CVE-2017-13315

CVE-2017-13315 involves an Elevation of Privilege in Android’s DcParamObject.java (writeToParcel/createFromParcel) that bypasses permissions to start an activity with system privileges without extra execution privileges. Affected component: Android System (DcParamObject parceling code). Impact to...

CVE-2017-14880

CVE-2017-14880 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux prior to the 2018-04-05 patch level. The issue is a race condition where the global variable num_q6_rule is accessed/modified by multiple threads due to missing mutex protection in the IPA ...

CVE-2017-14908

CVE-2017-14908 concerns the SafeSwitch test application on Android for MSM/CAF Linux builds (including Qualcomm components) not properly validating the number of blocks. Connected sources confirm the issue affects Android stacks (CAF Linux kernel-based builds) and can involve Qualcomm closed-sour...

CVE-2017-15815

CVE-2017-15815 describes a potential buffer overflow in the WLAN processing path of Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel, specifically when handling 802.11 MGMT frames (e.g., Auth) inside limProcessAuthFrame. The issue is triggered during processing o...

CVE-2017-15826

The CVE-2017-15826 entry describes a race condition in the MDSS rotator used in Android for MSM, Firefox OS for MSM, and QRD Android prior to 2017-10-20, potentially enabling a double-free when two threads free the same perf structures. The NVD entry confirms a LOCAL attack with medium complexity...

CVE-2017-15836

Summary: CVE-2017-15836 describes a potential integer overflow leading to a buffer overflow in Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds with CAF Linux kernels before 2018-04-05, triggered when the firmware sends a service ready event containing a very large value for n...

CVE-2017-18050

The CVE-2017-18050 entry affects Android for MSM, Firefox OS for MSM, QRD Android, and CAF-based Android with the Linux kernel. The root cause is improper input validation for vdev_map in wma_tbttoffset_update_event_handler(), which processes data from firmware, risking a buffer overwrite and an ...

CVE-2017-18654

CVE-2017-18654 affects Samsung mobile devices on M (6.0) and N (7.0/7.1). The vulnerability allows an unauthenticated attacker to register a new security certificate. The provided documents do not specify the affected component, root cause details, or a concrete remediation/patch version. Connect...

CVE-2017-18663

CVE-2017-18663 affects Samsung mobile devices running N(7.x). Root cause: missing Intent exception handling causes a NullPointerException in system_server, potentially crashing a system process. Samsung identifiers: SVE-2017-9122, SVE-2017-9123, SVE-2017-9124, SVE-2017-9126 (July 2017). Connected...

CVE-2017-18670

CVE-2017-18670 affects Samsung mobile devices running KK(4.4), L(5.0/5.1) and M(6.0). The issue arises from android.intent.action.SIOP_LEVEL_CHANGED, which allows a serializable intent to trigger a reboot. Root cause and exact impact are stated in Red Hat/NVD entries and related records as a vuln...

CVE-2017-18679

CVE-2017-18679 affects Samsung mobile devices running Android M (6.0). The issue arises from SLocation triggering a system crash when calling an API that is not implemented. The vulnerability impact is a denial of service via a crash, with an Availability impact of HIGH per CVSS 3.1 metrics, and ...

CVE-2017-18683

Technical details of CVE-2017-18683 are not publicly available in the provided documents. The entries reference Samsung devices and SVoice behavior but do not specify affected components, root cause, impact, or remediation. Monitor for updates.

CVE-2017-18685

Summary (CVE-2017-18685): An issue in Samsung mobile devices running KK (4.4), L (5.0/5.1), and M (6.0) where the InputMethod application can crash the system via a malformed serializable object in an Intent. The Samsung internal reference is SVE-2016-7123 (February 2017). The Red Hat and CNVD en...

CVE-2017-6258

CVE-2017-6258 describes an elevation-of-privilege vulnerability in NVIDIA libnvmmlite_audio.so when running in the Android media server. The issue may cause an out-of-bounds write and could lead to local code execution in a privileged process. Affected product is Android; remediation is tied to A...

CVE-2017-6289

The CVE-2017-6289 issue affects NVIDIA Tegra TZ/Tee components exposed to the Android SHIELD TV platform. The connected NVIDIA security bulletin describes a vulnerability in the Tegra kernel driver that could allow a local malicious application to execute arbitrary code within the Trusted Executi...

CVE-2017-6294

CVE-2017-6294 is an NVIDIA TLK TrustZone OS issue in the logging driver for Tegra X1 TZ (TLK TrustZone OS). The vulnerability could allow arbitrary code execution, DoS, or privilege escalation with local access. Affected: SHIELD TV on Android; vulnerable component is the TLK TrustZone OS logging ...

CVE-2017-8239

CVE-2017-8239 is an information-disclosure issue in the Camera driver on Android devices (Qualcomm components) listed under the 2017 Pixel/Nexus bulletin. The vulnerability is categorized as ID with moderate severity in the camera driver, with no exploitation details provided in the available doc...

CVE-2017-8267

CVE-2017-8267 affects Qualcomm components in Android CAF builds using the Linux kernel. The issue is a race condition in an IOCTL handler that can lead to an integer overflow and an out-of-bounds write. Impact is described as local, with high severity in CVSS, and no explicit exploit details prov...

CVE-2017-9697

CVE-2017-9697 is a local race condition affecting Android builds (Android for MSM, Firefox OS for MSM, QRD Android) using CAF Linux kernel. The vulnerability arises in the diag_dbgfs_read_table path, where a race condition can permit access to memory that has already been freed during command reg...

CVE-2018-21042

CVE-2018-21042 concerns Samsung mobile devices running N(7.x), O(8.x), and P(9.0). The issue is that Dual Messenger can install an arbitrary APK, leading to privileged code execution. Affected component/feature: Dual Messenger on Samsung devices. Root cause: exploitation arises from ability to in...

CVE-2018-3571

Summary: CVE-2018-3571 affects the Qualcomm KGSL driver used in Android CAF/Linux kernel releases. The vulnerability is a Use-After-Free condition that can occur when printing information about sparse memory allocations. Impact (as described): Local attacker could potentially cause memory corrupt...

CVE-2018-5906

CVE-2018-5906 affects Android releases (CAF builds) using the Linux kernel, specifically the debugfs module. The root cause is a missing validation of input size before copying into a buffer, leading to a potential buffer overflow. The vulnerability is described across multiple sources (NVD, CVE ...

CVE-2018-9344

The CVE-2018-9344 entry describes a use-after-free in DescramblerImpl.cpp caused by improper locking, enabling local privilege escalation with no extra privileges and no user interaction. Connected sources associate this issue with Android’s Media framework and list affected context in the Androi...

CVE-2018-9357

CVE-2018-9357: In BNEP_Write of bnep_api.cc there is an out-of-bounds write caused by an incorrect bounds check, enabling local privilege escalation with user privileges required and no user interaction. Affected Android versions span 6.0–8.1. The vulnerability is documented in the Android Securi...

CVE-2018-9359

CVE-2018-9359 describes an out-of-bounds read in Android’s L2CAP handling (process_l2cap_cmd in l2c_main.cc) that could lead to remote information disclosure without prior privileges or user interaction. Affected products span Android 6.0 through 8.1 (Android-6.0/6.0.1, 7.0/7.1.x, 8.0, 8.1). The ...

CVE-2018-9448

CVE-2018-9448 affects Android 8.0 and 8.1, with a vulnerability in avct_bcb_msg_ind (avct_bcb_act.cc) caused by a missing bounds check that could enable remote information disclosure without user interaction or additional privileges. The issue is categorized as an information-disclosure risk (no ...

CVE-2018-9467

CVE-2018-9467 is a vulnerability in the getHost() path of UriTest.java where incorrect web origin determination could cause security decisions to be made incorrectly. It requires no user interaction and does not require privileges; exploitation is described as a network-vector issue with high imp...

CVE-2018-9482

The CVE-2018-9482 entry concerns the Bluetooth stack component: the function intr_data_copy_cb in btif_hd.cc. The flaw is described as an out-of-bounds read caused by an integer overflow, which could lead to local information disclosure in the Bluetooth service without extra privileges or user in...

CVE-2018-9486

CVE-2018-9486 affects the Bluetooth stack component hidh_l2cif_data_ind in hidh_conn.cc, where a missing bounds check can cause an out-of-bounds read. This could lead to local information disclosure over Bluetooth with no additional execution privileges and without user interaction. Connected sou...

CVE-2018-9590

CVE-2018-9590 affects Android 7.0–9, described as an out-of-bounds read in add_attr() within sdp_discovery.c. The issue could enable remote information disclosure without user interaction and with network access as the attack vector; no exploitation details are provided in the connected documents...

CVE-2019-1994

CVE-2019-1994 affects Android 8.0–9 where DevelopmentTiles.java could leave development settings accessible due to an insecure default. This Elevation of Privilege vulnerability could grant access to development settings with no extra privileges; exploitation requires user interaction. Affected s...

CVE-2019-1998

CVE-2019-1998 affects Android 9. In the event_handler of keymaster_app.c, a table can be lost on reboot causing resource exhaustion and a local denial of service, not mitigated by a factory reset. Exploitation does not require user interaction. The Android bulletin lists this issue under 2019-02-...

CVE-2019-2026

CVE-2019-2026 affects Android 8.0 Framework. In Editor.java’s updateAssistMenuItems, a missing permission check could allow local escalation of privilege and FRP bypass with no user interaction. The Android 2019-04-01 bulletin lists CVE-2019-2026 as a Framework EoP (High) issue for 8.0, indicatin...

CVE-2019-2031

CVE-2019-2031 affects Android if-present in rw_t3t_act_handle_check_ndef_rsp inside rw_t3t.cc. The issue is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with no additional execution privileges or user interaction required. Affected versions inclu...

CVE-2019-2053

CVE-2019-2053 affects Android, specifically the wnm_parse_neighbor_report_elem routine in wnm_sta.c, where a missing bounds check can cause an out-of-bounds read and local information disclosure without user interaction. Affected Android versions include 7.0–9. The vulnerability is documented acr...

CVE-2019-9258

This CVE-2019-9258 entry concerns Android 10 (wifilogd) with a possible out-of-bounds write due to a missing bounds check, enabling local elevation of privilege without user interaction. The issue affects wifilogd on Android-10 and is described as an out-of-bounds write that could elevate privile...

CVE-2020-0017

CVE-2020-0017 is an information-disclosure flaw in the Android Framework where the primary user’s dictionary could be visible and modifiable by other local users. It affects Android 8.0–10 and requires no extra execution privileges, with exploitation requires user interaction. The Android 2020 se...

CVE-2020-0018

CVE-2020-0018 affects Android 8.x–10, in MotionEntry::appendDescription of InputDispatcher.cpp. The issue is an information-disclosure vulnerability: an attacker could cause local disclosure of user input with system-level privileges, and exploitation does not require user interaction (local atta...

CVE-2020-0031

Technical details for CVE-2020-0031 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2020-0131

CVE-2020-0131 affects Android 10 in the Media Framework’s MPEG4Extractor.cpp parseChunk path, where an out-of-bounds write can occur from incompletely initialized data. This vulnerability allows remote code execution via a network vector with the need for user interaction to exploit (per the CVE ...

CVE-2020-0183

CVE-2020-0183 (Android 10): In BluetoothManagerService.handleMessage there is an incomplete reset, enabling local elevation of privilege. Affected component: Android Bluetooth stack (Android-10). According to NVD, CVSS v3.1 base score is 7.8 (HIGH) with LOCAL attack vector, user interaction requi...

CVE-2020-0212

CVE-2020-0212 is a concrete Android security vulnerability affecting Android 10. The issue is an out-of-bounds read caused by a use-after-free in InputBufferManager.cpp (_onBufferDestroyed), potentially enabling remote information disclosure with no execution privilege, requiring user interaction...

CVE-2020-0219

CVE-2020-0219 affects Android 10. The issue is in onCreate of SliceDeepLinkSpringBoard.java, where an insecure Intent could allow local elevation of privilege with no additional execution privileges and without user interaction. The provided documents corroborate the vulnerability and its local-p...

CVE-2020-0268

CVE-2020-0268 affects Android 11. In the NFC stack, a race condition can cause a use-after-free, enabling local escalation of privilege to System privileges without user interaction. Impact is described as local, with a High/Moderate multi-source assessment in public records; exploitation status ...

CVE-2020-0269

In CVE-2020-0269, Android Auto Settings contains an unsafe PendingIntent allowing a local information disclosure. Affected: Android 11 (Android Auto Settings). Root cause: permission bypass enabling information leakage without user interaction, though user privileges are required. Exploitation is...

CVE-2020-0289

CVE-2020-0289 affects Android 11 in the PackageManager component, where a missing permission check allows local information disclosure across users without extra privileges or user interaction. The issue is described across multiple sources (NVD, Red Hat, CNVD, PRION, and national advisories) as ...

CVE-2020-0296

The CVE-2020-0296 issue affects Android 11’s ADB server and USB server, where an unsafe PendingIntent causes a permission bypass that can lead to local information disclosure. Exploitation is local (no user interaction required per the description) and relies on an attacker with access to the dev...

CVE-2020-0346

The CVE-2020-0346 entry affects Android 11 media framework/Mediaserver. The vulnerability is an out-of-bounds write caused by an integer overflow in a Mediaserver component, enabling local elevation of privilege without user interaction. Impacted version: Android 11 (Android device context). Expl...

CVE-2020-0356

CVE-2020-0356 affects the Android Audio HAL. The issue is an out-of-bounds write caused by an incorrect bounds check, enabling local privilege escalation with system-level execution privileges. Exploitation does not require user interaction. The vulnerability is documented across multiple sources...

CVE-2021-0345

CVE-2021-0345 affects Android: the issue is in the mobile_log_d component, caused by improper input validation. This permits local privilege escalation to System execution level on Android-10 and Android-11, with no user interaction required. Exploitation is described as local and does not indica...