CVE-2017-7366

CVE-2017-7366 affects Android devices using CAF Linux kernel with KGSL kernel graphics guest library: a KGSL ioctl fails to validate all parameters, enabling an elevation of privilege within the GPU driver. The vulnerability is listed under Qualcomm components in the 2017-06-05 Android bulletin; ...

CVE-2017-8241

Technical details about CVE-2017-8241 are not publicly provided in the connected documents. The materials here only reiterate a buffer overflow in a WLAN function due to an incorrect message length. Monitor for official updates and patches.

CVE-2017-9678

CVE-2017-9678 affects Qualcomm’s video driver in Android CAF builds on Linux kernel. The issue is memory corruption due to lack of bounds checking in memcpy(), enabling local exploitation with user interaction. CVSS v3.0 base score 7.8 (HIGH) with LOCAL exploit and HIGH impact on confidentiality,...

CVE-2017-9691

CVE-2017-9691 is a Qualcomm MobiCore (Trustonic) driver issue via a race condition in the debug message output path on Android devices (MSM, Firefox OS for MSM, QRD Android). The vulnerability allows access to already freed memory, exposing potential confidentiality impact. The connected document...

CVE-2018-21077

CVE-2018-21077 affects Samsung mobile devices running Android M(6.0), N(7.x), and O(8.x). The issue is a clipboard content disclosure in the locked state when the keyboard may be used during an emergency call. Samsung internal ID: SVE-2017-11107 (April 2018). Public details: CVSSv3.1 base score 2...

CVE-2018-3571

Summary: CVE-2018-3571 affects the Qualcomm KGSL driver used in Android CAF/Linux kernel releases. The vulnerability is a Use-After-Free condition that can occur when printing information about sparse memory allocations. Impact (as described): Local attacker could potentially cause memory corrupt...

CVE-2018-9350

CVE-2018-9350 describes a vulnerability in ih264d_assign_pic_num (ih264d_utils.c) where a missing bounds check can cause an out-of-bounds read, resulting in a denial of service. The issue is triggered by user interaction and would be exploitable remotely via the affected component, as indicated b...

CVE-2018-9357

CVE-2018-9357: In BNEP_Write of bnep_api.cc there is an out-of-bounds write caused by an incorrect bounds check, enabling local privilege escalation with user privileges required and no user interaction. Affected Android versions span 6.0–8.1. The vulnerability is documented in the Android Securi...

CVE-2018-9428

CVE-2018-9428 : The issue affects Android’s AAudio service (AAudioServiceStreamBase.cpp, startDevice) and is caused by an out-of-bounds write stemming from a use-after-free. This can lead to local arbitrary code execution with high impact (confidentiality, integrity, and availability) as describe...

CVE-2018-9446

CVE-2018-9446 affects Android devices via an out-of-bounds write in smp_br_state_machine_event within smp_br_main.cc caused by memory corruption. This could enable remote code execution with no additional privileges and no user interaction required. Affected versions include Android 6.0 through 8...

CVE-2018-9450

CVE-2018-9450 affects Android via a missing bounds check in avrc_proc_vendor_command (avrc_api.cc), causing an out-of-bounds write that could enable remote code execution without user interaction. Affected Android versions: 6.0–6.0.1, 7.0–7.1.2, 8.0–8.1. The root cause is the missing bounds check...

CVE-2018-9455

CVE-2018-9455 affects Android 6.0–8.1. The issue is an out-of-bounds read in sdpu_extract_attr_seq within sdp_utils.cc, caused by an incorrect bounds check, enabling remote denial of service without user interaction. The Android bulletin lists CVE-2018-9455 under System DoS with patch level 2018-...

CVE-2018-9477

CVE-2018-9477 is an Elevation of Privilege issue in Android’s Settings app (Development options) caused by a missing permission check. It enables a local attacker to bypass authentication and escalate privileges with no additional execution privileges required, though user interaction is needed f...

CVE-2018-9486

CVE-2018-9486 affects the Bluetooth stack component hidh_l2cif_data_ind in hidh_conn.cc, where a missing bounds check can cause an out-of-bounds read. This could lead to local information disclosure over Bluetooth with no additional execution privileges and without user interaction. Connected sou...

CVE-2018-9507

CVE-2018-9507 affects Android devices and relates to the Bluetooth stack. A vulnerability in bta_av_proc_meta_cmd (bta_av_act.cc) allows an out-of-bounds read due to an incorrect bounds check, enabling remote information disclosure over Bluetooth without extra privileges and without user interact...

CVE-2018-9510

CVE-2018-9510 describes a Bluetooth information-disclosure risk in Android. The root cause is a missing bounds check in smp_proc_enc_info (smp_act.cc), leading to an out-of-bounds read. Impact is remote information disclosure over Bluetooth without special privileges or user interaction, affected...

CVE-2018-9560

CVE-2018-9560 affects Android 9, in the HID stack. The issue is an out-of-bounds write in HID_DevAddRecord of hidd_api.cc caused by a missing bounds check, enabling local elevation of privilege in the Bluetooth service with no user interaction required. Impact is described as high (local EoP with...

CVE-2019-1998

CVE-2019-1998 affects Android 9. In the event_handler of keymaster_app.c, a table can be lost on reboot causing resource exhaustion and a local denial of service, not mitigated by a factory reset. Exploitation does not require user interaction. The Android bulletin lists this issue under 2019-02-...

CVE-2019-2026

CVE-2019-2026 affects Android 8.0 Framework. In Editor.java’s updateAssistMenuItems, a missing permission check could allow local escalation of privilege and FRP bypass with no user interaction. The Android 2019-04-01 bulletin lists CVE-2019-2026 as a Framework EoP (High) issue for 8.0, indicatin...

CVE-2019-2028

CVE-2019-2028 affects Android via libmpeg2 where NEON registers aren’t preserved in multiple hand-crafted functions, enabling potential remote code execution with no privileges and requiring user interaction. Affected Android versions include 7.0–7.1.2, 8.0–8.1, and 9 (Android ID A-120644655). Pu...

CVE-2019-20593

CVE-2019-20593 concerns Samsung mobile devices running N(7.x) or O(8.x) software where the Gallery app leaks Private Mode thumbnails. Public descriptions across multiple sources (NVD entry, Red Hat advisory, CNVD, CVE pages) consistently state the vulnerability involves information disclosure via...

CVE-2019-20772

CVE-2019-20772 affects LG mobile devices running Android 7.0–9.0 where the Account subsystem permits an authorization bypass. The vendor-specific LG advisory (LVE-SMP-190007) and Red Hat/NVD entries corroborate the same description. Root cause and exact vulnerable component are not detailed in th...

CVE-2019-20774

CVE-2019-20774 affects LG mobile devices running Android 7.x–9.0. A system service allows local retrieval of the user’s password, creating a local-confidentiality risk. The vulnerability has been documented under LG ID LVE-SMP-190009 (August 2019). Connected sources corroborate the issue without ...

CVE-2019-20783

CVE-2019-20783 affects LG mobile devices running Android 7.0–8.1 (North America CDMA). The issue is in the LTE protocol implementation, which allows a bypass of Authentication and Key Agreement (AKA). The available records (NVD, Red Hat advisory, CVE listings) describe the vulnerability and its L...

CVE-2019-2196

CVE-2019-2196 describes a SQL injection in Android's Download Provider, exploitable locally to disclose information without extra privileges. Affected: Android 8.0–10; vulnerability occurs in the query sort parameter, enabling information disclosure. Root cause: improper handling of sort paramete...

CVE-2019-2208

CVE-2019-2208 affects Android components (Android 8.1 and 9) with a flaw in V8 JIT code during PromiseBuiltinsAssembler::NewPromiseCapability, causing an out-of-bounds read. This can lead to remote information disclosure without user interaction or privileges. The connected records confirm the is...

CVE-2019-9253

CVE-2019-9253 affects Android 10 KeyStore: a missing strongbox flag allows symmetric keys to be stored in the TEE instead of the strongbox, enabling local information disclosure with System privileges required. No user interaction needed. Exploitation details are not provided in the supplied docu...

CVE-2019-9291

CVE-2019-9291 affects Android 10 Bluetooth with a remote code execution due to improper memory allocation in the Bluetooth stack. The vulnerability enables network-based exploitation requiring user interaction; CVSS indicates high impact (C/H/I/A) with network access and low attack complexity, an...

CVE-2019-9315

CVE-2019-9315 affects the Android 10 Media Framework component libhevc, where a missing variable initialization creates a condition for information disclosure. The issue could permit remote disclosure without additional execution privileges; exploitation requires user interaction. The CVSS data i...

CVE-2019-9336

CVE-2019-9336 affects the Android 10 Media framework component libavc. The vulnerability is an information-disclosure flaw caused by uninitialized data, enabling remote information disclosure with no execution privileges needed. Exploitation requires user interaction. The issue is documented in t...

CVE-2019-9424

CVE-2019-9424 affects Android 10: a vulnerability in the Screen Lock where the setting to hide the unlock pattern can be ignored under certain conditions, causing information disclosure. The vulnerability is listed in Android 10 security release notes and has NVD scores of 4.3 (CVSS2) and 7.5 (CV...

CVE-2019-9469

CVE-2019-9469 affects the Android kernel Titan‑M component. A flaw in km_compute_shared_hmac (km4.c) allows an out‑of‑bounds write due to input validation issues, enabling local privilege escalation with no user interaction. CVSS data in NVD indicates LOCAL access, LOW attack complexity, with HIG...

CVE-2019-9472

CVE-2019-9472 describes a timing side-channel in DCRYPTO_equals (compare.c) in the Android kernel/Titan-M component, enabling local information disclosure without extra privileges and without user interaction. Public details across sources confirm the root cause as improper crypto usage, with dis...

CVE-2020-0065

CVE-2020-0065 corresponds to an improper authorization in the receiver component of the Android Suite Daemon (MediaTek section, Android 2020-05-01/05 patch levels). According to NVD, it supports LOCAL access with LOW attack complexity but can affect confidentiality (HIGH) with no integrity/availa...

CVE-2020-0109

CVE-2020-0109 affects Android 9–10 and relates to NotificationManagerService.java: in simulatePackageSuspendBroadcast there is a missing permission check, enabling local privilege escalation by crafting fake system notifications without extra execution privileges. Public references indicate the i...

CVE-2020-0113

CVE-2020-0113 is a Media framework information-disclosure vulnerability in Android 9–10. In Camera3OutputUtils.cpp, sendCaptureResult can trigger an out-of-bounds read due to a use-after-free, leading to local information disclosure without extra user interaction. Android bulletin 2020-06-01 clas...

CVE-2020-0131

CVE-2020-0131 affects Android 10 in the Media Framework’s MPEG4Extractor.cpp parseChunk path, where an out-of-bounds write can occur from incompletely initialized data. This vulnerability allows remote code execution via a network vector with the need for user interaction to exploit (per the CVE ...

CVE-2020-0145

CVE-2020-0145 affects Android 10, with a flaw in btm_simple_pair_complete in btm_sec.cc that can trigger an out-of-bounds read due to a missing bounds check. This could lead to local information disclosure on a device with System privileges, and exploitation requires no user interaction. The avai...

CVE-2020-0183

CVE-2020-0183 (Android 10): In BluetoothManagerService.handleMessage there is an incomplete reset, enabling local elevation of privilege. Affected component: Android Bluetooth stack (Android-10). According to NVD, CVSS v3.1 base score is 7.8 (HIGH) with LOCAL attack vector, user interaction requi...

CVE-2020-0202

The CVE-2020-0202 issue affects Android 11 and is tied to onHandleIntent in TraceService.java. The root cause is a missing permission check that bypasses developer settings requirements for capturing system traces, allowing local elevation of privilege. Exploitation requires user interaction; no ...

CVE-2020-0219

CVE-2020-0219 affects Android 10. The issue is in onCreate of SliceDeepLinkSpringBoard.java, where an insecure Intent could allow local elevation of privilege with no additional execution privileges and without user interaction. The provided documents corroborate the vulnerability and its local-p...

CVE-2020-0221

CVE-2020-0221 affects Airbrush’s scratch memory allocator in the Android kernel. The root cause is a numeric overflow in the allocator, which could cause the next allocation to return a pointer within a previously allocated region, enabling improper memory access and elevation of privilege on aff...

CVE-2020-0289

CVE-2020-0289 affects Android 11 in the PackageManager component, where a missing permission check allows local information disclosure across users without extra privileges or user interaction. The issue is described across multiple sources (NVD, Red Hat, CNVD, PRION, and national advisories) as ...

CVE-2020-25064

Technical details (affected products, vulnerable component, root cause, exploit information) are not provided in the connected documents. Monitor for updates from LG/Security advisories.

CVE-2021-0490

CVE-2021-0490 affects Android’s memory management driver (MediaTek memory management driver) and describes an out-of-bounds write due to a missing bounds check that could enable local elevation of privilege with no user interaction. The issue is documented across sources including NVD and the 202...

CVE-2021-0492

The CVE-2021-0492 entry concerns Android’s memory management driver, where an out-of-bounds write due to a missing bounds check could enable local privilege escalation without user interaction. Concrete details across connected sources identify the affected component as the memory management driv...

CVE-2021-0525

CVE-2021-0525 affects the Android memory management driver. The underlying issue is a use-after-free that enables an out-of-bounds write, leading to local escalation of privilege with no additional execution privileges required and no user interaction. Exploitation status is not detailed in the p...

CVE-2021-0617

CVE-2021-0617 affects MediaTek’s ape extractor. The issue is a heap-buffer-overflow–induced out-of-bounds read in the extractor, leading to local information disclosure without privilege or user interaction. Patch ALPS05561391/ALPS05561391 is referenced as remediation. No exploitation details are...

CVE-2021-0628

CVE-2021-0628 affects OMA DRM. The issue is memory corruption caused by improper input validation, enabling local escalation of privilege with System execution privileges required; no user interaction needed. Patch ALPS05722454/ALPS05722454 is noted. Connected records consistently describe the sa...

CVE-2021-0677

The CVE-2021-0677 issue affects the ccu driver, where an integer overflow can trigger an out-of-bounds read, leading to local information disclosure with SYSTEM privileges required. Exploitation reportedly does not need user interaction. The Red Hat and NVD entries corroborate this description; p...