CVE-2024-0039

CVE-2024-0039 affects Android Bluetooth stack with an out-of-bounds write in attp_build_value_cmd of att_protocol.cc, enabling remote code execution over the network without user interaction. The issue stems from a missing bounds check and is present in att_protocol.cc as described across multipl...

CVE-2024-0031

CVE-2024-0031 affects Google Android components. The vulnerability is in the function attp_build_read_by_type_value_cmd of att_protocol.cc, where improper input validation can cause an out-of-bounds write, enabling remote code execution with no privileges and no user interaction required. The pro...

CVE-2023-40115

A use after free memory corruption vulnerability exists in the readLogs function of StatsService.cpp within the StatsD component. This flaw could allow a local attacker to achieve local escalation of privilege without requiring additional execution privileges or user interaction. While the specif...

CVE-2024-49748

Google Android is affected by a heap buffer overflow vulnerability within the gatt_sr.cc file, specifically in the gatts_process_primary_service_req function. An attacker can exploit this flaw to achieve remote code execution (RCE) without requiring additional execution privileges or user interac...

CVE-2025-22429

Google Android , a Linux-based open-source operating system, is affected by an elevation of privilege vulnerability. The flaw stems from a logic error present in multiple locations within the code, which may allow an attacker to execute arbitrary code . This could lead to a local escalation of pr...

CVE-2025-26416

A heap buffer overflow exists in the initializeSwizzler function of SkBmpStandardCodec.cpp within the Skia graphics library. This vulnerability allows for an out of bounds write , which could lead to remote escalation of privilege without requiring additional execution privileges or user interact...

CVE-2025-22435

Google Android is affected by a memory corruption vulnerability caused by a type confusion error in the avdt_msg_ind function of avdt_msg.cc. An attacker can exploit this flaw to achieve escalation of privilege on a paired device without requiring additional execution privileges or user interacti...

CVE-2020-0452

CVE-2020-0452 affects libexif; the issue is an out-of-bounds write caused by an integer overflow in exif-entry.c, potentially enabling remote code execution when processing remote image data. Multiple connected advisories (CentOS RHSA-2020:5402, ALSA-2020:5393 for AlmaLinux, Amazon Linux ALAS2-20...

CVE-2026-0163

A use-after-free vulnerability exists in multiple functions of the vpu_ioctl.c file within the Video Processing Unit (VPU) driver on Android. The flaw occurs when the driver retrieves a driver instance from an array and resets the reference counter before closing it, leading to memory being used ...

CVE-2023-20918

CVE-2023-20918 affects the Android Framework, specifically getPendingIntentLaunchFlags in ActivityOptions.java. The issue is an elevation of privilege due to a confused deputy, requiring no user interaction. Exploitation vectors are not detailed in the provided documents, but the Android Security...

CVE-2023-20951

CVE-2023-20951 is an Android RCE issue caused by an out-of-bounds write in gatt_process_prep_write_rsp (gatt_cl.cc). The vulnerability affects Android 11–13 and can enable remote code execution with no privileges and no user interaction, per multiple sources. The Android Security Bulletin (March ...

CVE-2019-2107

CVE-2019-2107 affects the Android media framework. The issue is an out-of-bounds write in ihevcd_parse_pps (ihevcd_parse_headers.c) that can lead to remote code execution with no additional privileges, requiring user interaction to exploit. Affected Android versions include 7.0 through 9. Public ...

CVE-2021-0340

CVE-2021-0340 affects Android 10, with the issue located in IsoInterface.java (parseNextBox). The root cause is improper input validation that can leak unredacted location information, enabling remote information disclosure without additional execution privileges; exploitation requires user inter...

CVE-2023-20954

CVE-2023-20954 affects Android systems (Android 11, 12, 12L, 13). In SDP_AddAttribute() within sdp_db.cc, an out-of-bounds write is caused by an incorrect bounds check, enabling potential remote code execution with no privileges and no user interaction required. The vulnerability is triggered via...

CVE-2017-0589

CVE-2017-0589 is a remote code execution vulnerability in libhevc used by the Android Mediaserver . A specially crafted media file could cause memory corruption during processing, enabling code execution within Mediaserver. Affected Android versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. T...

CVE-2019-2126

CVE-2019-2126: In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer, which could enable remote code execution with no extra privileges. Reported across libvpx usage in Android packages: Android-7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9. User...

CVE-2024-49747

Google Android is affected by a buffer overflow vulnerability caused by a logic error in the gatt_sr.cc file, specifically within the gatts_process_read_by_type_req function. This out of bounds write allows a remote attacker to execute arbitrary code without requiring additional privileges or use...

CVE-2017-0540

CVE-2017-0540 describes a remote code execution in the Android Mediaserver’s libhevc component. The underlying issue is a memory corruption vulnerability triggered by specially crafted media files during processing, enabling code execution within the Mediaserver process. Affected Android versions...

CVE-2020-0099

CVE-2020-0099 affects Android 8.0–10 and involves the WindowManagerService.addWindow, with an insecure default value enabling a possible window overlay attack (tapjacking) leading to local privilege escalation. Exploitation requires user interaction in the documented reports, and the issue is cat...

CVE-2017-0720

The CVE-2017-0720 entry concerns Android's media framework libhevc, where a remote code execution vulnerability affects Android versions 5.0.2, 5.1.1, 6.0/6.0.1, and 7.0/7.1.1/7.1.2. The issue is triggered by processing a specially crafted file, with impact described as remote execution of arbitr...

CVE-2021-39692

CVE-2021-39692 describes a local elevation of privilege in Android (10–12) via SetupLayoutActivity.java (tapjacking/overlay) that could bypass user consent to set up a work profile. Exploitation requires user interaction; CVSS indicates high impact (EoP) with local attack vector. Public reference...

CVE-2020-27068

CVE-2020-27068 is an Android kernel issue that also surfaces in upstream Linux kernel code. The Connected documents confirm concrete exposure in Linux-based environments: Unity Linux advisories UTSA-2026-004302/004038/001442 reference this CVE alongside kernel fixes for Unity Linux 20.1060e/20.10...

CVE-2021-39701

CVE-2021-39701 affects Google Android System components, with the issue described as a flaw in serviceConnection of ControlsProviderLifecycleManager.kt that could allow a foreground service to run without a notification or required permission due to improper input validation. This could enable lo...

CVE-2017-0811

CVE-2017-0811 is a remote code execution vulnerability in the Android media framework (libhevc). Affected products/versions include Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0. The vulnerability originates in the media framework and could allow an attacker with local access to ru...

CVE-2019-2201

CVE-2019-2201: Out-of-bounds write in generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S can enable remote code execution in unprivileged Android processes (Android 8.0–10). Root cause is a missing bounds check in the NEON path; exploitation requires user interaction. Remediation: Android ...

CVE-2010-1807

A design error in WebKit regarding the processing of floating-point data types allows remote attackers to execute arbitrary code or cause a denial of service. This vulnerability is present in Apple Safari 4.x (before 4.1.2), 5.x (before 5.0.2), Android (prior to 2.2), and webkitgtk (before 1.2.6)...

CVE-2015-6639

CVE-2015-6639 details: A privilege-escalation in the Widevine QSEE TrustZone app on Android 5.x (before 5.1.1 LMY49F) and 6.0 (before 2016‑01‑01) allows a crafted app with QSEECOM access to gain privileges. Root cause involves trustlet/TrustZone interaction enabling local escalation via the QSEE ...

CVE-2016-0801

CVE-2016-0801 affects Broadcom BCM43xx Wi‑Fi firmware used by Broadcom devices. The Debian/Mageia advisories describe memory corruption in Broadcom Wi‑Fi firmware/packets processing that could enable remote code execution, potentially leading to privilege escalation or data disclosure. Debian not...

CVE-2021-39706

CVE-2021-39706 affects Android (versions 10–12). In CredentialStorage.java, onResume allows cleanup of credentials storage due to a missing permission check, enabling local elevation of privilege. Exploitation requires user interaction. The issue is categorized as EoP withHigh impact (local acces...

CVE-2023-21096

CVE-2023-21096: A use-after-free in OnWakelockReleased within attribution_processor.cc in Android can lead to remote code execution with no privileges and no user interaction. Public documentation identifies this as a critical RCE in the System component affecting Android 12, 12L, and 13, with pa...

CVE-2017-0637

Android Mediaserver exposes a remote code execution in the libhevc component when processing specially crafted media files, leading to memory corruption. Affected Android versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 (Android ID A-34064500). CVSSv3 base score 7.8 (HIGH); attack vector LOC...

CVE-2024-23717

Google Android is affected by an elevation of privilege vulnerability due to improper input validation in the access_secure_service_from_temp_bond method within the btm_sec.cc file. This flaw could allow an attacker to achieve keystroke injection , leading to a remote (proximal/adjacent) escalati...

CVE-2020-0230

CVE-2020-0230 is an Android-related issue described as an out-of-bounds write caused by an incorrect bounds check. The connected records identify the vulnerability as affecting the MediaTek vcu component in Android, with an Elevation of Privilege (EoP) impact classified as High. The Android bulle...

CVE-2021-39702

CVE-2021-39702 affects Android 12; in onCreate of RequestManageCredentials.java, a tapjacking/overlay attack could allow a third‑party app to install certificates without user approval, enabling local elevation of privilege with User interaction required . Documented impact: EoP with high confide...

CVE-2019-2106

CVE-2019-2106 affects Android’s Media framework: in ihevcd_sao_shift_ctb of ihevcd_sao.c, a missing bounds check can cause an out-of-bounds write leading to remote code execution. Impacted Android versions include 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. The issue is described in the July 2019 Android...

CVE-2013-4710

CVE-2013-4710 affects Android WebView implementations (Android 3.0–4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank and other devices). The issue arises from improper WebView handling of addJavascriptInterface, enabling remote attackers to call arbitrary Java object methods or cause a ...

CVE-2022-20361

CVE-2022-20361 describes a vulnerability in Android Bluetooth stack (btif_dm_auth_cmpl_evt in btif_dm.cc) related to Cross-Transport Key Derivation. Root cause is a weakness in the Bluetooth protocol implementation, enabling remote elevation of privilege with no user interaction. Affected product...

CVE-2019-2176

CVE-2019-2176 affects Android 8.0–9 where ihevcd_parse_buffering_period_sei in ihevcd_parse_headers.c can write out of bounds due to a missing bounds check, enabling remote code execution with user interaction required. The issue resides in the Android Media framework, with high/critical severity...

CVE-2023-21130

CVE-2023-21130 describes a buffer overflow in the Android Bluetooth stack (btm_ble_periodic_adv_sync_lost in btm_ble_gap.cc) that could allow remote code execution without user interaction or additional privileges on Android 13. Multiple sources consistently identify this as a Critical/RCE issue ...

CVE-2023-21287

The CVE-2023-21287 entry concerns a type confusion vulnerability in Google Android that could allow remote code execution without user interaction. Connected sources corroborate that this issue is listed under the Android security bulletin as a high-severity, remote code execution vulnerability a...

CVE-2019-2184

CVE-2019-2184 affects Android’s Media framework, specifically PV_DecodePredictedIntraDC in dec_pred_intra_dc.cpp. The issue is an out-of-bounds write caused by a missing bounds check, leading to remote code execution with no special privileges required. Exploitation is described as requiring user...

CVE-2019-1986

CVE-2019-1986 affects the Android Framework, specifically a vulnerability in SkSwizzler (SkSwizzler.cpp) where a missing bounds check enables an out-of-bounds write. This can allow remote escalation of privilege to system_server, with execution in a privileged context, requiring user interaction ...

CVE-2024-53842

The Android operating system on Pixel phones is vulnerable to a critical out-of-bounds write (CWE-787) within the cc_SendCcImsInfoIndMsg function of the cc_MmConManagement.c file. The flaw is caused by a missing bounds check , which could allow a remote attacker to execute arbitrary code without ...

CVE-2019-2186

CVE-2019-2186 is an out-of-bounds write in GetMBheader of combined_decode.cpp that could allow remote code execution in the Android Media framework. Affected Android versions include 7.1.1, 7.1.2, 8.0, 8.1, 9, and 10. The entry is confirmed in multiple sources (NVD/Red Hat/CNVD) and described as ...

CVE-2023-40077

This vulnerability exists in the MetaDataBase.cpp component of the Android Framework . It is caused by synchronization errors when using shared resources, leading to a Use-After-Free (UAF) write via a race condition . An attacker can exploit this flaw to achieve remote escalation of privilege wit...

CVE-2022-20472

CVE-2022-20472 : In Android, the out-of-bounds read in LocaleListCache.cpp (toLanguageTag) arises from an incorrect bounds check and can lead to remote code execution with no user interaction. Affected Android versions include 10–13 (Android-10, Android-11, Android-12, Android-12L, Android-13). C...

CVE-2023-21250

CVE-2023-21250 affects the Android Bluetooth stack (gatt_end_operation in gatt_utils.cc). The root cause is an out-of-bounds write due to a missing bounds check, enabling remote code execution with no privileges and no user interaction required. Android security bulletins for 2023-07-01/07-05 ind...

CVE-2021-0870

CVE-2021-0870 describes a memory corruption race condition in RW_SetActivatedTagType (rw_main.cc) that could allow remote code execution with no privileges required and no user interaction. Affected: Android 9, 10, 11, and 8.1. CVSSv3 base score 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). Public r...

CVE-2019-2099

CVE-2019-2099 affects Android systems due to an out-of-bounds write in nfa_rw_store_ndef_rx_buf within nfa_rw_act.cc. The underlying cause is a missing bounds check, allowing local elevation of privilege with no extra execution privileges required; exploitation requires user interaction. Affected...

CVE-2017-0539

CVE-2017-0539: A remote code execution in libhevc/Mediaserver on Android. A crafted media file can trigger memory corruption within Mediaserver. Affected Android versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Impact: potential remote code execution within Mediaserver. Remediation: patches releas...