CVE-2016-6724

CVE-2016-6724 details: A denial of service in the Android Input Manager Service could allow a local malicious app to cause the device to continually reboot. Affected: Android 4.x before 4.4.4; 5.0.x before 5.0.2; 5.1.x before 5.1.1; 6.x before 2016-11-01; 7.0 before 2016-11-01. Impact is a tempor...

CVE-2016-6725

CVE-2016-6725 is a remote-code-execution vulnerability in the Qualcomm crypto driver affecting Android before the 2016-11-05 patch level. The Android kernel context could be compromised by a remote attacker, with CVSS-style impact described as critical (kernel context, remote exploit). The vulner...

CVE-2016-6737

CVE-2016-6737 is an elevation of privilege in the Android kernel ION subsystem. A local malicious app could execute arbitrary code in kernel context on pre-2016-11-05 devices. The issue is deemed Critical and may enable a permanent device compromise, potentially requiring reflashing. Public remed...

CVE-2016-6738

CVE-2016-6738 is an elevation of privilege vulnerability in the Qualcomm crypto engine driver for Android. The issue could allow a local malicious application to execute arbitrary code in the kernel context, requiring initial compromise of a privileged process. The description and related records...

CVE-2016-6746

CVE-2016-6746 describes an information-disclosure vulnerability in the NVIDIA GPU driver on Android devices prior to 2016-11-05, enabling a local malicious app to access data outside its permission set. The issue is categorized as High/Medium impact depending on source, with the NVD noting data e...

CVE-2016-6774

CVE-2016-6774 is an information-disclosure vulnerability in Android’s Package Manager for Android 7.0. A local malicious application could bypass OS protections that isolate app data if it can compromise a privileged process, leading to data exposure. The issue is categorized as Moderate, reflect...

CVE-2016-7991

The CVE affects Samsung Galaxy S4 through S7 devices where the omacp app ignores security information embedded in OMACP messages. This allows remote unsolicited WAP Push SMS messages to be accepted, parsed, and acted upon, leading to unauthorized configuration changes. Root cause is the omacp han...

CVE-2016-8484

CVE-2016-8484 is an elevation-of-privilege vulnerability affecting Android kernel components within Qualcomm closed-source code. The available sources describe the issue as a privilege escalation in Qualcomm components used by Android, enabling code execution in the kernel context. No device- or ...

CVE-2017-0471

CVE-2017-0471 is a remote code execution in Mediaserver affecting Android 6.0–7.1.1. A specially crafted media file could trigger memory corruption during media/file processing, allowing an attacker to execute code within the Mediaserver process. The vulnerability is listed in the 2017-03-01 Andr...

CVE-2017-0522

CVE-2017-0522 describes an elevation of privilege in a MediaTek APK on Android that could allow a local malicious app to execute code in a privileged process. The issue is characterized as High impact with local execution of arbitrary code within a privileged context. The affected component is th...

CVE-2017-0593

CVE-2017-0593 is an elevation of privilege vulnerability in Android Framework APIs that could allow a local malicious application to obtain access to custom permissions. Affected products/versions identified in the connected documents include Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID:...

CVE-2017-0638

Technical details regarding CVE-2017-0638 are not publicly provided in the connected documents. Monitor for updates.

CVE-2017-0671

CVE-2017-0671: A remote code execution vulnerability in the Android libraries affecting Android 4.4.4 (Library component). The available documents confirm RCE in the Libraries area of Android 4.4.4, but do not provide the exact root cause details, affected subcomponents, or concrete exploit vecto...

CVE-2017-0674

CVE-2017-0674 is a remote code execution vulnerability in Android’s media framework affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The description attributes the issue to a flaw in the media framework (no deeper root-cause details provided). The Android Security Bulletin for July 2017 ident...

CVE-2017-0690

CVE-2017-0690 is a DoS vulnerability in Android’s media framework. Connected CNVD/NVD entries describe a denial of service that can be triggered by a remote attacker, with the backreference triggering a null pointer scenario. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0,...

CVE-2017-0702

CVE-2017-0702 is a remote code execution vulnerability in Android System UI (Android 7.1.1/7.1.2). Connected CNVD-2017-21551 and NVD records describe a System UI RCE affecting these versions. Public exploit details are not provided in the documents. Android bulletin guidance indicates applying th...

CVE-2017-0713

CVE-2017-0713 is a remote code execution vulnerability in the Android libraries sfntly. Affected products/versions from the initial entry: Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Connected CNVD-2017-23414 confirms the issue as an Android sfntly remote code execution vulnerabil...

CVE-2017-0728

CVE-2017-0728 is a denial-of-service vulnerability in the Android media framework, specifically the HEVC decoder. Affected products/versions: Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. The issue is classified as DoS in the Media framework with absence of explicit exploit details in the ...

CVE-2017-0835

CVE-2017-0835 is a remote code execution vulnerability in the Android media framework (libmpeg2) affecting Android 6.0–8.0. The issue is documented in the 2017-11 Android bulletin as exploitable by a specially crafted media file, with high impact (remote code execution) in a privileged context. A...

CVE-2017-0865

CVE-2017-0865 is an elevation of privilege in the MediaTek SoC driver within Android kernel. The issue is categorized as EoP in the MediaTek SoC driver component; details across connected records confirm the affected element is the MediaTek SoC driver on Android devices (Pixel/Nexus context cited...

CVE-2017-11016

CVE-2017-11016 affects Android on MSM/CAF/Linux kernel variants, specifically when memory allocation fails during create_cal_block in calibration handling, leaving stale pointers. Connected Android bulletin detail positions CVE-2017-11016 under Qualcomm components for Pixel/Nexus devices and clas...

CVE-2017-11023

Technical details (affected products, versions, root cause, and fixes) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2017-11026

CVE-2017-11026 affects Android on Qualcomm MSM devices with CAF Linux kernel during FRP partition flashing. Descriptions in NVD/CNVD indicate an authentication flaw where the authentication method can be compromised for static keys when flashing the FRP partition using a reference FRP unlock. Thi...

CVE-2017-11051

CVE-2017-11051 affects Android for MSM and related CAF/Linux kernel builds. The root cause is that hb_params in __wlan_hdd_cfg80211_testmode is not zero-initialized, enabling an information-disclosure vulnerability. Impact is described as information disclosure with network attack vector; exploit...

CVE-2017-13158

CVE-2017-13158 is an information-disclosure vulnerability in Android's activitymanagerservice affecting Android 5.1.1 through 8.0 (including 8.0). The issue is a information disclosure vulnerability in the System component that could expose data to an attacker. CVSSv3 base score 7.5 (NETWORK, LOW...

CVE-2017-13209

This CVE (CVE-2017-13209) affects Android 8.0–8.1 and is due to an insecure permissions check in ServiceManager::add of the hardware service manager. The check based on the caller’s PID could allow an application or service to replace a HAL service with its own, enabling local elevation of privil...

CVE-2017-13212

CVE-2017-13212 is an Elevation of Privilege in Android’s systemui affecting Android 5.1.1–8.0. The vulnerable component is the Android System UI; root cause is not detailed in the provided documents. No exploitation details are provided. The Pixel/Nexus bulletin lists this CVE under the System ca...

CVE-2017-13259

CVE-2017-13259 affects Android devices. The vulnerability arises from out-of-bounds reads in sdp_discovery.cc due to missing bounds checks, potentially enabling remote information disclosure without privileges or user interaction. Affected Android versions include 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7...

CVE-2017-13300

CVE-2017-13300 is a DoS in Android's media framework (libhevc) affecting Android 6.0 and 6.0.1. The cited sources (NVD entry and Pixel bulletin) confirm a DoS in the libhevc decoder component; the Android 6.x devices (Pixel/Nexus) are specifically listed. The Pixel security bulletin assigns this ...

CVE-2017-13307

CVE-2017-13307 is an elevation of privilege in the Upstream kernel PCI sysfs exposed on Android devices. Affected: Android kernel components implementing pci sysfs. Root cause: unspecified in the provided details, described as a privilege-escalation vulnerability. Impact: elevation of privileges ...

CVE-2017-14872

CVE-2017-14872 describes a potential buffer over-read during flashing of a meta image in CAF Android releases (Android for MSM, Firefox OS for MSM, QRD Android) when the number of images exceeds the maximum range of 32, before the 2018-06-05 security patch level. The issue is associated with the ...

CVE-2017-14876

The CVE-2017-14876 vulnerability affects Android for MSM, Firefox OS for MSM, and QRD Android prior to 2017-06-21. The root cause is a lack of bounds checking on params->entries[i].vfe_intf in msm_ispif_config_stereo(), which can lead to a kernel out-of-bounds write. Exploitation status is not...

CVE-2017-14882

CVE-2017-14882 affects Android for MSM, Firefox OS for MSM, QRD Android, and CAF Linux-kernel builds. The issue stems from processing a VENDOR specific action frame in lim_process_action_vendor_specific(), where the incoming action frame body is length-validated, allowing potential out-of-bounds ...

CVE-2017-14893

CVE-2017-14893 involves a potential buffer over-read during flashing a meta image in Android CAF builds (Android for MSM, Firefox OS for MSM, QRD Android) via the Linux kernel, before the 2018-06-05 patch level. Root cause: image size smaller than the image header or header plus header entries tr...

CVE-2017-14899

CVE-2017-14899 affects Android for MSM (CAF Linux kernel-based builds) and Qualcomm WLAN components; a buffer overrun occurs when the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB attribute contains fewer than 1 byte during processing of the vendor command, potentially enabling local impact...

CVE-2017-15823

The CVE-2017-15823 entry affects Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-11, where spectral_create_samp_msg() may mishandle firmware values, potentially causing a buffer overflow. The description notes improper validation of firmware values as the root cause. No exploi...

CVE-2017-15852

CVE-2017-15852 is an information-disclosure vulnerability affecting Qualcomm MSM camera components, specifically an ISPIF/base address exposure in the camera driver (Framebuffer path referenced in Pixel/Qualcomm mappings). The NVD entry describes an information leak of the ISPIF base address that...

CVE-2017-17769

CVE-2017-17769 involves information leakage in the Qualcomm component (MSM audio driver; listed as qdsp6v2 in the Pixel bulletin) affecting Android for MSM and related builds. The vulnerability is an information-disclosure issue with confidentiality impact (NVD CVSS3: HIGH, base 5.5) and is categ...

CVE-2017-18059

CVE-2017-18059 affects Qualcomm WLAN/WMA on Android platforms (Android for MSM, Firefox OS for MSM, QRD Android) with CAF Linux kernel. The root cause is improper input validation of the vdev id in wma_scan_event_callback() (received from firmware), which can lead to an out-of-bounds memory read....

CVE-2017-18065

CVE-2017-18065 corresponds to a Qualcomm Wma component Elevation of Privilege vulnerability in Android for MSM/CAFLinux-based builds. The issue arises from improper input validation of vent->vdev_id in wma_action_frame_filter_mac_event_handler(), which is sourced from firmware, allowing arbitr...

CVE-2017-18068

CVE-2017-18068 involves an improper buffer length calculation in wma_roam_scan_filter() that can cause a buffer overflow. Affected are Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF with the Linux kernel. The issue is classified as EoP/High-impact (CVSS v3.0: 7.8) with loca...

CVE-2017-18159

CVE-2017-18159 affects CAF Android builds using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The issue is an out-of-bounds access when processing a StrHwPlatform whose length is smaller than EFICHIPINFO_MAX_ID_LENGTH, leading to a local, high-severity impact (CVSS 2.0/3.0:...

CVE-2017-18645

CVE-2017-18645 affects Samsung mobile devices with M(6.x) and N(7.x) Qualcomm chipsets. The issue is a panel_lpm sysfs stack-based buffer overflow in the software, with CVSSv3.1/2.0 vectors indicating a network attack vector, low complexity, no authentication, and high confidentiality, integrity,...

CVE-2017-18648

CVE-2017-18648 affects Samsung mobile devices running KK(4.4.x) to N(7.x). The vulnerability allows arbitrary file read/write while the device is in a locked state via a crafted MTP command, indicating a flaw in how MTP is processed on this platform. The issue, reported across multiple Android ve...

CVE-2017-18659

CVE-2017-18659 affects Samsung mobile devices running KK (4.4), L (5.0/5.1), M (6.0), and N (7.x). Multiple sources (NVD entry and Red Hat advisory) describe an issue where attackers can crash system processes by sending a broadcast to AdaptiveDisplayColorService. The vulnerability is device/syst...

CVE-2017-18662

CVE-2017-18662 affects Samsung mobile devices running M (6.0) and N (7.x). The issue occurs when data outside the rkp log buffer boundary is read, leading to an information leak. Connected sources corroborate a Samsung-specific vulnerability (SVE-2017-9109). The Red Hat and CVE records align on t...

CVE-2017-18664

Summary (CVE-2017-18664) : Affected: Samsung mobile devices running KK (4.4), L (5.0/5.1), and M (6.0). Issue: a NULL pointer dereference in the internal component named PersonManager leads to memory corruption. Sources in the connected documents consistently describe this exact behavior without ...

CVE-2017-18678

CVE-2017-18678 affects Samsung mobile devices running KK(4.4) to N(7.x). The issue allows an attacker to crash system processes via a Serializable object due to missing exception handling. Reported Samsung internal identifiers are SVE-2017-8109, SVE-2017-8110, SVE-2017-8115, SVE-2017-8118, and SV...

CVE-2017-18687

Technical details (affected product/version, root cause, impact, or fixes) are not publicly provided in the connected documents. Monitor for updates; current sources summarize the issue but do not offer actionable specifics.

CVE-2017-18696

CVE-2017-18696 affects Samsung mobile devices running M(6.0) and N(7.0) on Exynos7420, Exynos8890 or MSM8996 chipsets. Affected component is unspecified in the provided documents, but the issue is described as a memory corruption vulnerability tied to RKP (Samsung’s kernel protection feature). Im...