CVE-2017-11090

CVE-2017-11090 involves a buffer overread in the WLAN PMKID handling path (__wlan_hdd_cfg80211_set_pmksa) when a PMKID shorter than WLAN_PMKID_LEN is provided. Affected platforms include Android for MSM, Firefox OS for MSM, QRD Android, and CAF-based Android builds using the Linux kernel. The roo...

CVE-2016-6708

CVE-2016-6708 affects Android 7.0 System UI. It enables a local attacker to bypass the work-profile security prompt in Multi-Window mode, i.e., a local elevation of privilege without requiring user interaction. The issue is described as a local bypass of user interaction requirements and is categ...

CVE-2016-6764

CVE-2016-6764 is a denial-of-service vulnerability in Android's Mediaserver. A specially crafted file could cause a device hang or reboot. The issue affects Android releases listed in the 2016-12-01 bulletin (4.4.4, 5.0.2, 5.1.1, 6.0/6.0.1, 7.0). The Android bulletin’s vulnerability details table...

CVE-2016-6765

CVE-2016-6765 is a denial-of-service vulnerability in Android’s Mediaserver component libstagefright. The issue allows a specially crafted file to cause a device hang or reboot, via Mediaserver when processing media data. Affected products/versions cited in the documents include Android 4.4.4, 5....

CVE-2016-6766

CVE-2016-6766 is a denial-of-service vulnerability affecting Mediaserver components (libmedia/libstagefright) in Android. The issue allows a specially crafted file to cause a device hang or reboot. Connected Nessus data reiterates the same vulnerability and notes that there is no vendor patch ava...

CVE-2016-8471

CVE-2016-8471 describes an information-disclosure vulnerability in the MediaTek driver on Android. The issue could allow a local malicious application to access data outside its permission levels, with the impact classified as Moderate because exploitation requires compromising a privileged proce...

CVE-2017-0389

CVE-2017-0389 is a denial-of-service vulnerability in Android’s core networking that could be triggered by a specially crafted network packet, leading to a device hang or reboot. Affected versions per the records are Android 6.0, 6.0.1, 7.0, and 7.1 (Android ID A-31850211). Public references in t...

CVE-2017-0487

CVE-2017-0487 describes a denial-of-service vulnerability in Android’s Mediaserver. A specially crafted media file could cause a device hang or reboot, impacting Android 6.0/6.0.1/7.0/7.1.1. The vulnerability is exposed via Mediaserver’s media processing path and is classified with higher risk du...

CVE-2017-0578

CVE-2017-0578 is an elevation of privilege in the Android DTS sound driver that could allow a local malicious application to execute arbitrary code in the kernel. Affected component: Android with the DTS sound driver. Root cause: privilege escalation within the driver enabling code execution in k...

CVE-2017-0684

CVE-2017-0684 is the Android media framework elevation-of-privilege vulnerability. CNVD-2017-15960 describes it as a privilege-extraction flaw in Android’s media framework, enabling an attacker to trigger an out-of-bounds write. Affected products/versions include Android 6.0, 6.0.1, 7.0, 7.1.1, a...

CVE-2017-0707

CVE-2017-0707 is reflected in connected documents as an Elevation of Privilege in the HTC LED driver within the Android kernel. Documents identify the affected component as the LED driver (HTC) and classify the issue as EoP (Moderate) with local impact; no detailed root-cause, exploit specifics, ...

CVE-2017-0726

CVE-2017-0726 is a DoS in Android's media framework libstagefright affecting Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. The root cause is a denial of service within libstagefright; exploitation details are not provided in the supplied documents, and there is no explicit in‑the‑wi...

CVE-2017-0735

CVE-2017-0735 represents a denial-of-service vulnerability in Android’s media framework libavc affecting Android 6.0–7.2 (6.0, 6.0.1, 7.0, 7.1.1, 7.1.2). Multiple sources (NVD entry, CNVD-2017-23406) describe a DoS in the libavc component of the Media framework, with no publicly disclosed exploit...

CVE-2017-0736

CVE-2017-0736 affects Android’s media framework libavc and is a DoS vulnerability in the component used for multimedia. Affected products/versions include Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The available connected sources describe the issue as a denial of service without detailing the exa...

CVE-2017-0755

CVE-2017-0755 is an Elevation of Privilege in Android’s libminikin library affecting Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 and 8.0. The CVSSv3 base score is 7.8 (High) with LOCAL attack vector, LOW complexity, no privileges required, user interaction required, and impact to...

CVE-2017-0801

CVE-2017-0801 is a local elevation-of-privilege issue in MediaTek libmtkomxvdec (LibMtkOmxVdec) used by Android kernels. It’s classified as EoP (High) and is addressed in the Android/MediaTek stack by vendor patches released to AOSP; remediation is to apply the patched Android build or vendor upd...

CVE-2017-0828

CVE-2017-0828 is described across multiple sources as an elevation of privilege affecting Huawei bootloader within Android kernel contexts. The primary affected component is the bootloader on Huawei devices, enabling an attacker to escalate privileges. Public descriptions consistently label it as...

CVE-2017-10996

CVE-2017-10996 affects Qualcomm devices running CAF Android builds that use the Linux kernel. The vulnerability is an out-of-bounds access in c_show() caused by compat_hwcap_str[] not being NULL-terminated. The issue could cause device crashes/reboots (memory violation/out-of-bounds access). The ...

CVE-2017-11050

CVE-2017-11050 concerns Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels. The description indicates that when the pktlogconf tool provides a pktlog buffer smaller than the minimal possible source data size in the host driver, a potential buffer overflow can occu...

CVE-2017-11056

CVE-2017-11056 affects Android variants using CAF Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The issue arises during SHA and cipher operations when a userspace buffer is directly accessed from kernel space, potentially triggering a page fault. The description confirms the ro...

CVE-2017-11063

CVE-2017-11063 describes a race condition between two userspace processes that interact with a driver in Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF/Linux kernel. The race condition can lead to a null pointer dereference, i.e., a potential crash; exploitation details, af...

CVE-2017-11079

Technical details for CVE-2017-11079 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2017-13173

CVE-2017-13173 is an elevation of privilege vulnerability affecting the MediaTek system server on Android. The issue targets the system server component (within MediaTek integration) and is described as an Android kernel topic, with local access requirements and high impact on confidentiality, in...

CVE-2017-13181

CVE-2017-13181: A double-free vulnerability in MtpServer (doGetThumb/getThumbnail) could allow local elevation of privilege in Android. A freed pointer is not NULL’d, enabling code execution in a privileged process with no extra privileges required; exploitation is local and does not require user...

CVE-2017-13183

The CVE-2017-13183 issue is a race condition in the Media framework of Android 8.1 affecting OMXNodeInstance::useBuffer and IOMX::freeBuffer, causing a use-after-free that can lead to local elevation of privilege and code execution in a privileged process. Exploitation is described as requiring u...

CVE-2017-13186

CVE-2017-13186 affects the Android media framework (libavc) due to incorrect use of the mmco parameter. Affected products include Android devices with versions 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. The vulnerability is described with a CVSSv3 base score of 7.5 (HIGH), with network attack vector, no us...

CVE-2017-13189

CVE-2017-13189 concerns Android's media framework (libavc) and a memory-allocation failure in dec_hdl handling. Affected Android versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. The CVSS indicates HIGH severity with network access and no user interaction. The description notes a DoS impact; no details on s...

CVE-2017-13191

The CVE-2017-13191 issue affects Android Media Framework (component: ihevcd_decode in ihevcd_decode.c). It describes an infinite loop caused by an incomplete frame error, enabling remote DoS of a critical system process without extra privileges or user interaction. Affected versions per the docum...

CVE-2017-13242

CVE-2017-13242 affects Android Bluetooth System and is documented as an information disclosure vulnerability. Connected sources indicate an impact on Android versions 6.0 through 8.1 and list this CVE under the System component with a Moderate impact in Android Pixel/Nexus security bulletins; pat...

CVE-2017-13243

CVE-2017-13243 affects Android System UI (Android 5.1.1 through 8.0). The root cause described in public materials is that FLAG_SECURE was not used to protect sensitive screens, enabling information disclosure to other apps with screen-capture permissions. The issue was acknowledged in Google’s P...

CVE-2017-13278

CVE-2017-13278 affects Android’s MediaPlayerService::Client::notify in MediaPlayerService.cpp, with a use-after-free that can allow local elevation of privilege without extra execution privileges. Impacted Android versions: 6.0–8.1 (6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1). Description notes no u...

CVE-2017-14885

CVE-2017-14885 affects WLAN components in Android for MSM/CAF stacks (wma_unified_link_peer_stats_event_handler). The issue arises because the function validates only the first peer_stats->num_rates against WMA_SVC_MSG_MAX_SIZE, not the sum of all peer_stats->num_rates (num_rates). As a res...

CVE-2017-14888

Summary of CVE-2017-14888 : A heap buffer overflow in the Qualcomm WLAN Host component embedded in Android CAF builds (Linux kernel) occurs when userspace passes Information Elements (IEs) to the host driver and multiple append commands cause the length variable to overflow, leading to unsafe mem...

CVE-2017-15821

CVE-2017-15821 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels. The issue is in the function wma_p2p_noa_event_handler(), where there is no bound check on a value from firmware, potentially causing a buffer overwrite. This description explicitly names t...

CVE-2017-15835

CVE-2017-15835 affects Android variants (Android for MSM, Firefox OS for MSM, QRD Android) built on CAF with the Linux kernel. The issue lies in how the RIC Data Descriptor IE is processed in an artificially crafted 802.11 frame where the IE length exceeds 255, which may trigger an infinite loop ...

CVE-2017-15856

CVE-2017-15856 affects Android releases from CAF using the Linux kernel, due to a race condition when processing the power_stats debug file that can cause a double-free. This yields elevation of privilege on local access. The issue involves the Qualcomm power_stats debugfs node; patches tied to t...

CVE-2017-17767

CVE-2017-17767 affects Qualcomm Media framework on Android CAF builds using the Linux kernel. The underlying issue is a use-after-free in the IL client where an OMX Video Encoder Component buffer is freed and then subsequently accessed, enabling Elevation of Privilege by a local attacker. Affecte...

CVE-2017-18169

Technical details about CVE-2017-18169 (affected products, root cause, impact, fixes) are not provided in the connected documents; sources only note a kernel denial-of-service in ashmem during cache maintenance. Monitor for updates.

CVE-2017-18657

CVE-2017-18657 concerns Samsung mobile devices running M(6.0)/N(7.x) software. The issue is an arbitrary write in a trustlet (Samsung ID SVE-2017-8893). Connected documents (Red Hat, NVD/NVD mirror, CVE lists) corroborate the same root cause description, with no publicly detailed exploit or affec...

CVE-2017-18660

CVE-2017-18660 affects Samsung mobile devices running M(6.0) and N(7.x). The root cause is a buffer overflow in tlc_server, identified with Samsung SVE-2017-8888. CVSS v3.1 base score 9.8 (CRITICAL) with NETWORK attack vector, no privileges required, no user interaction, and impacts to confidenti...

CVE-2017-18688

CVE-2017-18688 affects Samsung mobile devices running L(5.1), M(6.0), and N(7.0). The issue is an information disclosure through reading memory locations outside a buffer via the device node /dev/dsm_ctrl_dev. Connected Red Hat/other records repeat this description and map it to Samsung ID SVE-20...

CVE-2017-7373

CVE-2017-7373 affects Android CAF builds using the Linux kernel display/video driver, describing a double‑free flaw. The Android bulletin attributes EoP potential to this issue and notes patches in the 2017-06-05 security update; apply the corresponding updates to mitigate.

CVE-2017-8265

CVE-2017-8265: A race condition in the Qualcomm video driver (CAF Android builds on Linux kernel) can cause a double free. This is a local issue affecting the video subsystem with potential impact to confidentiality, integrity, and availability as per CVSS metrics, but exploitation status and exa...

CVE-2017-9685

The CVE-2017-9685 entry concerns Qualcomm WLAN driver race conditions in Android CAF builds using the Linux kernel, producing a Use-After-Free condition. Affected software is Qualcomm products with CAF Android releases, where the WLAN driver’s race condition can impact confidentiality, integrity,...

CVE-2017-9715

The CVE-2017-9715 entry describes a buffer over-read in Android for MSM, Firefox OS for MSM, QRD Android, and CAF Android releases using the Linux kernel when processing a vendor command. The underlying vulnerability is a buffer over-read (noted as an information disclosure risk) with affected co...

CVE-2017-9723

CVE-2017-9723 affects the synaptics_dsx touchscreen driver used in Android for MSM, Firefox OS for MSM, and QRD Android prior to 2017-06-05. The issue arises because a stack-allocated buffer size can be set to exceed the size of the stack, enabling a stack-based overflow. The connected documents ...

CVE-2018-11842

CVE-2018-11842 describes a memory-management fault in Qualcomm CAF WLAN host driver used in Android CAF builds during WLAN association. When memory allocation fails, the driver frees memory that was not allocated, indicating a potential use-after-free/memory-corruption condition. The vulnerabilit...

CVE-2018-14066

The CVE-2018-14066 issue concerns the content://wappush content provider in com.android.provider.telephony from some Android custom ROMs, which allows SQL injection. The underlying flaw enables an application without the READ_SMS permission to read SMS messages. Affected devices include Infinix X...

CVE-2018-21038

CVE-2018-21038 concerns Samsung mobile devices running N(7.x) software, where the Secure Folder app’s startup logic permits an authentication bypass. The vulnerability is tied to the Secure Folder startup sequence, enabling bypass of authentication for affected devices (Samsung ID SVE-2018-11628)...

CVE-2018-21043

Summary: CVE-2018-21043 affects Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810) where a information disclosure vulnerability exists in the kernel pointer handling within the g2d_drv driver caused by logging. Affected software/hardware (documented): Samsung mobile devices running O(8.x...