Google Android vulnerabilities

CVE-2021-0537 [HIGH] CWE-1021 CVE-2021-0537: In onCreate of WiFiInstaller.java, there is a possible way to install a malicious Hotspot 2.0 config In onCreate of WiFiInstaller.java, there is a possible way to install a malicious Hotspot 2.0 configuration due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-176756141

CVE-2021-0538 [HIGH] CWE-1021 CVE-2021-0538: In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible exit of emergency callback In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible exit of emergency callback mode due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-178821491

CVE-2021-39691 [HIGH] CWE-1021 CVE-2021-39691: In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when process In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when processing user input. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-157929241

CVE-2021-1016 [HIGH] CWE-1021 CVE-2021-1016: In onCreate of UsbPermissionActivity.java, there is a possible way to grant an app access to USB wit In onCreate of UsbPermissionActivity.java, there is a possible way to grant an app access to USB without informed user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-183610267

CVE-2021-0583 [HIGH] CWE-1021 CVE-2021-0583: In onCreate of BluetoothPairingDialog, there is a possible way to enable Bluetooth without user cons In onCreate of BluetoothPairingDialog, there is a possible way to enable Bluetooth without user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-182282956

CVE-2026-0149 CVE-2026-0149: In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow. This In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48545 [HIGH] CWE-441 CVE-2025-48545: In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privilege In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-22009 [HIGH] CWE-787 CVE-2024-22009: In init_data of , there is a possible out of bounds write due to a missing bounds check. This could In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-32917 [HIGH] CWE-787 CVE-2024-32917: In pl330_dma_from_peri_start() of fp_spi_dma.c, there is a possible out of bounds write due to a mis In pl330_dma_from_peri_start() of fp_spi_dma.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-34724 [HIGH] CWE-362 CVE-2024-34724: In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condit In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48564 [HIGH] CWE-362 CVE-2025-48564: In multiple locations, there is a possible intent filter bypass due to a race condition. This could In multiple locations, there is a possible intent filter bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-36916 [HIGH] CWE-362 CVE-2025-36916: In PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race condi In PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-23709 [MEDIUM] CWE-787 CVE-2024-23709: In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This c In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2024-20044 [MEDIUM] CWE-787 CVE-2024-20044: In da, there is a possible out of bounds write due to a missing bounds check. This could lead to loc In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541784; Issue ID: ALPS08541784.

CVE-2024-20042 [MEDIUM] CWE-787 CVE-2024-20042: In da, there is a possible out of bounds write due to a missing bounds check. This could lead to loc In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541780; Issue ID: ALPS08541780.

CVE-2024-20028 [MEDIUM] CWE-787 CVE-2024-20028: In da, there is a possible out of bounds write due to lack of valudation. This could lead to local e In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541687.

CVE-2024-20054 [MEDIUM] CWE-787 CVE-2024-20054: In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580200; Issue ID: ALPS08580200.

CVE-2024-20043 [MEDIUM] CWE-787 CVE-2024-20043: In da, there is a possible out of bounds write due to a missing bounds check. This could lead to loc In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541781; Issue ID: ALPS08541781.

CVE-2024-20074 [MEDIUM] CWE-787 CVE-2024-20074: In dmc, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In dmc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08668110; Issue ID: MSV-1333.

CVE-2025-36912 [MEDIUM] CVE-2025-36912: In cellular modem, there is a possible denial of service due to a logic error in the code. This coul In cellular modem, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.