CVE-2016-3826

The CVE-2016-3826 advisory affects Android’s Mediaserver component, specifically the AudioFlinger path (services/audioflinger/Effects.cpp). The root cause is that the reply size for an AudioFlinger effect command is not validated, enabling a crafted application to escalate privileges within the d...

CVE-2016-3836

CVE-2016-3836 affects the Android SurfaceFlinger service. It is exploitable on Android 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-08-01, allowing a crafted application to disclose sensitive information. The root cause noted is a lack of a default constructor in include/ui/F...

CVE-2016-3838

CVE-2016-3838 affects Android 6.x prior to 2016-08-01. The issue is a denial-of-service in which a crafted application using the app-pinning feature can cause loss of the locked-screen 911 functionality (internal bug 28761672). Connected sources corroborate the vulnerability as described in CVE r...

CVE-2016-3877

Technical details about CVE-2016-3877 are not provided in the supplied documents; no affected products, root cause, or fixes are described. Monitor for updates.

CVE-2016-3881

CVE-2016-3881 affects libvpx in mediaserver (Android) where the decoder_peek_si_internal function in vp9/vp9_dx_iface.c can trigger a denial of service via a crafted media file. Affected products/versions include Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09...

CVE-2016-3906

CVE-2016-3906 is an information-disclosure vulnerability affecting Qualcomm components in Android (GPU driver, power driver, SMSM Point-to-Point driver, and sound driver) prior to 2016-11-05. A local malicious application could access data outside its permission levels after compromising a privil...

CVE-2016-3910

CVE-2016-3910 affects Android Mediaserver’s SoundTriggerHwService.cpp in the MediaServer component. The issue allows a local attacker to gain privileges by convincing the user to run a crafted application. Affected versions include Android 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, 6.x prior to ...

CVE-2016-5347

CVE-2016-5347 describes an information-disclosure vulnerability in Qualcomm components, specifically in the CAF Android/Linux kernel audio driver. The issue allows leakage of kernel stack data to userspace via the audio driver, affecting Qualcomm-based Android devices using CAF-released kernels. ...

CVE-2016-5853

CVE-2016-5853 affects the Qualcomm Sound/Audio driver in Android CAF builds using the Linux kernel. The root cause is a sanity check: if a length value is out of the valid range, the code prints an error but continues as if the value were correct, potentially enabling unintended behavior. The CVE...

CVE-2016-5860

CVE-2016-5860 affects the Qualcomm sound/ audio driver stack on Android-based devices (Qualcomm MSM Android builds, Firefox OS for MSM, QRD Android). The issue occurs when a function is called with an excessively large length, triggering an integer overflow that leads to a heap buffer overflow. T...

CVE-2016-6676

CVE-2016-6676 is an off-by-one error in CORE/HDD/src/wlan_hdd_cfg.c of the Qualcomm Wi‑Fi driver affecting Android on Nexus 5X and Android One devices prior to 2016-10-05. The vulnerability allows a local attacker to gain privileges or cause a denial of service (buffer overflow) by a crafted appl...

CVE-2016-6677

CVE-2016-6677 is an information-disclosure flaw in the NVIDIA GPU driver on Nexus 9 devices running Android prior to 2016-10-05. A crafted application can cause the driver to leak sensitive data. The connected NVIDIA/Android entries corroborate this as an information-disclosure issue tied to the ...

CVE-2016-6688

CVE-2016-6688 is an information-disclosure vulnerability in the NVIDIA profiler on Nexus 9 devices (Android, pre-2016-10-05). The issue could allow a local malicious application to access sensitive data outside its permissions. The vulnerability is listed with patch status indicating that the pat...

CVE-2016-6730

CVE-2016-6730 describes an elevation-of-privilege vulnerability in the NVIDIA GPU driver for Android, where a local malicious app could execute arbitrary code in the kernel. The issue is rated Critical due to potential permanent device compromise. Affected software is the NVIDIA GPU driver on And...

CVE-2016-8418

CVE-2016-8418 is a Critical remote code execution vulnerability in the Qualcomm crypto driver on Android, allowing an attacker to run arbitrary code in the kernel context. The 2017-02-05 Android bulletin documents the issue (references include A-32652894 and QC-CR#1077457) and indicates a patch w...

CVE-2017-0401

CVE-2017-0401 is an information-disclosure vulnerability in the Qualcomm audio post-processor path (lvm/wrapper/Bundle/EffectBundle.cpp in libeffects). A locally running malicious application could access data outside its permissions on Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. T...

CVE-2017-0487

CVE-2017-0487 describes a denial-of-service vulnerability in Android’s Mediaserver. A specially crafted media file could cause a device hang or reboot, impacting Android 6.0/6.0.1/7.0/7.1.1. The vulnerability is exposed via Mediaserver’s media processing path and is classified with higher risk du...

CVE-2017-0545

CVE-2017-0545 describes an elevation-of-privilege weakness in Android’s Audioserver that could let a local malicious app run arbitrary code within a privileged process. The linked sources list affected Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1, and categorize the issue as High imp...

CVE-2017-0636

CVE-2017-0636 is an elevation of privilege in the MediaTek command queue driver on Android, enabling a local attacker to execute arbitrary code in the kernel context. Affected component: MediaTek command queue driver (MediaTek components in the 2017-06 Android bulletin). Root cause: vulnerability...

CVE-2017-0696

CVE-2017-0696 is described as a denial-of-service vulnerability in the Android media framework affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID A-37207120). The connected documents confirm the affected component as the Android media framework, but do not provide a detailed root cau...

CVE-2017-0736

CVE-2017-0736 affects Android’s media framework libavc and is a DoS vulnerability in the component used for multimedia. Affected products/versions include Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The available connected sources describe the issue as a denial of service without detailing the exa...

CVE-2017-0742

CVE-2017-0742 is an Elevation of Privilege vulnerability in the MediaTek Video driver used by Android kernel. The issue affects Android devices with MediaTek video components and could allow a local attacker to execute arbitrary code within a privileged context (EoP). Public detail across connect...

CVE-2017-0805

CVE-2017-0805 is an elevation-of-privilege vulnerability in the Android media framework (libstagefright) affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0–6.0.1, 7.0, 7.1.1, 7.1.2. The issue allows local attackers to gain high privileges within a privileged process through media handling, as in...

CVE-2017-0808

CVE-2017-0808 is an information-disclosure vulnerability in the Android framework file system affecting Android 7.0, 7.1.1, 7.1.2 and 8.0 (Android ID A-62301183). The issue is documented across multiple sources; the core detail is unauthorized access to sensitive information via the framework fil...

CVE-2017-0850

The CVE-2017-0850 entry affects Android’s media framework (libstagefright) and is an information-disclosure vulnerability in Android 7.0, 7.1.1, and 7.1.2. The issue is documented in the Pixel/Nexus security bulletin under the Media framework section with Android IDs and notes that a patch level ...

CVE-2017-0864

CVE-2017-0864 is an elevation-of-privilege vulnerability in MediaTek ioctl (flashlight) exposed on Android kernels. Connected sources confirm the issue affects MediaTek ioctl flashlight within the Android kernel, enabling an attacker to gain elevated privileges. The CNVD entry explicitly describe...

CVE-2017-0869

CAVEAT: CVE-2017-0869 is tied to the NVIDIA driver. The vulnerability is described as an integer overflow in the driver that can lead to a use-after-free and a potential elevation of privilege enabling code execution as a privileged process. Affected component: NVIDIA driver (Android context). Im...

CVE-2017-0879

CVE-2017-0879 is an information disclosure vulnerability in the Android Media framework affecting Pixel/Nexus devices. The Android Bulletin (Dec 2017) places this issue under the Media framework with a Moderate severity and lists affected AOSP updates up to 8.0, specifically noting updated AOSP v...

CVE-2017-11012

The CVE-2017-11012 issue is described across multiple sources as a stack-based buffer overflow in Qualcomm WLAN components used by Android on MSM platforms, triggered by processing a specially crafted QCA_NL80211_VENDOR_SUBCMD_ENCRYPTION_TEST cfg80211 vendor command. Connected CNVD entry attribut...

CVE-2017-11024

CVE-2017-11024 describes a race condition in the rmnet USB control driver within Android/CAF Linux-kernel based builds on MSM platforms, which can lead to a Use-After-Free condition. Affected: Android MSM, Firefox OS for MSM, and QRD Android releases using CAF Linux kernel. Impact is described as...

CVE-2017-11075

CVE-2017-11075 concerns a use-after-free in wdsp_glink_write() when cmd_pkt and reg_pkt are invoked from different userspace threads on Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds prior to the CAF kernel patch level 2018-04-05. Affected components include the Audio DSP dr...

CVE-2017-13154

CVE-2017-13154 is an elevation-of-privilege vulnerability in Android’s media framework (libstagefright) affecting Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0. The issue is documented across multiple sources (NVD, CVE lists, Android Pixel/Nexus bulletin) and is categorized as Eo...

CVE-2017-13172

CVE-2017-13172 is a local, Elevation of Privilege vulnerability in the MediaTek Bluetooth driver used by Android kernels. The issue affects the Bluetooth subsystem of MediaTek components and enables privilege escalation without requiring user interaction; CVSSv3 base score 7.8 (HIGH). The NVD ent...

CVE-2017-13229

CVE-2017-13229 is a remote code execution vulnerability in the Android media framework affecting Android 7.0–8.1 (Pixel/Nexus). The Pixel security bulletin lists it as RCE in the Media framework with a patch level of 2018-02-05 to address it; no exploit details are provided in the available docum...

CVE-2017-13233

CVE-2017-13233 affects the Android-era libhevc decoder: the function ihevcd_ctb_boundary_strength_pbslice can exhaust resources, causing a remote temporary denial of service. Exploitation requires user interaction and can impact affected Android versions (5.1.1–8.1). The issue is tied to libhevc’...

CVE-2017-13268

The CVE-2017-13268 entry corresponds to an Information Disclosure in the Android system Bluetooth stack. Affected Android versions include 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. The issue is categorized as a System vulnerability with Moderate severity in the Pixel/Android bulletin. P...

CVE-2017-13288

CVE-2017-13288 affects Android 8.0 and 8.1, with a vulnerability in writeToParcel/readFromParcel of the PeriodicAdvertisingReport.java file caused by a 64/32-bit int mismatch. This leads to a permission bypass and potential local elevation of privilege by starting an activity with system privileg...

CVE-2017-14898

CVE-2017-14898 affects Qualcomm WLAN in Android builds (Android for MSM, CAF/Linux kernel). The issue is a buffer overrun in QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE handling when QCA_WLAN_VENDOR_ATTR_TXPOWER_SCALE is less than 1 byte. Impact per sources includes high confidentiality, integrit...

CVE-2017-14902

CVE-2017-14902 describes a race condition in the GLink kernel driver across Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels. The vulnerability is a Use-After-Free in the GLink driver that can potentially allow a local attacker to compromise the device (as indic...

CVE-2017-14918

CVE-2017-14918 is documented in multiple sources as a Use-After-Free vulnerability affecting Android on MSM platforms, specifically in the GPS location wireless interface. In the Qualcomm closed-source components section, it is listed with High severity for a closed-source component. The Connecte...

CVE-2017-17764

CVE-2017-17764 describes an integer overflow in the firmware-driven buffer-size calculation inside Qualcomm WLAN’s wma_rx_aggr_failure_event_handler() for CAF Android/Linux-kernel builds. The flaw can allow a crafted failure-info value to cause a buffer overflow, enabling local elevation of privi...

CVE-2017-18147

CVE-2017-18147 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds from CAF using the Linux kernel prior to the 2018-04-05 patch level. In MMCP, a downlink message is not properly validated, enabling potential network-based impact without authentication. CVSS metrics indi...

CVE-2017-18672

CVE-2017-18672 affects Samsung mobile devices running Lollipop (5.0/5.1), Marshmallow (6.0), and Nougat (7.x). The issue arises from incorrect exception handling for Intents in framework.jar, allowing a local attacker to force a reboot. References across multiple feeds corroborate the same vulner...

CVE-2017-18673

CVE-2017-18673 affects Samsung mobile devices running N(7.x) software. The issue allows an attacker to disable the Location service on a locked device, preventing the rightful owner from locating a stolen device. The Samsung ID is SVE-2017-8524 (May 2017). Public documents do not provide details ...

CVE-2017-18676

CVE-2017-18676 affects Samsung mobile devices running Android N (7.0) on Qualcomm chipsets and is described as an RKP kernel protection bypass caused by a lack of MSR trapping, enabling potential unwanted memory mappings. The issue is tied to Samsung ID SVE-2016-7901 (April 2017). Connected docum...

CVE-2017-7367

CVE-2017-7367 concerns an integer underflow in the boot image processing path on Android CAF builds using the Linux kernel. The available connected documents identify this as a DoS-type issue (bootloader component) with a high-severity impact profile. The exact affected products, versions, and fi...

CVE-2017-8263

CVE-2017-8263 affects Qualcomm components in Android CAF builds that use the Linux kernel. The issue is a kernel fault triggered by certain operations on a read-only user-space virtual address, with a high impact (local, high confidentiality/integrity/availability implications). Exploitation deta...

CVE-2017-9676

CVE-2017-9676 affects the Qualcomm File System in Qualcomm devices running CAF Android builds on the Linux kernel. The underlying issue is use-after-free scenarios and race conditions when accessing global static variables without proper locking. Public references in the connected documents ident...

CVE-2017-9679

CVE-2017-9679 affects Qualcomm products with Android CAF/Linux kernel. The issue arises when a userspace string is not NULL-terminated, allowing kernel memory contents to leak to system logs. This constitutes an information disclosure risk (partial confidentiality impact) as described in the vuln...

CVE-2017-9690

CVE-2017-9690 affects Qualcomm QBT1000 driver in Android devices (MSM/Linux kernel) via the qbt1000 ioctl handler. The vulnerability arises from an incorrect buffer size check that allows an integer overflow, which can lead to a buffer overflow and local elevation of privileges (EoP) within a pri...