8300 matches found
CVE-2016-6723
CVE-2016-6723 is a denial-of-service vulnerability in Android’s Proxy Auto Config (PAC) handling. A specially crafted PAC file could cause a device to hang or reboot. Affected: Android 4.x before 4.4.4; 5.0.x before 5.0.2; 5.1.x before 5.1.1; 6.x before 2016-11-01; 7.0 before 2016-11-01. Root cau...
CVE-2016-6774
CVE-2016-6774 is an information-disclosure vulnerability in Android’s Package Manager for Android 7.0. A local malicious application could bypass OS protections that isolate app data if it can compromise a privileged process, leading to data exposure. The issue is categorized as Moderate, reflect...
CVE-2016-6783
CVE-2016-6783 is an elevation-of-privilege issue in the MediaTek driver on Android that could allow a local malicious app to execute arbitrary code in the kernel context. The vulnerability requires compromising a privileged process. Affected component: MediaTek driver in Android; Android ID A-313...
CVE-2017-0483
CVE-2017-0483 describes a denial-of-service vulnerability in Android’s Mediaserver. A crafted file could cause a device hang or reboot. Affected products/versions include Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The connected documents provide the vulnerability description and affected v...
CVE-2017-0543
CVE-2017-0543: A remote code execution vulnerability in libavc within Mediaserver could allow memory corruption via a specially crafted media/file, leading to code execution in the Mediaserver process. Affected product: Android devices; versions include 6.0, 6.0.1, 7.0, and 7.1.1. Root cause desc...
CVE-2017-0588
CVE-2017-0588 describes a remote code execution vulnerability in Android’s Mediaserver, specifically in libstagefright’s id3/ID3.cpp. An attacker could exploit this by providing a specially crafted media file, triggering memory corruption during media/file processing. The issue affects Android ve...
CVE-2017-0593
CVE-2017-0593 is an elevation of privilege vulnerability in Android Framework APIs that could allow a local malicious application to obtain access to custom permissions. Affected products/versions identified in the connected documents include Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID:...
CVE-2017-0674
CVE-2017-0674 is a remote code execution vulnerability in Android’s media framework affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The description attributes the issue to a flaw in the media framework (no deeper root-cause details provided). The Android Security Bulletin for July 2017 ident...
CVE-2017-0690
CVE-2017-0690 is a DoS vulnerability in Android’s media framework. Connected CNVD/NVD entries describe a denial of service that can be triggered by a remote attacker, with the backreference triggering a null pointer scenario. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0,...
CVE-2017-0697
CVE-2017-0697 is a DoS vulnerability in the Android media framework. The connected documents confirm impact on Android devices with versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The Android media framework is the affected component; the issue arises within that framework, leadi...
CVE-2017-0716
CVE-2017-0716 is a remote code execution vulnerability in the Android media framework, specifically in the libmpeg2 decoding library. The issue affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The impact, as documented, is that an attacker could potentially execute arbitrary code in th...
CVE-2017-0747
CVE-2017-0747 is an elevation-of-privilege vulnerability in the Qualcomm Proprietary Component used by Google Android. The issue affects the Android kernel via the Qualcomm-provided component; an attacker could exploit it to escalate privileges within the device. Public descriptions in CNVD/NVD i...
CVE-2017-0825
CVE-2017-0825 is an information-disclosure vulnerability in the Broadcom WiFi driver used by Android (Android kernel). Connected sources identify the issue as a Broadcom WiFi driver information leakage vulnerability affecting Android devices, with the vulnerability classified as Moderate (WiFi dr...
CVE-2017-0835
CVE-2017-0835 is a remote code execution vulnerability in the Android media framework (libmpeg2) affecting Android 6.0–8.0. The issue is documented in the 2017-11 Android bulletin as exploitable by a specially crafted media file, with high impact (remote code execution) in a privileged context. A...
CVE-2017-0873
CVE-2017-0873 is a DoS vulnerability in Android's media framework libmpeg2. The issue affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0, and is classified as DoS with impact to availability. The Android Security Bulletin lists this CVE under the Media framework with a high severity,...
CVE-2017-11007
CVE-2017-11007 is an Elevation of Privilege in Qualcomm Fastboot (EoP, High) with local access. The available connected records indicate a root cause of buffer overflow in the Partition name during conversion of ascii to unicode in HandleMetaImgFlash, leading to stack corruption. There are no exp...
CVE-2017-11019
The CVE-2017-11019 issue affects Android for MSM, Firefox OS for MSM, and QRD Android on CAF Linux kernels, where a file descriptor allocated during get_metadata was not closed after freeing the associated buffer, causing a failure during exit. This is a kernel/user-space interaction flaw that ca...
CVE-2017-11027
CVE-2017-11027 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel; the vulnerability arises when flashing a UBI image, where the size is not validated against the minimum header size, leading to uninitialized data access. The NVD entry characterizes impact ...
CVE-2017-11063
CVE-2017-11063 describes a race condition between two userspace processes that interact with a driver in Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF/Linux kernel. The race condition can lead to a null pointer dereference, i.e., a potential crash; exploitation details, af...
CVE-2017-11079
Technical details for CVE-2017-11079 are not publicly available in the provided documents. Monitor for updates from authoritative sources.
CVE-2017-13169
CVE-2017-13169 is an information-disclosure vulnerability in the Android kernel camera server. Affected: Android kernel (kernel camera server). Root cause not explicitly detailed in provided documents. Impact: confidentiality leakage (per CVSS metrics: partial in v2, high in v3; no integrity/avai...
CVE-2017-13175
CVE-2017-13175 is a vulnerability in NVIDIA’s Tegra OpenMax component, specifically OMX.Nvidia.audio.render. The issue arises because mediaserver could reference memory after it has been freed, potentially enabling a denial of service or, in some scenarios, privilege escalation. The vulnerability...
CVE-2017-13209
This CVE (CVE-2017-13209) affects Android 8.0–8.1 and is due to an insecure permissions check in ServiceManager::add of the hardware service manager. The check based on the caller’s PID could allow an application or service to replace a HAL service with its own, enabling local elevation of privil...
CVE-2017-13214
CVE-2017-13214 affects the Hardware HEVC decoder in Android kernel. Affects Android devices processing certain media files, where a page fault can cause remote denial of service in a critical system process. Exploitation is possible over the network with no user interaction and no privileges requ...
CVE-2017-13221
CVE-2017-13221 is an Elevation of Privilege (EoP) vulnerability affecting the Upstream kernel WiFi driver in Android devices (Android kernel). The connected documents consistently describe a local vulnerability that could allow a non-privileged attacker to escalate privileges via the kernel WiFi ...
CVE-2017-13284
CVE-2017-13284 affects Android (Android 6.0 to 8.1). It is caused by improper input validation in config_set_string of config.cc, allowing a second Bluetooth keyboard to be paired without user approval, leading to remote elevation of privilege with no user interaction required. The Android bullet...
CVE-2017-13290
CVE-2017-13290 affects Android: the issue is an out-of-bounds read in sdp_server_handle_client_req within sdp_server.cc, caused by a missing bounds check. This leads to local information disclosure with no privileges required and no user interaction. Versions impacted include Android 6.0–8.1. The...
CVE-2017-13304
CVE-2017-13304 describes an information disclosure vulnerability in the Upstream kernel mnh_sm driver affecting Android kernels (notably on Pixel/Nexus devices). The connected CNVD entry explicitly states that the vulnerability exists in the kernel mnh_sm driver and that an attacker can obtain in...
CVE-2017-13315
CVE-2017-13315 involves an Elevation of Privilege in Android’s DcParamObject.java (writeToParcel/createFromParcel) that bypasses permissions to start an activity with system privileges without extra execution privileges. Affected component: Android System (DcParamObject parceling code). Impact to...
CVE-2017-14885
CVE-2017-14885 affects WLAN components in Android for MSM/CAF stacks (wma_unified_link_peer_stats_event_handler). The issue arises because the function validates only the first peer_stats->num_rates against WMA_SVC_MSG_MAX_SIZE, not the sum of all peer_stats->num_rates (num_rates). As a res...
CVE-2017-14888
Summary of CVE-2017-14888 : A heap buffer overflow in the Qualcomm WLAN Host component embedded in Android CAF builds (Linux kernel) occurs when userspace passes Information Elements (IEs) to the host driver and multiple append commands cause the length variable to overflow, leading to unsafe mem...
CVE-2017-15815
CVE-2017-15815 describes a potential buffer overflow in the WLAN processing path of Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel, specifically when handling 802.11 MGMT frames (e.g., Auth) inside limProcessAuthFrame. The issue is triggered during processing o...
CVE-2017-15831
CVE-2017-15831 describes a vulnerability in Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux, where the function wma_ndp_end_indication_event_handler() performs no input validation on an event_info value from firmware. This can cause an integer overflow and potentially ...
CVE-2017-15843
CVE-2017-15843 describes a race condition in the Qualcomm bus driver, specifically msm_bus_floor_vote_context(), which can lead to a double-free in CAF Android-for-MSM builds on Linux kernels. The vulnerability affects Android releases that use the affected bus driver; CVSS data indicates Local a...
CVE-2017-18169
Technical details about CVE-2017-18169 (affected products, root cause, impact, fixes) are not provided in the connected documents; sources only note a kernel denial-of-service in ashmem during cache maintenance. Monitor for updates.
CVE-2017-18648
CVE-2017-18648 affects Samsung mobile devices running KK(4.4.x) to N(7.x). The vulnerability allows arbitrary file read/write while the device is in a locked state via a crafted MTP command, indicating a flaw in how MTP is processed on this platform. The issue, reported across multiple Android ve...
CVE-2017-18654
CVE-2017-18654 affects Samsung mobile devices on M (6.0) and N (7.0/7.1). The vulnerability allows an unauthenticated attacker to register a new security certificate. The provided documents do not specify the affected component, root cause details, or a concrete remediation/patch version. Connect...
CVE-2017-18659
CVE-2017-18659 affects Samsung mobile devices running KK (4.4), L (5.0/5.1), M (6.0), and N (7.x). Multiple sources (NVD entry and Red Hat advisory) describe an issue where attackers can crash system processes by sending a broadcast to AdaptiveDisplayColorService. The vulnerability is device/syst...
CVE-2017-18671
The CVE affects Samsung mobile devices running Android L/M/N. Root cause: Wi‑Fi related intents with incorrect exception handling. Consequence: crash of system processes. No exploitation details are provided in the documents. Samsung lists a security update reference (SVE-2017-8389) as context fo...
CVE-2017-6279
CVE-2017-6279 affects NVIDIA Tegra OpenMax component OMX.Nvidia.aac.decoder in the Android media framework. The vendor bulletin notes the component is not actively used or maintained, and that disabling dead code to avoid malicious software can allow instantiation of this component, potentially l...
CVE-2017-6285
CVE-2017-6285 affects NVIDIA libnvrm within Android on Pixel/Nexus devices, caused by a missing bounds check that enables a local information-disclosure through an out-of-bounds read. The vulnerability is listed under NVIDIA components in the Pixel/Nexus 2018-03-01 bulletin; mitigation requires p...
CVE-2017-8247
CVE-2017-8247 affects Qualcomm camera driver components in Android CAF builds using the Linux kernel. Description: when more than one thread opens the device, the device may be opened multiple times, causing get_pid to be called more than once while put_pid is called only once in msm_close. Impac...
CVE-2017-8279
CVE-2017-8279 is described across multiple sources as a race-condition flaw in Android on MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels. The underlying issue is missing protection while updating the msg_mask table, which can cause a buffer over-read and may allow access ...
CVE-2017-9683
CVE-2017-9683 describes an integer overflow in Android for MSM/CAF Linux kernel when flashing a meta image if user-supplied image offset/size are too large. Affected: Android for MSM, Firefox OS for MSM, QRD Android with CAF Linux kernel (all CAF-based Android releases). Root cause: integer overf...
CVE-2017-9684
CVE-2017-9684 concerns a race condition in the Qualcomm USB driver used by Android CAF Linux kernels, leading to a Use-After-Free condition. The vulnerability is localized and requires user interaction to exploit, with potential high impact on confidentiality, integrity, and availability if succe...
CVE-2017-9697
CVE-2017-9697 is a local race condition affecting Android builds (Android for MSM, Firefox OS for MSM, QRD Android) using CAF Linux kernel. The vulnerability arises in the diag_dbgfs_read_table path, where a race condition can permit access to memory that has already been freed during command reg...
CVE-2017-9715
The CVE-2017-9715 entry describes a buffer over-read in Android for MSM, Firefox OS for MSM, QRD Android, and CAF Android releases using the Linux kernel when processing a vendor command. The underlying vulnerability is a buffer over-read (noted as an information disclosure risk) with affected co...
CVE-2018-11842
CVE-2018-11842 describes a memory-management fault in Qualcomm CAF WLAN host driver used in Android CAF builds during WLAN association. When memory allocation fails, the driver frees memory that was not allocated, indicating a potential use-after-free/memory-corruption condition. The vulnerabilit...
CVE-2018-21038
CVE-2018-21038 concerns Samsung mobile devices running N(7.x) software, where the Secure Folder app’s startup logic permits an authentication bypass. The vulnerability is tied to the Secure Folder startup sequence, enabling bypass of authentication for affected devices (Samsung ID SVE-2018-11628)...