CVE-2016-6742

CVE-2016-6742 describes an elevation of privilege in the Synaptics touchscreen driver on Android prior to 2016-11-05, enabling a local malicious app to execute arbitrary code in the kernel if it can compromise a privileged process. Affected: Android devices with affected Synaptics driver. Root ca...

CVE-2016-6747

CVE-2016-6747 affects Android Mediaserver. A denial-of-service vulnerability allows a specially crafted file to cause a device hang or reboot. The issue is tied to Mediaserver processing media data in Android prior to the 2016-11-05 patch level. Vulnerable component: Mediaserver in Android; root ...

CVE-2016-6783

CVE-2016-6783 is an elevation-of-privilege issue in the MediaTek driver on Android that could allow a local malicious app to execute arbitrary code in the kernel context. The vulnerability requires compromising a privileged process. Affected component: MediaTek driver in Android; Android ID A-313...

CVE-2017-0400

CVE-2017-0400 is an information-disclosure vulnerability affecting Android’s Audioserver (lvm/wrapper/Bundle/EffectBundle.cpp in libeffects). The issue could allow a local malicious application to access data outside its permission levels. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6....

CVE-2017-0468

CVE-2017-0468 affects Android Mediaserver; a remote code execution flaw triggered by specially crafted media/files can cause memory corruption during media processing. Affected: Android 6.0–7.1.1. Impact: remote code execution within Mediaserver. Remediation: apply March 2017 Android security pat...

CVE-2017-0483

CVE-2017-0483 describes a denial-of-service vulnerability in Android’s Mediaserver. A crafted file could cause a device hang or reboot. Affected products/versions include Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The connected documents provide the vulnerability description and affected v...

CVE-2017-0529

CVE-2017-0529 is an information-disclosure vulnerability in the MediaTek driver for Android. A local malicious app could access data outside its permission levels due to the driver’s data exposure. Primary affected component: MediaTek driver in Android. Root cause: information disclosure (no expl...

CVE-2017-0560

CVE-2017-0560 is an information-disclosure vulnerability in the Android factory reset process that could allow a local attacker to access data from the previous owner. The NVD description lists affected Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1, with Android ID A-30681079. ...

CVE-2017-0588

CVE-2017-0588 describes a remote code execution vulnerability in Android’s Mediaserver, specifically in libstagefright’s id3/ID3.cpp. An attacker could exploit this by providing a specially crafted media file, triggering memory corruption during media/file processing. The issue affects Android ve...

CVE-2017-0600

CVE-2017-0600 describes a denial-of-service vulnerability in Android’s Mediaserver, specifically in the libstagefright component. A specially crafted media file could cause the Mediaserver process to hang or reboot, potentially impacting affected Android versions. Affected products/versions inclu...

CVE-2017-0681

CVE-2017-0681 is a remote code execution in the Android media framework affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2.** The CVSS3 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates a local attack with no privileges required but user interaction needed, and the...

CVE-2017-0706

CVE-2017-0706 is an Elevation of Privilege in the Broadcom Wi‑Fi driver used in Android kernel. Public sources describe a boundary-detection failure in the Broadcom Wi‑Fi driver that can lead to memory corruption and privilege escalation. The vulnerability affects Android-related Broadcom Wi‑Fi c...

CVE-2017-0724

CVE-2017-0724 is a denial-of-service vulnerability in the Android media framework libmpeg2. Affected product: Android. Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. The connected sources describe a DoS condition in libmpeg2 but do not provide concrete technical details about the root cause, e...

CVE-2017-0789

CVE-2017-0789 is a local Elevation of Privilege in the Broadcom Wi‑Fi driver used by Android kernel. The vulnerability allows an attacker to gain elevated privileges within the device. Public references in the provided documents confirm Broadcom Wi‑Fi driver as the vulnerable component and Androi...

CVE-2017-0793

CVE-2017-0793 is an information-disclosure vulnerability in Android’s Imgtk memory subsystem within the Android kernel. Affected: Android (Imgtk/memory subsystem). Impact: potential unauthorized access to data (confidentiality impact HIGH per CVSS). Exploitation details are not provided in the co...

CVE-2017-0862

CVE-2017-0862 is an elevation of privilege in the Android upstream kernel (Kernel component). The connected records consistently describe it as a Kernel EoP issue affecting the Android kernel; no specific vulnerable version ranges or fixed versions are provided in the supplied documents. The mate...

CVE-2017-11017

CVE-2017-11017 affects Android builds for MSM (including CAF-derived kernel variants) and related Android forks (Firefox OS for MSM, QRD Android). The issue arises when flashing a specially crafted UBI image, causing memory corruption or access to uninitialized memory in the Linux kernel used by ...

CVE-2017-11027

CVE-2017-11027 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel; the vulnerability arises when flashing a UBI image, where the size is not validated against the minimum header size, leading to uninitialized data access. The NVD entry characterizes impact ...

CVE-2017-11035

CVE-2017-11035 affects Qualcomm WLAN in Android devices (notably Pixel/Nexus) with a buffer overflow/information leak caused by incorrect initialization of WEXT callbacks and missing buffer-size checks. The vulnerability enables EoP via the WLAN path and is tracked as a Qualcomm WLAN issue in the...

CVE-2017-11055

CVE-2017-11055 affects Qualcomm WLAN in Android/CAF Linux-kernel stacks (Android for MSM, Firefox OS for MSM, QRD Android). A buffer over-read can occur when processing the QCA_NL80211_VENDOR_SUBCMD_SET_WIFI_CONFIGURATION vendor command, potentially exposing memory contents. Affected components a...

CVE-2017-13169

CVE-2017-13169 is an information-disclosure vulnerability in the Android kernel camera server. Affected: Android kernel (kernel camera server). Root cause not explicitly detailed in provided documents. Impact: confidentiality leakage (per CVSS metrics: partial in v2, high in v3; no integrity/avai...

CVE-2017-13174

CVE-2017-13174 is documented in the Android kernel (EDL) as an Elevation of Privilege issue. Connected sources confirm it is part of the 2017-12-05 patch level kernel fixes, but no detailed affected versions or explicit remediation steps are provided beyond this bulletin reference.

CVE-2017-13175

CVE-2017-13175 is a vulnerability in NVIDIA’s Tegra OpenMax component, specifically OMX.Nvidia.audio.render. The issue arises because mediaserver could reference memory after it has been freed, potentially enabling a denial of service or, in some scenarios, privilege escalation. The vulnerability...

CVE-2017-13188

CVE-2017-13188 is an information disclosure vulnerability in the Android media framework (aac). The connected Pixel/Nexus bulletin attributes this CVE to the Media framework component and lists affected Android versions 7.0, 7.1.1, 7.1.2, 8.0, and 8.1, with Android bug ID A-65280786. The bulletin...

CVE-2017-13214

CVE-2017-13214 affects the Hardware HEVC decoder in Android kernel. Affects Android devices processing certain media files, where a page fault can cause remote denial of service in a critical system process. Exploitation is possible over the network with no user interaction and no privileges requ...

CVE-2017-13221

CVE-2017-13221 is an Elevation of Privilege (EoP) vulnerability affecting the Upstream kernel WiFi driver in Android devices (Android kernel). The connected documents consistently describe a local vulnerability that could allow a non-privileged attacker to escalate privileges via the kernel WiFi ...

CVE-2017-13231

CVE-2017-13231 refers to an out-of-bounds write in libmediadrm on Android 8.0 and 8.1 caused by improper input validation, enabling local elevation of privilege without user interaction. In the connected Android security bulletin, this issue is listed under the Media framework with a High impact ...

CVE-2017-13273

CVE-2017-13273 is a kernel‑level race condition in xt_qtaguid.c of the Android kernel caused by insufficient locking, enabling local elevation of privilege with no required user interaction. The issue affects Android kernel components and has been tracked in Android bulletins; the 2018 patch leve...

CVE-2017-13294

CVE-2017-13294 is an information-disclosure vulnerability affecting Android’s framework (aosp email application). Affected Android versions span 6.0–8.1 (6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1). The Pixel/Nexus security bulletin groups CVE-2017-13294 under Framework with Updated AOSP versions 6....

CVE-2017-13304

CVE-2017-13304 describes an information disclosure vulnerability in the Upstream kernel mnh_sm driver affecting Android kernels (notably on Pixel/Nexus devices). The connected CNVD entry explicitly states that the vulnerability exists in the kernel mnh_sm driver and that an attacker can obtain in...

CVE-2017-15837

CVE-2017-15837 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds in CAF-derived Linux kernels prior to 2018-04-05. The issue is a missing NL80211_PKTPAT_OFFSET policy, which can cause a buffer over-read in nla_get_u32(). Impact is a partial confidentiality risk with no ...

CVE-2017-15849

CVE-2017-15849 affects Qualcomm Display in Android/CAF builds for MSM, where a LayerStack can be destroyed between Validate and Commit by the application, causing a Use-After-Free condition. The issue is described in multiple sources (NVD entry and related CVEs) as a high-severity (EoP) vulnerabi...

CVE-2017-15855

CVE-2017-15855 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel prior to the 2018-04-05 patch level. The vulnerability arises in the Camera CPP module driver when it directly accesses a user-space buffer; an unchecked userspace value (ioctl_ptr-&...

CVE-2017-15860

CVE-2017-15860 affects Qualcomm WLAN in Android CAF builds using the Linux kernel. In these releases, processing an encrypted authentication management frame can trigger a stack buffer overflow in the Qualcomm component, with the Android bulletin listing this as a Remote Code Execution (RCE) vuln...

CVE-2017-18646

This CVE reports a bypass of the password requirement for tablet user switching on Samsung mobile devices running M(6.x) and N(7.x) software. The underlying issue allows an attacker to bypass protection by folding the magnetic cover, as described in multiple sources (Samsung ID SVE-2017-10602). C...

CVE-2017-18655

CVE-2017-18655 affects Samsung mobile devices running M(6.0) and N(7.x) software. A stack-based buffer overflow in a trustlet leads to memory corruption. Affected component: trustlet; root cause: stack-based buffer overflow. Impact per sources: partial confidentiality, integrity, and availability...

CVE-2017-18671

The CVE affects Samsung mobile devices running Android L/M/N. Root cause: Wi‑Fi related intents with incorrect exception handling. Consequence: crash of system processes. No exploitation details are provided in the documents. Samsung lists a security update reference (SVE-2017-8389) as context fo...

CVE-2017-18684

CVE-2017-18684 affects Samsung mobile devices running Lollipop 5.0/5.1 and Marshmallow 6.0 (SVoice). The issue allows a provider seizure via an application that uses a custom provider, as described in the Red Hat and NVD entries. The exact root cause details are not fully disclosed in the provide...

CVE-2017-6286

The CVE-2017-6286 issue affects NVIDIA libnvomx in Android and involves a possible out-of-bounds write due to a missing bounds check, enabling local escalation of privilege. Affected component: NVIDIA libnvomx (Android). Impact: local privilege escalation with potential arbitrary code execution w...

CVE-2017-6421

CVE-2017-6421 describes an elevation-of-privilege vulnerability in the Qualcomm MStar touchscreen driver affecting Qualcomm-based Android devices. The issue arises in the touch controller function where a variable is user-controlled, enabling a buffer overflow. Public details indicate the vulnera...

CVE-2017-7366

CVE-2017-7366 affects Android devices using CAF Linux kernel with KGSL kernel graphics guest library: a KGSL ioctl fails to validate all parameters, enabling an elevation of privilege within the GPU driver. The vulnerability is listed under Qualcomm components in the 2017-06-05 Android bulletin; ...

CVE-2017-7371

CVE-2017-7371 affects Android CAF devices using the Linux kernel with SLIMbus when Bluetooth is active. Root cause: a data pointer may be used after being freed when SLIMbus is turned off via Bluetooth, leading to memory corruption and potential local impact. Affected component: Qualcomm/Bluetoot...

CVE-2017-8234

CVE-2017-8234 affects Android devices using CAF with the Linux kernel, where an out-of-bounds access in a camera driver function can potentially occur. Connected sources identify the issue within camera-related components, notably Qualcomm camera driver entries in the 2017 Android security bullet...

CVE-2017-8241

Technical details about CVE-2017-8241 are not publicly provided in the connected documents. The materials here only reiterate a buffer overflow in a WLAN function due to an incorrect message length. Monitor for official updates and patches.

CVE-2017-9696

CVE-2017-9696 involves a buffer over-read in the Qualcomm MSM camera driver (msm_isp_stop_stats_stream) affecting Android variants built for MSM, Firefox OS for MSM, and QRD Android with CAF Linux kernels. The problem stems from not validating userspace-supplied stream_cfg_cmd->num_streams aga...

CVE-2017-9700

CVE-2017-9700 affects Android-on-MSM variants (CAFs/Linux kernel-based Android builds) where a 64-character image name can trigger a buffer overwrite in fw_name_store. The vulnerability is rooted in image-name handling within the fw_name_store path, impacting Android for MSM, Firefox OS for MSM, ...

CVE-2018-11262

CVE-2018-11262 is a critical issue documented in Qualcomm bootloader components (Android bulletin entry) with an associated out-of-bounds write risk in GPT patching caused by the TotalPart count exceeding GPT Header MaxPtCnt. The connected records indicate this CVE affects Qualcomm bootloader in ...

CVE-2018-11280

CVE-2018-11280 affects Android CAF builds (Linux kernel in Android for MSM, Firefox OS for MSM, QRD Android). The vulnerability arises from missing size validation for NAT entry input during user-space processing, which could allow memory exhaustion when input size exceeds the maximum. Impact is ...

CVE-2018-21053

This CVE (CVE-2018-21053) affects Samsung mobile devices running N(7.x), O(8.x), and P(9.0) software. The issue is described as clipboard access in the lockscreen state via a physical keyboard (Samsung ID SVE-2018-12684). The connected Red Hat and other entries corroborate the same description. T...

CVE-2018-6271

CVE-2018-6271 affects NVIDIA Tegra OpenMax driver (libnvomx). The issue arises from delivering extra data with buffers and inadequate validation, enabling potential denial of service or escalation of privileges. Affected products are Jetson TX1/TX2 running Linux for Tegra; NVIDIA lists CVE-2018-6...