CVE-2017-0697

CVE-2017-0697 is a DoS vulnerability in the Android media framework. The connected documents confirm impact on Android devices with versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The Android media framework is the affected component; the issue arises within that framework, leadi...

CVE-2017-0700

The CVE-2017-0700 entry concerns a remote code execution vulnerability in Android’s System UI affecting Android 7.1.1 and 7.1.2. Connected sources (CNVD-2017-21549) describe a Google Android System UI RCE affecting the same versions, noting it is exploitable remotely, but do not provide technical...

CVE-2017-0709

CVE-2017-0709 affects the HTC sensor hub driver in the Android kernel. It is an information-disclosure vulnerability with local access, requiring user interaction (CVSS v3: 3.3 Low). The HTC sensor hub vulnerability is addressed in the 2017-07 Android security bulletin; apply the July 2017 patch ...

CVE-2017-0724

CVE-2017-0724 is a denial-of-service vulnerability in the Android media framework libmpeg2. Affected product: Android. Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. The connected sources describe a DoS condition in libmpeg2 but do not provide concrete technical details about the root cause, e...

CVE-2017-0774

CVE-2017-0774 is a denial-of-service vulnerability in Android’s media framework (libstagefright) affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0/6.0.1, 7.0, 7.1.1, and 7.1.2. The issue is described in public sources as a DoS in the media framework; no exploit vectors, root cause details, or a...

CVE-2017-0788

CVE-2017-0788 is a local elevation-of-privilege vulnerability in the Broadcom Wi‑Fi driver used by Android (kernel level). The issue affects the Broadcom Wi‑Fi driver component and is documented in the Android 2017-09-01/09-05 security patch level bulletin under Broadcom entries, indicating mitig...

CVE-2017-0789

CVE-2017-0789 is a local Elevation of Privilege in the Broadcom Wi‑Fi driver used by Android kernel. The vulnerability allows an attacker to gain elevated privileges within the device. Public references in the provided documents confirm Broadcom Wi‑Fi driver as the vulnerable component and Androi...

CVE-2017-0790

CVE-2017-0790 is a local elevation-of-privilege vulnerability in the Broadcom Wi‑Fi driver used by Android kernel. The issue is categorized as EoP and is located in the Broadcom Wi‑Fi driver component; the Android bulletin lists CVE-2017-0790 under Broadcom components with a Moderate Android bug ...

CVE-2017-0835

CVE-2017-0835 is a remote code execution vulnerability in the Android media framework (libmpeg2) affecting Android 6.0–8.0. The issue is documented in the 2017-11 Android bulletin as exploitable by a specially crafted media file, with high impact (remote code execution) in a privileged context. A...

CVE-2017-0857

CVE-2017-0857 is listed in the Android Pixel/Nexus Security Bulletin (Media framework) with type NSI, affecting Android 7.0, 7.1.1, 7.1.2, and 8.0. The bulletin groups it under Media framework alongside other CVEs and indicates updated AOSP versions (patch level addressing the issue). The provide...

CVE-2017-10997

CVE-2017-10997 affects Qualcomm PCIe (PCI driver) in CAF Android builds. The root cause is a write to a PCIe register via a debugfs node that can corrupt kernel memory, as described for all Qualcomm products with CAF Linux kernels. The vulnerability detail specifies the component as the PCI drive...

CVE-2017-11002

CVE-2017-11002 is a Qualcomm Wi‑Fi driver information exposure/DoS type issue described as: in all Qualcomm products with Android CAF builds using the Linux kernel, when processing a vendor sub-command, a buffer over-read can occur. The connected sources confirm this CVE ID is classified as an In...

CVE-2017-11003

CVE-2017-11003 affects Android for MSM, Firefox OS for MSM, and QRD Android builds via CAF Linux kernel. The issue arises during firmware image update where data is read from flash into RAM without confirming it fits allotted RAM, enabling potential memory mismanagement. Documented impact include...

CVE-2017-11050

CVE-2017-11050 concerns Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels. The description indicates that when the pktlogconf tool provides a pktlog buffer smaller than the minimal possible source data size in the host driver, a potential buffer overflow can occu...

CVE-2017-11073

CVE-2017-11073 is a Qualcomm Networking subsystem vulnerability affecting Android on MSM/CAF/Linux kernel builds. The qcacld pktlog allows a local attacker to map memory to user space via /proc/ath_pktlog/cld, enabling potentially exposure or modification of memory. Public details specify LOCAL a...

CVE-2017-11091

CVE-2017-11091 concerns a Use-After-Free condition in the Android MSM/CAF Linux kernel driver path /dev/mdss_rotator, triggered in the function mdss_rotator_ioctl. The issue is described as a Use-After-Free potentially occurring due to a fence being installed too early, affecting Android builds a...

CVE-2017-13150

CVE-2017-13150 is an information-disclosure vulnerability in Android’s Media framework affecting Pixel/Nexus devices running Android 7.0, 7.1.1, 7.1.2 and 8.0. The Android Pixel security bulletin attributes a Moderate severity to this issue and ties it to updates that address it. The connected bu...

CVE-2017-13174

CVE-2017-13174 is documented in the Android kernel (EDL) as an Elevation of Privilege issue. Connected sources confirm it is part of the 2017-12-05 patch level kernel fixes, but no detailed affected versions or explicit remediation steps are provided beyond this bulletin reference.

CVE-2017-13191

The CVE-2017-13191 issue affects Android Media Framework (component: ihevcd_decode in ihevcd_decode.c). It describes an infinite loop caused by an incomplete frame error, enabling remote DoS of a critical system process without extra privileges or user interaction. Affected versions per the docum...

CVE-2017-13209

This CVE (CVE-2017-13209) affects Android 8.0–8.1 and is due to an insecure permissions check in ServiceManager::add of the hardware service manager. The check based on the caller’s PID could allow an application or service to replace a HAL service with its own, enabling local elevation of privil...

CVE-2017-13249

CVE-2017-13249 affects Android (versions 6.0 through 8.1). The issue is in impeg2d_api_set_display_frame within impeg2d_api_main.c, where an out-of-bounds write occurs due to a missing bounds check. This can enable remote code execution with no additional privileges required, with user interactio...

CVE-2017-13285

CVE-2017-13285 affects Android and is rooted in the SvoxSsmlParser implementation (svox_ssml_parser.cpp), where an out-of-bounds write can occur due to an uninitialized buffer. This can enable remote code execution in an unprivileged process with no user interaction. The Android Security Bulletin...

CVE-2017-13294

CVE-2017-13294 is an information-disclosure vulnerability affecting Android’s framework (aosp email application). Affected Android versions span 6.0–8.1 (6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1). The Pixel/Nexus security bulletin groups CVE-2017-13294 under Framework with Updated AOSP versions 6....

CVE-2017-13304

CVE-2017-13304 describes an information disclosure vulnerability in the Upstream kernel mnh_sm driver affecting Android kernels (notably on Pixel/Nexus devices). The connected CNVD entry explicitly states that the vulnerability exists in the kernel mnh_sm driver and that an attacker can obtain in...

CVE-2017-14872

CVE-2017-14872 describes a potential buffer over-read during flashing of a meta image in CAF Android releases (Android for MSM, Firefox OS for MSM, QRD Android) when the number of images exceeds the maximum range of 32, before the 2018-06-05 security patch level. The issue is associated with the ...

CVE-2017-14878

CVE-2017-14878 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel. The issue is a length variable used to copy data that is only 8 bits, which can be exceeded and leads to a denial of service. Impact is Denial of Service (availability impact HIGH per CVSS)....

CVE-2017-14905

CVE-2017-14905 affects Android on MSM (and related CAF/Linux-kernel-based builds) via a buffer over-read when handling a specially crafted cfg80211 vendor command in the wireless networking stack. The CNVD/CVE records describe this as information disclosure due to a buffer over-read, impacting Qu...

CVE-2017-15831

CVE-2017-15831 describes a vulnerability in Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux, where the function wma_ndp_end_indication_event_handler() performs no input validation on an event_info value from firmware. This can cause an integer overflow and potentially ...

CVE-2017-15842

CVE-2017-15842 describes a use-after-free vulnerability in Android CAF/Linux kernel code where a mutex is unlocked before freeing the buffer, allowing potential reuse of the freed memory. The issue affects all Android releases using CAF components (Android for MSM, Firefox OS for MSM, QRD Android...

CVE-2017-15843

CVE-2017-15843 describes a race condition in the Qualcomm bus driver, specifically msm_bus_floor_vote_context(), which can lead to a double-free in CAF Android-for-MSM builds on Linux kernels. The vulnerability affects Android releases that use the affected bus driver; CVSS data indicates Local a...

CVE-2017-18169

Technical details about CVE-2017-18169 (affected products, root cause, impact, fixes) are not provided in the connected documents; sources only note a kernel denial-of-service in ashmem during cache maintenance. Monitor for updates.

CVE-2017-18646

This CVE reports a bypass of the password requirement for tablet user switching on Samsung mobile devices running M(6.x) and N(7.x) software. The underlying issue allows an attacker to bypass protection by folding the magnetic cover, as described in multiple sources (Samsung ID SVE-2017-10602). C...

CVE-2017-18651

The CVE-2017-18651 entry describes an issue on Samsung mobile devices running M(6.x) and N(7.x) software, where an Integer Overflow occurs in process_M_SetTokenTUIPasswd while handling a trusted application, leading to memory corruption. The affected components are Samsung mobile platforms with S...

CVE-2017-18655

CVE-2017-18655 affects Samsung mobile devices running M(6.0) and N(7.x) software. A stack-based buffer overflow in a trustlet leads to memory corruption. Affected component: trustlet; root cause: stack-based buffer overflow. Impact per sources: partial confidentiality, integrity, and availability...

CVE-2017-18680

CVE-2017-18680 concerns Samsung mobile devices running Lollipop (5.0/5.1) and Marshmallow (6.0) tablets. The issue arises from the lockscreen, where the Add User action can be exploited to access user data stored in external storage. Root cause and affected scope are tied to the lockscreen UI all...

CVE-2017-18685

Summary (CVE-2017-18685): An issue in Samsung mobile devices running KK (4.4), L (5.0/5.1), and M (6.0) where the InputMethod application can crash the system via a malformed serializable object in an Intent. The Samsung internal reference is SVE-2016-7123 (February 2017). The Red Hat and CNVD en...

CVE-2017-18688

CVE-2017-18688 affects Samsung mobile devices running L(5.1), M(6.0), and N(7.0). The issue is an information disclosure through reading memory locations outside a buffer via the device node /dev/dsm_ctrl_dev. Connected Red Hat/other records repeat this description and map it to Samsung ID SVE-20...

CVE-2017-6258

CVE-2017-6258 describes an elevation-of-privilege vulnerability in NVIDIA libnvmmlite_audio.so when running in the Android media server. The issue may cause an out-of-bounds write and could lead to local code execution in a privileged process. Affected product is Android; remediation is tied to A...

CVE-2017-6288

CVE-2017-6288 affects NVIDIA libnvrm in Android. It describes an out-of-bounds read caused by a missing bounds check, enabling local information disclosure. The issue is identified as a Information Disclosure/DoS-like risk on Android devices (Pixel/Nexus contexts cited) with a reported MEDIUM bas...

CVE-2017-6289

The CVE-2017-6289 issue affects NVIDIA Tegra TZ/Tee components exposed to the Android SHIELD TV platform. The connected NVIDIA security bulletin describes a vulnerability in the Tegra kernel driver that could allow a local malicious application to execute arbitrary code within the Trusted Executi...

CVE-2017-7366

CVE-2017-7366 affects Android devices using CAF Linux kernel with KGSL kernel graphics guest library: a KGSL ioctl fails to validate all parameters, enabling an elevation of privilege within the GPU driver. The vulnerability is listed under Qualcomm components in the 2017-06-05 Android bulletin; ...

CVE-2017-8241

Technical details about CVE-2017-8241 are not publicly provided in the connected documents. The materials here only reiterate a buffer overflow in a WLAN function due to an incorrect message length. Monitor for official updates and patches.

CVE-2017-9678

CVE-2017-9678 affects Qualcomm’s video driver in Android CAF builds on Linux kernel. The issue is memory corruption due to lack of bounds checking in memcpy(), enabling local exploitation with user interaction. CVSS v3.0 base score 7.8 (HIGH) with LOCAL exploit and HIGH impact on confidentiality,...

CVE-2017-9691

CVE-2017-9691 is a Qualcomm MobiCore (Trustonic) driver issue via a race condition in the debug message output path on Android devices (MSM, Firefox OS for MSM, QRD Android). The vulnerability allows access to already freed memory, exposing potential confidentiality impact. The connected document...

CVE-2018-21077

CVE-2018-21077 affects Samsung mobile devices running Android M(6.0), N(7.x), and O(8.x). The issue is a clipboard content disclosure in the locked state when the keyboard may be used during an emergency call. Samsung internal ID: SVE-2017-11107 (April 2018). Public details: CVSSv3.1 base score 2...

CVE-2018-3571

Summary: CVE-2018-3571 affects the Qualcomm KGSL driver used in Android CAF/Linux kernel releases. The vulnerability is a Use-After-Free condition that can occur when printing information about sparse memory allocations. Impact (as described): Local attacker could potentially cause memory corrupt...

CVE-2018-9350

CVE-2018-9350 describes a vulnerability in ih264d_assign_pic_num (ih264d_utils.c) where a missing bounds check can cause an out-of-bounds read, resulting in a denial of service. The issue is triggered by user interaction and would be exploitable remotely via the affected component, as indicated b...

CVE-2018-9357

CVE-2018-9357: In BNEP_Write of bnep_api.cc there is an out-of-bounds write caused by an incorrect bounds check, enabling local privilege escalation with user privileges required and no user interaction. Affected Android versions span 6.0–8.1. The vulnerability is documented in the Android Securi...

CVE-2018-9428

CVE-2018-9428 : The issue affects Android’s AAudio service (AAudioServiceStreamBase.cpp, startDevice) and is caused by an out-of-bounds write stemming from a use-after-free. This can lead to local arbitrary code execution with high impact (confidentiality, integrity, and availability) as describe...

CVE-2018-9446

CVE-2018-9446 affects Android devices via an out-of-bounds write in smp_br_state_machine_event within smp_br_main.cc caused by memory corruption. This could enable remote code execution with no additional privileges and no user interaction required. Affected versions include Android 6.0 through 8...