaw could enable remote code execution with no privileges and no user interaction, by an attacker in proximal/adjacen...

CVE-2017-0782

CVE-2017-0782 is a remote code execution vulnerability in Android Bluetooth PAN (Personal Area Networking) via the BNEP high-level configuration, causing memory corruption and allowing full device compromise without user interaction. It affects Android versions 4.4.4 through 8.0 (per the CVE desc...

CVE-2019-2102

CVE-2019-2102 concerns a BLE LTK misconfiguration where a long-term key from the BLE spec example could be used as a hardcoded LTK. The initial description specifies Android as affected, listing Android 7.0 through 9.0, with an attacker in proximity capable of remotely injecting keystrokes on a p...

CVE-2018-9363

CVE-2018-9363 is a Linux-kernel vulnerability in the HIDP Bluetooth driver: hidp_process_report can overflow a buffer due to incorrect length handling, potentially causing memory corruption and DoS, with possible remote code execution. Public documents across Debian/Ubuntu/CentOS‑related advisori...

CVE-2023-40088

CVE-2023-40088 is a memory corruption via a use-after-free in Android’s Bluetooth stack (callback_thread_event in com_android_bluetooth_btservice_AdapterService.cpp). The issue could allow remote code execution with no privileges and no user interaction, limited to proximal/nearby Bluetooth range...

CVE-2024-49749

CVE-2024-49749 is a vulnerability in the DGifSlurp function of the GIF decoder in dgif_lib.c. It stems from an integer overflow that can trigger an out-of-bounds write, enabling remote code execution. Exploitation is described as possible without additional user interaction. Connected sources (Re...

CVE-2023-40129

CVE-2023-40129 describes a heap-based out-of-bounds write in the Bluetooth stack (build_read_multi_rsp in gatt_sr.cc) that enables remote code execution with no user interaction. The NVD entry and Android security documentation indicate an adjacent attack vector with high impact and a base CVSS v...

CVE-2022-21745

CVE-2022-21745 describes a memory corruption via a use-after-free in WIFI Firmware, enabling remote privilege escalation when devices connect to an attacker‑controlled Wi‑Fi hotspot. The issue requires no user interaction and is exploitable by an adjacent network. Public references indicate a pat...

CVE-2019-2225

CVE-2019-2225 describes an elevation-of-privilege vulnerability in Android Bluetooth pairing where a malicious device could pair without user confirmation and interact with the phone, enabling remote privilege escalation without user interaction. The affected platform versions listed are Android ...

CVE-2022-20411

CVE-2022-20411 is an Android Bluetooth heap/bounds issue in avdt_msg_asmbl (avdt_msg.cc) where a missing bounds check enables an out-of-bounds write. This can lead to remote code execution over Bluetooth with no user interaction or privileges required. Affected: Android-10, Android-11, Android-12...

CVE-2022-20347

CVE-2022-20347 affects Android 10–12(12L) with a vulnerability in the onAttach path of ConnectedDeviceDashboardFragment.java that enables a permission bypass via a confused deputy, enabling remote escalation of privilege in Bluetooth settings without extra execution privileges or user interaction...

CVE-2024-40672

CVE-2024-40672 affects Android’s ChooserActivity.java, where a missing permission check in onCreate could bypass factory reset protections. This enables local elevation of privilege with no extra execution privileges or user interaction required. Documented impact is a local EoP; exploitation det...

CVE-2024-40669

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2024-43767

CVE-2024-43767 affects Skia’s SkBlurMaskFilterImpl.cpp, specifically prepare_to_draw_into_mask, where a bound/size handling flaw can cause a heap overflow. The vulnerability can lead to remote code execution with no additional privileges; exploitation is described as not requiring user interactio...

CVE-2020-0022

CVE-2020-0022 describes an out-of-bounds write in Android’s Bluetooth stack (packet_fragmenter.cc, reassemble_and_dispatch) that could enable remote code execution over Bluetooth without user interaction, affecting Android 8.0–10. Connected sources contain concrete exploitation analyses and PoCs ...

CVE-2020-8860

CVE-2020-8860 affects Samsung Galaxy S10 devices with Exynos SoCs (G973FXXS3ASJA etc.). The flaw is a buffer overflow in the Call Control Setup messages, caused by inadequate validation of the length of user-supplied data copied into a fixed-length, stack-based buffer. This enables remote code ex...

CVE-2024-40649

Technical details (affected product, version, root cause, exploitability) are not publicly available in the provided documents; monitor for updates.

CVE-2023-21115

CVE-2023-21115: In Android, the vulnerability stems from a weakness in btm_sec_encrypt_change in btm_sec.cc that allows downgrading the link key type due to improper crypto, enabling paired-device elevation of privilege without user interaction. Affected: Android 11, 12, 12L. Status: remediation ...

CVE-2024-43770

CVE-2024-43770 stems from a missing bounds check in the Bluetooth GATT server path (gatts_process_find_info in gatt_sr.cc), causing an out-of-bounds write. This can enable remote code execution on Android devices with no user interaction and without extra privileges. The issue is classified as a ...

CVE-2024-40677

CVE-2024-40677 concerns the Android shouldSkipForInitialSUW path in AdvancedPowerUsageDetail.java. The issue enables bypassing factory reset protections via a missing permission check, enabling local elevation of privilege with no extra execution privileges required and no user interaction needed...

CVE-2019-2177

CVE-2019-2177 affects Android 7.1.1–9 (HidProfile.java, isPreferred) where a permissions bypass can cause device type confusion in the System component, enabling remote code execution. The issue is described as a possible RCE with user interaction required for exploitation. The Android Security B...

CVE-2023-35673

CVE-2023-35673 involves a potential out-of-bounds write in the Bluetooth stack (gatt_sr.cc: build_read_multi_rsp) caused by an integer overflow. This could enable remote code execution on nearby devices without user interaction. The vulnerability affects Android-related Bluetooth components as de...

CVE-2024-0048

CVE-2024-0048 affects Android (AccountManagerService.java) where NULL-response handling can allow local elevation of privileges. Exploitation requires local access; no user interaction documented. Root cause: incorrect handling of NULL responses in the AccountManagerService session. Android secur...

CVE-2021-0933

CVE-2021-0933 relates to Android Bluetooth pairing flow, where HTML tags could disrupt the consent dialog due to improper input validation in CompanionDeviceActivity.java or DeviceChooserActivity.java. The issue enables remote elevation of privilege by coercing a user into pairing a malicious Blu...

CVE-2023-20960

CVE-2023-20960 affects Google Android 12L–13, involving the function launchDeepLinkIntentToRight in SettingsHomepageActivity.java . The root cause is improper input validation that can allow launching arbitrary activities, enabling a local elevation of privilege with user privileges and no user i...