CVE-2016-6736

CVE-2016-6736 is an elevation-of-privilege vulnerability in the NVIDIA GPU driver on Android, allowing a local malicious app to run code in the kernel context. Affected: Android devices with the NVIDIA GPU driver prior to the 2016-11-05 patch; impact is rated Critical (potential local permanent d...

CVE-2016-6788

CVE-2016-6788 is a local elevation-of-privilege in the MediaTek I2C driver for Android, enabling a malicious local app to execute code in the kernel context. Root cause: MediaTek I2C driver vulnerability; affected component/file: I2C driver. Impact: arbitrary kernel code execution with high sever...

CVE-2017-0425

Technical details about CVE-2017-0425 are not publicly provided in the connected documents. The materials confirm a moderate information-disclosure issue in Android Audioserver but lack specifics on affected builds, exploit vectors, or fixes.

CVE-2017-0552

CVE-2017-0552 affects Android Mediaserver (libavc). A remote attacker could craft a file to trigger a denial of service, causing a device hang or reboot. Affected Android versions: 6.0, 6.0.1, 7.0, 7.1.1. The initial description and connected sources identify the issue as a remote DoS in Mediaser...

CVE-2017-0578

CVE-2017-0578 is an elevation of privilege in the Android DTS sound driver that could allow a local malicious application to execute arbitrary code in the kernel. Affected component: Android with the DTS sound driver. Root cause: privilege escalation within the driver enabling code execution in k...

CVE-2017-0702

CVE-2017-0702 is a remote code execution vulnerability in Android System UI (Android 7.1.1/7.1.2). Connected CNVD-2017-21551 and NVD records describe a System UI RCE affecting these versions. Public exploit details are not provided in the documents. Android bulletin guidance indicates applying th...

CVE-2017-0713

CVE-2017-0713 is a remote code execution vulnerability in the Android libraries sfntly. Affected products/versions from the initial entry: Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Connected CNVD-2017-23414 confirms the issue as an Android sfntly remote code execution vulnerabil...

CVE-2017-0746

CVE-2017-0746 is a privilege-escalation in the Qualcomm IPA driver within the Android kernel. The vulnerability affects Android before patched releases (Android 7.1.2 and earlier per CNVD-2017-23419), with a remote attacker able to exploit to gain privileges. Patches were released as part of the ...

CVE-2017-0793

CVE-2017-0793 is an information-disclosure vulnerability in Android’s Imgtk memory subsystem within the Android kernel. Affected: Android (Imgtk/memory subsystem). Impact: potential unauthorized access to data (confidentiality impact HIGH per CVSS). Exploitation details are not provided in the co...

CVE-2017-0865

CVE-2017-0865 is an elevation of privilege in the MediaTek SoC driver within Android kernel. The issue is categorized as EoP in the MediaTek SoC driver component; details across connected records confirm the affected element is the MediaTek SoC driver on Android devices (Pixel/Nexus context cited...

CVE-2017-0879

CVE-2017-0879 is an information disclosure vulnerability in the Android Media framework affecting Pixel/Nexus devices. The Android Bulletin (Dec 2017) places this issue under the Media framework with a Moderate severity and lists affected AOSP updates up to 8.0, specifically noting updated AOSP v...

CVE-2017-10996

CVE-2017-10996 affects Qualcomm devices running CAF Android builds that use the Linux kernel. The vulnerability is an out-of-bounds access in c_show() caused by compat_hwcap_str[] not being NULL-terminated. The issue could cause device crashes/reboots (memory violation/out-of-bounds access). The ...

CVE-2017-11006

CVE-2017-11006 is a Use-After-Free vulnerability in Android for MSM, Firefox OS for MSM, and QRD Android (CAF Linux kernel lineage) during positioning. The connected NVD entry confirms the issue and classifies it as high-severity with CVSS v3.0 base score 9.8 (Network, No user interaction, privil...

CVE-2017-11056

CVE-2017-11056 affects Android variants using CAF Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The issue arises during SHA and cipher operations when a userspace buffer is directly accessed from kernel space, potentially triggering a page fault. The description confirms the ro...

CVE-2017-11066

CVE-2017-11066 affects Android on MSM platforms (Android for MSM, Firefox OS for MSM, QRD Android) with CAF Linux kernel; during ubi image flashing, an uninitialized memory region could be accessed. Connected records corroborate this description. The provided documents do not include explicit exp...

CVE-2017-11090

CVE-2017-11090 involves a buffer overread in the WLAN PMKID handling path (__wlan_hdd_cfg80211_set_pmksa) when a PMKID shorter than WLAN_PMKID_LEN is provided. Affected platforms include Android for MSM, Firefox OS for MSM, QRD Android, and CAF-based Android builds using the Linux kernel. The roo...

CVE-2017-13154

CVE-2017-13154 is an elevation-of-privilege vulnerability in Android’s media framework (libstagefright) affecting Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0. The issue is documented across multiple sources (NVD, CVE lists, Android Pixel/Nexus bulletin) and is categorized as Eo...

CVE-2017-13159

CVE-2017-13159 is an information-disclosure flaw in Android’s activitymanagerservice. The Android Security Bulletin (Dec 2017) lists it under the System component with bug ID A-32879772 and affected Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0. Patch levels 2017-12-01 and 2017-1...

CVE-2017-13181

CVE-2017-13181: A double-free vulnerability in MtpServer (doGetThumb/getThumbnail) could allow local elevation of privilege in Android. A freed pointer is not NULL’d, enabling code execution in a privileged process with no extra privileges required; exploitation is local and does not require user...

CVE-2017-13210

CVE-2017-13210 affects Android’s CameraDeviceClient.cpp, where an out-of-bounds write occurs in submitRequestList if metadataSize is too small. This can enable local elevation of privilege and code execution in a privileged process without extra privileges or user interaction. Affected Android ve...

CVE-2017-13232

CVE-2017-13232 affects Android audioserver and is caused by an out-of-bounds write in a log statement using %s with a non-NULL-terminated array, leading to local information disclosure without requiring user interaction or extra privileges. Affected Android versions per the CVE entry: 5.1.1, 6.0,...

CVE-2017-13259

CVE-2017-13259 affects Android devices. The vulnerability arises from out-of-bounds reads in sdp_discovery.cc due to missing bounds checks, potentially enabling remote information disclosure without privileges or user interaction. Affected Android versions include 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7...

CVE-2017-13278

CVE-2017-13278 affects Android’s MediaPlayerService::Client::notify in MediaPlayerService.cpp, with a use-after-free that can allow local elevation of privilege without extra execution privileges. Impacted Android versions: 6.0–8.1 (6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1). Description notes no u...

CVE-2017-14876

The CVE-2017-14876 vulnerability affects Android for MSM, Firefox OS for MSM, and QRD Android prior to 2017-06-21. The root cause is a lack of bounds checking on params->entries[i].vfe_intf in msm_ispif_config_stereo(), which can lead to a kernel out-of-bounds write. Exploitation status is not...

CVE-2017-14908

CVE-2017-14908 concerns the SafeSwitch test application on Android for MSM/CAF Linux builds (including Qualcomm components) not properly validating the number of blocks. Connected sources confirm the issue affects Android stacks (CAF Linux kernel-based builds) and can involve Qualcomm closed-sour...

CVE-2017-15823

The CVE-2017-15823 entry affects Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-11, where spectral_create_samp_msg() may mishandle firmware values, potentially causing a buffer overflow. The description notes improper validation of firmware values as the root cause. No exploi...

CVE-2017-15835

CVE-2017-15835 affects Android variants (Android for MSM, Firefox OS for MSM, QRD Android) built on CAF with the Linux kernel. The issue lies in how the RIC Data Descriptor IE is processed in an artificially crafted 802.11 frame where the IE length exceeds 255, which may trigger an infinite loop ...

CVE-2017-17766

CVE-2017-17766 affects Android/Qualcomm wireless components (MSM stack) and is caused by insufficient validation of num_peers received from firmware, enabling an integer overflow in the buffer allocation size and potentially leading to a buffer overflow. Affected products include Android for MSM,...

CVE-2017-18065

CVE-2017-18065 corresponds to a Qualcomm Wma component Elevation of Privilege vulnerability in Android for MSM/CAFLinux-based builds. The issue arises from improper input validation of vent->vdev_id in wma_action_frame_filter_mac_event_handler(), which is sourced from firmware, allowing arbitr...

CVE-2017-18656

CVE-2017-18656 describes a buffer over-read in a trustlet on Samsung mobile devices running M(6.0) and N(7.x). Affected component is the trustlet; root cause is a buffer over-read. The issue has been reported across multiple sources (NVD, Red Hat CVE page, CVE records) with the Samsung ID SVE-201...

CVE-2017-18663

CVE-2017-18663 affects Samsung mobile devices running N(7.x). Root cause: missing Intent exception handling causes a NullPointerException in system_server, potentially crashing a system process. Samsung identifiers: SVE-2017-9122, SVE-2017-9123, SVE-2017-9124, SVE-2017-9126 (July 2017). Connected...

CVE-2017-18678

CVE-2017-18678 affects Samsung mobile devices running KK(4.4) to N(7.x). The issue allows an attacker to crash system processes via a Serializable object due to missing exception handling. Reported Samsung internal identifiers are SVE-2017-8109, SVE-2017-8110, SVE-2017-8115, SVE-2017-8118, and SV...

CVE-2017-18683

Technical details of CVE-2017-18683 are not publicly available in the provided documents. The entries reference Samsung devices and SVoice behavior but do not specify affected components, root cause, impact, or remediation. Monitor for updates.

CVE-2017-18696

CVE-2017-18696 affects Samsung mobile devices running M(6.0) and N(7.0) on Exynos7420, Exynos8890 or MSM8996 chipsets. Affected component is unspecified in the provided documents, but the issue is described as a memory corruption vulnerability tied to RKP (Samsung’s kernel protection feature). Im...

CVE-2017-6282

CVE-2017-6282 affects the NVIDIA Tegra kernel driver (NVMAP) where an attacker can write an arbitrary value to an arbitrary location, potentially causing privilege escalation. Documents confirm the vulnerability in the Tegra kernel driver and NVMAP component, with CVSS v3.0 scores (9.3 base, high...

CVE-2017-6290

CVE-2017-6290 affects NVIDIA TLK TrustZone in Tegra on SHIELD TV. It describes a potential local escalation of privilege via an out-of-bounds write caused by an integer overflow, with no user interaction required. NVIDIA’s bulletin redirects to Android patching: affected SHIELD TV platforms requi...

CVE-2017-7373

CVE-2017-7373 affects Android CAF builds using the Linux kernel display/video driver, describing a double‑free flaw. The Android bulletin attributes EoP potential to this issue and notes patches in the 2017-06-05 security update; apply the corresponding updates to mitigate.

CVE-2017-8265

CVE-2017-8265: A race condition in the Qualcomm video driver (CAF Android builds on Linux kernel) can cause a double free. This is a local issue affecting the video subsystem with potential impact to confidentiality, integrity, and availability as per CVSS metrics, but exploitation status and exa...

CVE-2017-9692

CVE-2017-9692 is tracked in multiple sources with a concrete reference to the Graphics driver in Google device updates, listing DoS (local) as the vulnerability type. The issue is described as a NULL pointer dereference that can occur when an atomic commit is issued on a writeback panel with a NU...

CVE-2018-11263

CVE-2018-11263 concerns CAF-derived Android WLAN code in the Linux kernel used on Android for MSM, Firefox OS for MSM, and QRD Android. The issue arises when the radio_id received from the FW is greater than or equal to the maximum, allowing an out-of-bounds write while copying radio stats. The v...

CVE-2018-11276

CVE-2018-11276 is a kernel-level vulnerability in the CAF Qualcomm Linux kernel used by Android for MSM, Firefox OS for MSM, and QRD Android. The issue is a double free of memory during driver probe failure, where memory allocated is freed twice, risking kernel instability or a crash. Documented ...

CVE-2018-11293

CVE-2018-11293 affects Qualcomm WLAN Host in Android variants built on CAF Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The issue arises in wma_ndp_confirm_event_handler and wma_ndp_indication_event_handler where ndp_cfg_len and num_ndp_app_info are taken from firmware without...

CVE-2018-11964

CVE-2018-11964 affects Android builds (Android for MSM, Firefox OS for MSM, QRD Android) using CAF Linux kernels. Root cause: exposure of hashed content in /etc/passwd, enabling a local attacker to access credentials and potentially escalate privileges; impact described as complete confidentialit...

CVE-2018-11965

Technical details about CVE-2018-11965 are not publicly provided in the connected documents. Available entries repeat the vulnerability description without concrete affected products, versions, root cause, or fixes. Monitor for updates from official advisories.

CVE-2018-14066

The CVE-2018-14066 issue concerns the content://wappush content provider in com.android.provider.telephony from some Android custom ROMs, which allows SQL injection. The underlying flaw enables an application without the READ_SMS permission to read SMS messages. Affected devices include Infinix X...

CVE-2018-21064

The CVE-2018-21064 entry concerns Samsung mobile devices running N(7.x)/O(8.x) software, where an array overflow exists in a driver’s input booster (Samsung SVE-2017-11816). The issue is documented across multiple feeds, with high-severity metrics (CVSS v3.1 base score 9.8, impact on confidential...

CVE-2018-21073

The CVE-2018-21073 entry affects Samsung mobile devices running N(7.x) and O(8.0) on Galaxy S9+/S9/S8+/S8/Note 8. The root issue is access to clipboard content in the locked state via the Edge panel, enabling potential information disclosure without unlocking the device. If present in connected d...

CVE-2018-21076

CVE-2018-21076 concerns Samsung mobile devices with N(7.x) Exynos8890/8895 SoCs, where a modified trustlet in the Secure Driver can disclose a KASLR offset. The core issue is information disclosure rather than code execution, with a local access vector implied by the need to interact with the Sec...

CVE-2018-21089

CVE-2018-21089 affects Samsung mobile devices running N(7.x) on MT6755/MT6757 Mediatek chipsets. The root cause is an integer overflow in the bootloader related to the download offset control, enabling arbitrary code execution. The entry notes a Samsung ID SVE-2017-10732 (Jan 2018). Impact is des...

CVE-2018-5904

CVE-2018-5904 describes a use-after-free vulnerability in the LPM status driver within CAF Linux kernel branches used by Android for MSM, Firefox OS for MSM, and QRD Android. The flaw arises during list traversal for cleanup, enabling a local attacker to potentially exploit the condition. The NVD...