CVE-2026-0075

The CVE-2026-0075 entry describes a SQL injection that could permit access to the contacts database, enabling local escalation of privilege with no additional privileges required and no user interaction needed. Connected documents (including RH/CVE, EUVD, NVD, CNNVD, and others) reiterate the sam...

CVE-2024-39437

CVE-2024-39437 concerns the UNISOC/linkturbonative service, where improper input validation enables a possible command injection. The underlying effect is local privilege escalation to SYSTEM level. Documented impact: local execution with high privileges; attacked component/process is the linktur...

CVE-2024-39440

CVE-2024-39440 affects the DRM service and is caused by a null pointer dereference that can crash the system, leading to local denial of service with SYSTEM privileges required. Public references consistently describe the issue as a local DoS in DRM service components; no exploitation details are...

CVE-2026-0081

CVE-2026-0081 concerns the Android NFC stack. The connected documents indicate a missing permission check in NFC that could allow spoofing an NFC event, enabling local escalation of privilege without any additional execution privileges and without user interaction. The exploitation details are no...

CVE-2011-1352

The CVE-2011-1352 issue affects the PowerVR SGX driver used in Android prior to 2.3.6. A local attacker can trigger kernel memory corruption via the pvrsrvkm device by supplying crafted user data, enabling privilege escalation to root. Multiple connected sources (including Levitator exploit code,...

CVE-2013-7457

CVE-2013-7457 pertains to Android with Qualcomm components. Connected sources indicate a privilege-lifting vulnerability in the Qualcomm component in Android versions prior to 2016-07-05, which can be exploited by a crafted application to gain privileges. The initial description notes an unspecif...

CVE-2014-9802

CVE-2014-9802: Concrete details found in CNVD-2016-04811 and related records show an integer overflow in lib/libfdt/fdt.c within the Qualcomm component on Android, affecting Nexus 5 and Nexus 7 (2013) devices. Root cause: integer overflow in the FDT parser leads to privilege escalation when proce...

CVE-2014-9866

CVE-2014-9866 affects Qualcomm MSM camera driver on Nexus 5/Nexus 7 (2013) running Android with pre-2016-08-05 patch levels. The vulnerable file is drivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c, where a parameter is not validated, enabling elevation of privilege via a crafted applic...

CVE-2014-9869

CVE-2014-9869 affects Android on Nexus 5/7 (2013) prior to 2016-08-05, where msm_isp_stats_util.c in Qualcomm components does not validate certain index values, enabling local privilege escalation via a crafted app. Connected sources confirm the issue is a privilege escalation in Mediaserver/kern...

CVE-2014-9955

CVE-2014-9955 is an elevation-of-privilege vulnerability affecting Android, specifically in Qualcomm closed‑source components with the Android kernel as the platform. The connected CVE records confirm the issue is associated with Qualcomm closed‑source components and that fixes are not delivered ...

CVE-2014-9960

CVE-2014-9960 is a documented buffer‑overflow vulnerability in the PlayReady API present in Android releases from CAF using the Linux kernel. The issue affects the PlayReady API component (buffer overflow in PlayReady) and is supported by multiple entries (NVD, CNVD, CVELIST, PRION, etc.). The CV...

CVE-2015-1526

CVE-2015-1526 affects Android, specifically its media_server component. The vulnerability allows remote attackers to cause a denial of service through a crafted application. The provided documents identify the affected area as the media_server and confirm DoS as the impact, but do not disclose th...

CVE-2015-3872

CVE-2015-3872 involves libstagefright in Android before 5.1.1 LMY48T. A crafted media file could cause memory corruption, enabling remote code execution or a denial of service. Root cause referenced as internal bug 23346388. The Nexus security bulletin (Android 2015-10-01) confirms libstagefright...

CVE-2015-6600

CVE-2015-6600 affects Android’s media stack: libstagefright vulnerable on Android versions before 5.1.1 LMY48T due to a memory-corruption flaw when processing crafted media files, enabling remote code execution or a denial of service in mediaserver. Root cause referenced as internal bug 22882938....

CVE-2015-6603

CVE-2015-6603 affects libstagefright in Android prior to 5.1.1 LMY48T. A crafted media file could cause memory corruption in mediaserver and allow remote code execution or a denial of service. The issue is identified as internal bug 23227354. Android’s October 2015 bulletin documents multiple Rem...

CVE-2015-6630

CVE-2015-6630 affects Android SystemUI. The issue allows a crafted application to read screenshots and elevate privileges in affected devices. Affected software: SystemUI on Android 5.x before 5.1.1 LMY48Z and Android 6.0 before 2015-12-01. Root cause: information disclosure enabling privilege es...

CVE-2015-8595

Connected sources tie CVE-2015-8595 to a Qualcomm closed‑source DRM issue in Android CAF using the Linux kernel. CNVD-2017-26645 describes a buffer overflow in the digital television/digital radio DRM of the Qualcomm component, capable of enabling arbitrary code execution or DoS. The available do...

CVE-2015-8938

CVE-2015-8938 affects the MSM camera driver in Qualcomm components on Nexus 6 devices, where input parameter validation is incomplete, enabling privilege escalation via a crafted application. The issue is documented across multiple sources (e.g., CNVD-2016-06244) as a Nexus 6 privilege-acquisitio...

CVE-2015-9007

Technical details for CVE-2015-9007 are not publicly available in the provided documents. No specifics on affected components, root cause, impact, or remediation are provided here. Monitor for updates.

CVE-2015-9031

CVE-2015-9031 arises in all Android CAF builds that use the Linux kernel, where a TZ memory address is exposed to the high-level OS (HLOS) by the HDCP component. The root cause is a leakage of a TZ memory address, enabling information disclosure within the system. The available documents do not s...

CVE-2016-0812

The CVE-2016-0812 entry concerns the Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and Android 6.0 before 2016-02-01. The vulnerability arises from the interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java, where setup completion is not ...

CVE-2016-0827

The CVE-2016-0827 issue affects Android mediaserver’s libeffects across Android 4.x (before 4.4.4), 5.x (before 5.1.1 LMY49H), and 6.x (before 2016-03-01). The root cause is multiple integer overflows in libeffects (notably in EffectBundle.cpp and EffectReverb.cpp) that can allow a crafted applic...

CVE-2016-0836

CVE-2016-0836 is a stack-based buffer overflow in mediaserver's decoder/impeg2d_vld.c used by Android 6.x. The vulnerability allows remote attackers to trigger memory corruption and potentially execute code or cause a denial of service via a crafted media file. Affected component is mediaserver i...

CVE-2016-0838

CVE-2016-0838 affects Sonivox in mediaserver on Android 4.x up to 4.4.4, 5.0.x up to 5.0.2, 5.1.x up to 5.1.1, and 6.x prior to 2016-04-01. The flaw occurs when mediaserver’s Sonivox component does not check for a negative number of samples, allowing remote attackers to execute arbitrary code or ...

CVE-2016-10242

CVE-2016-10242 describes a time-of-check time-of-use race condition in the secure file system used by CAF Android builds that rely on the Linux kernel. The root cause is a TOCTOU race allowing inconsistent file-system state during security checks, potentially enabling unauthorized access or behav...

CVE-2016-10392

CVE-2016-10392 describes a memory-leak vulnerability in Qualcomm components used in Android CAF builds that run on the Linux kernel. The flaw is attributed to a driver that can potentially leak kernel memory in all Qualcomm products with Android CAF using the Linux kernel. Connected documents con...

CVE-2016-11027

CVE-2016-11027 affects Samsung mobile devices running M(6.0) software. In the Shade Locked state, a physically proximate attacker can read notifications on the lock screen. The entry provides the Samsung ID SVE-2016-7132 but does not specify exploit details, affected models, versions beyond Andro...

CVE-2016-11029

CVE-2016-11029 affects Samsung mobile devices on L(5.0/5.1), M(6.0), and N(7.0). The vulnerability arises from an unprotected intent that allows attackers to read the Mobile Hotspot password from logs. The description in multiple sources confirms the root cause and the impact: disclosure of hotsp...

CVE-2016-11030

The CVE-2016-11030 issue affects Samsung mobile devices running KK/4.4, L/5.0-5.1, and M/6.0 with Hrm sensor support. The MAX86902 sensor driver sysfs allows concurrent access, enabling a race condition that results in a heap-based buffer overflow. This is the concrete vulnerability described in ...

CVE-2016-2413

CVE-2016-2413 affects Android mediaserver: media/libmedia/IOMX.cpp in mediaserver does not initialize a handle pointer. This vulnerability enables a local attacker to gain privileges via a crafted application, demonstrated by obtaining Signature or SignatureOrSystem access. Affected Android versi...

CVE-2016-2443

The CVE-2016-2443 entry concerns the Qualcomm MDP driver on Android (pre May 1, 2016) affecting Nexus 5 and Nexus 7 (2013). The root cause is a privilege-escalation flaw that lets a locally executed crafted application gain kernel-level privileges. The Android security bulletin lists this issue u...

CVE-2016-2461

CVE-2016-2461 affects OpenSSLCipher.java in Conscrypt on Android 6.x. The issue arises from mishandling resets of the AAD array, allowing a local attacker to spoof message authentication via unspecified vectors (internal bugs 27324690, 27696681). The vulnerability is tied to Conscrypt in the Andr...

CVE-2016-2462

Summary (CVE-2016-2462) : In Android 6.x, the Conscrypt/OpenSSL binding (OpenSSLCipher.java) mishandled updates to the AAD array, enabling possible spoofing of message authentication via unspecified vectors (internal bug 27371173). This is a local/authenticated context issue due to the cipher sta...

CVE-2016-2467

Summary: CVE-2016-2467 is an Elevation of Privilege vulnerability affecting the Qualcomm sound driver on Android devices prior to 2016-06-01, notably Nexus 5. A local attacker could gain privileges by presenting a crafted application, per Android/Qualcomm disclosures. Affected component: Qualcomm...

CVE-2016-2476

CVE-2016-2476 affects Mediaserver in Android (versions 4.x up to 4.4.3, 5.0.x up to 5.0.1, 5.1.x up to 5.1.0, and 6.x prior to 2016-06-01). The issue is improper validation of OMX buffer sizes, enabling a local attacker with a crafted app to gain privileges (Signature or SignatureOrSystem). The v...

CVE-2016-2477

CVE-2016-2477 is an Android Mediaserver privilege-escalation vulnerability caused by mishandled pointers in mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp. A local attacker could exploit a crafted file or payload to gain Signature or SignatureOrSystem privileges. Affected Android versions inclu...

CVE-2016-2488

CVE-2016-2488 affects the Qualcomm camera driver in Android before 2016-06-01 on Nexus devices (N5, N5X, N6, N6P, N7 2013). The vulnerability is an elevation of privilege via a crafted application, linked to internal bug 27600832. The issue is addressed in the June 2016 Android bulletin; patch le...

CVE-2016-3796

CVE-2016-3796 covers an elevation-of-privilege vulnerability in the MediaTek power driver present on Android One devices prior to 2016-07-05. A local attacker could exploit a crafted application to gain privileged execution within the kernel. Public details in the 2016-07-01/07-05 Android bulleti...

CVE-2016-3802

CVE-2016-3802: Privilege-escalation in the Android kernel file system (Nexus 9) due to a fault in the kernel file system implementation. Local attacker could gain privileges via a crafted app. Exploitation status not provided in the documents. The issue is listed in the 2016-07-01/07-05 Android s...

CVE-2016-3828

CVE-2016-3828 affects Android Mediaserver (decoder/ih264d_api.c) in Android 6.x prior to the 2016-08-01 patch, where invalid PPS/SPS NAL units are mishandled, enabling a crafted media file to cause a denial of service (device hang or reboot). The issue is categorized as a Mediaserver DoS vulnerab...

CVE-2016-3844

CVE-2016-3844 is a Mediaserver elevation-of-privilege issue in Android. The provided documents consistently describe it as a local privilege escalation affecting Mediaserver on Nexus 9 and Pixel C devices, exploitable by a crafted application to gain privileges. Root cause is tied to Mediaserver ...

CVE-2016-3913

CVE-2016-3913 affects media/libmediaplayerservice/MediaPlayerService.cpp in Mediaserver on Android 4.x up to 4.4.4, 5.0.x up to 5.0.2, 5.1.x up to 5.1.1, 6.x up to 2016-10-01, and 7.0 up to 2016-10-01. The root cause is that a certain static_cast is not validated, enabling privilege escalation vi...

CVE-2016-3921

CVE-2016-3921 is an elevation-of-privilege vulnerability in Android’s Framework Listener (FrameworkListener.cpp). A crafted application could enable a local malicious app to gain privileged code execution inside a privileged context. Affected Android versions span 4.x before 4.4.4; 5.0.x before 5...

CVE-2016-3931

CVE-2016-3931 affects the Qualcomm QSEE Communicator driver (drivers/misc/qseecom.c) in Android. It enables local privilege escalation via a crafted application on Nexus 5X, Nexus 6, Nexus 6P and Android One devices running pre-2016-10-05 builds. The vulnerability stems from the QSEE Communicator...

CVE-2016-3933

Summary (CVE-2016-3933): Elevation of privilege in Mediaserver on Android allowed a crafted application to gain privileged execution. Affected devices include Nexus 9 and Pixel C. The issue is described in Android security bulletins as part of the October 2016 patch set, with security patch level...

CVE-2016-5859

CVE-2016-5859 involves a vulnerability in the Qualcomm sound driver across Android for MSM, Firefox OS for MSM, and QRD Android. The issue arises when a function is called with a very large length, triggering an integer overflow that is followed by a buffer overflow. The description identifies me...

CVE-2016-6686

CVE-2016-6686 is an information-disclosure vulnerability in the NVIDIA profiler on Android/Nexus 9 prior to 2016-10-05. A locally run, crafted application could leak sensitive information from the profiler. Connected sources indicate this issue is part of the Android 2016-10-01/2016-10-05 patch s...

CVE-2016-6690

CVE-2016-6690 affects the Android kernel sound driver (sound card) on Nexus devices (Nexus 5, 5X, 6, 6P, Nexus Player) prior to 2016-10-05. Root cause: a flaw in the kernel sound driver allows a crafted application to trigger a denial of service, causing a reboot. Impact as described: device rebo...

CVE-2016-6708

CVE-2016-6708 affects Android 7.0 System UI. It enables a local attacker to bypass the work-profile security prompt in Multi-Window mode, i.e., a local elevation of privilege without requiring user interaction. The issue is described as a local bypass of user interaction requirements and is categ...

CVE-2016-6764

CVE-2016-6764 is a denial-of-service vulnerability in Android's Mediaserver. A specially crafted file could cause a device hang or reboot. The issue affects Android releases listed in the 2016-12-01 bulletin (4.4.4, 5.0.2, 5.1.1, 6.0/6.0.1, 7.0). The Android bulletin’s vulnerability details table...