CVE-2018-11276

CVE-2018-11276 is a kernel-level vulnerability in the CAF Qualcomm Linux kernel used by Android for MSM, Firefox OS for MSM, and QRD Android. The issue is a double free of memory during driver probe failure, where memory allocated is freed twice, risking kernel instability or a crash. Documented ...

CVE-2018-11293

CVE-2018-11293 affects Qualcomm WLAN Host in Android variants built on CAF Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The issue arises in wma_ndp_confirm_event_handler and wma_ndp_indication_event_handler where ndp_cfg_len and num_ndp_app_info are taken from firmware without...

CVE-2018-11946

The CVE-2018-11946 entry concerns CAF-derived Android/Linux builds (Android for MSM, Firefox OS for MSM, QRD Android). The vulnerability is that the UPnP daemon may be running out of the box, enabling port forwarding without authentication. Documented impacts indicate potential exposure due to un...

CVE-2018-11964

CVE-2018-11964 affects Android builds (Android for MSM, Firefox OS for MSM, QRD Android) using CAF Linux kernels. Root cause: exposure of hashed content in /etc/passwd, enabling a local attacker to access credentials and potentially escalate privileges; impact described as complete confidentialit...

CVE-2018-12011

Technical details about CVE-2018-12011 are not provided in the supplied documents; no exposed affected products, versions, or remediation are specified here. Monitor for updates.

CVE-2018-21074

CVE-2018-21074 affects Samsung mobile devices running M(6.x) software on Exynos or Qualcomm chipsets. The issue is information disclosure from a Trustlet via the debug log. The available documents do not specify affected device models, versions, or the exact root cause details beyond the trustlet...

CVE-2018-3570

CVE-2018-3570 refers to a vulnerability in the cpuidle driver used by CAF Android builds (Android for MSM, Firefox OS for MSM, QRD Android) that rely on the Linux kernel. The issue arises from incorrect use of the list_for_each macro, which could lead to an untrusted pointer dereference. Connecte...

CVE-2018-3586

CVE-2018-3586 describes an integer overflow that can overflow to a buffer overflow in the ADSPRPC heap manager used by CAF Qualcomm components on Android (Android for MSM, Firefox OS for MSM, QRD Android) running the Linux kernel. Affected: Qualcomm ADSPRPC heap manager within CAF Android builds....

CVE-2018-5825

CVE-2018-5825 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds with CAF Linux kernels prior to the 2018-04-05 patch level. The kernel IPA driver contains a Use-After-Free condition in the IPA subsystem, as described in the NVD record. The vulnerability is rated with CV...

CVE-2018-9369

CVE-2018-9369 describes a local elevation-of-privilege in the bootloader where a fastboot command allows a user to pass kernel command line arguments. The root cause is the bootloader’s handling of user-supplied kernel parameters, enabling a local attacker to gain higher privileges without additi...

CVE-2018-9452

CVE-2018-9452 affects the Android Framework, tied to getOffsetForHorizontal in Layout.java, causing a possible application hang/DoS from wide inputs with hidden Unicode characters. The issue affects Android 7.0–9.0 and requires user interaction for exploitation; patches were issued for the 2018-1...

CVE-2018-9480

CVE-2018-9480 describes an out-of-bounds read in bta_hd_get_report_act (bta_hd_act.cc) that could enable remote information disclosure via the Bluetooth service without user interaction. The issue stems from improper input validation. Documented details appear in NVD/Red Hat entries and the Andro...

CVE-2018-9506

CVE-2018-9506: In avrc_msg_cback of avrc_api.cc there is an out-of-bounds read due to a missing bounds check, enabling remote information disclosure over Bluetooth with no extra privileges. Affected: Android versions listed in the NVD entry (7.0–9.0). The connected documents confirm the root caus...

CVE-2018-9513

CVE-2018-9513 describes a local privilege escalation in the Android kernel due to a memory corruption issue from a double free in the copy_process path of fork.c. The vulnerability allows a local attacker to escalate privileges without user interaction, by exploiting a double release/memory corru...

CVE-2018-9522

CVE-2018-9522 refers to an elevation of privilege vulnerability in Android 9 where the serialization functions of StatsLogEventWrapper.java can trigger an out-of-bounds write due to unnecessary functionality. The issue enables local privilege escalation in a privileged system process without extr...

CVE-2018-9526

CVE-2018-9526 is a Framework information-disclosure issue affecting Android 7.0–9.x (patch levels 2019-06-01/2019-06-05). The root cause is an improperly configured setting in device configuration data that could allow remote disclosure of the device location without user interaction. The Android...

CVE-2018-9528

CVE-2018-9528 affects ixheaacd_over_lap_add1_armv8: in ixheaacd_overlap_add1.s, a missing bounds check allows an out-of-bounds write. This could enable remote code execution on Android 9 (Android-9) with user interaction required for exploitation. The vulnerability is tied to the ixheaacd compone...

CVE-2018-9559

CVE-2018-9559: In persist_set_key and related cryptfs.cpp functions, there is an out-of-bounds write caused by an uncaught error, enabling local elevation of privilege without user interaction on Android 7.0–9. No exploitation details are provided. The Android Security Bulletin indicates patches ...

CVE-2018-9573

Affected software: Android 9. Root cause: out-of-bounds write in impd_parse_filt_block within impd_drc_dynamic_payload.c due to missing bounds checks. Impact: remote code execution with high severity (user interaction required; NULL/LOCAL aspects per CVE). Exploitability: explicit exploitation de...

CVE-2018-9587

CVE-2018-9587 affects Android 7.0–9 (Android-7.0, -7.1.1, -7.1.2, -8.0, -8.1, -9). In ContactPhotoUtils.java (savePhotoFromUriToUri), a confused deputy scenario could allow unauthorized access to files in the Contacts app, enabling local elevation of privilege. The vulnerability is local (attack ...

CVE-2019-20532

CVE-2019-20532 affects Samsung mobile devices running O(8.x), P(9.0) and Q(10.0). The issue allows attackers to access Developer options without authentication, linked to Samsung’s SVE-2019-15800 identifier. The connected documents corroborate the symptom but do not provide concrete remediation d...

CVE-2019-20561

CVE-2019-20561 refers to a vulnerability in Samsung mobile devices with N(7.x), O(8.x), and P(9.0) Exynos chipsets where the bootloader contains an integer signedness error (Samsung ID SVE-2019-15230). Public documents across NVD and Red Hat cite the same issue; no product-specific exploit detail...

CVE-2019-20571

The CVE-2019-20571 entry describes a type confusion vulnerability in the WVDRM Trustlet on Samsung mobile devices running O(8.x) with TEEGRIS, allowing arbitrary code execution. Affected component: WVDRM Trustlet; root cause: type confusion. Impact: arbitrary code execution with high severity (pe...

CVE-2019-20617

The CVE-2019-20617 entry describes a vulnerability in Samsung mobile devices running P (9.0) software where the Secure Folder leaks preview data of recently used apps. Affected software is Samsung mobile devices with P(9.0); exact component/file, root cause, and vulnerable version details are not...

CVE-2019-2120

CVE-2019-2120 affects Android via a vulnerability in OatFileAssistant::GenerateOatFile where an insecure default value can cause file corruption, enabling local elevation of privilege with no additional privileges and without user interaction. Affected are Android 7.0 through 9 (Android-7.0, 7.1....

CVE-2019-2122

CVE-2019-2122 affects Android 7.0–9, describing a local privilege-escalation in LockTaskController.lockKeyguardIfNeeded due to a differing default-case handling between WindowManager and Settings. Impact: potential elevation of privileges with user interaction required; exploitability is local. C...

CVE-2019-2125

CVE-2019-2125 affects Android where in ChangeDefaultDialerDialog.java an overlay attack can lead to local escalation of privilege without additional privileges. The root cause is an overlay-based elevation of privilege that allows a local app to gain higher privileges with user interaction requir...

CVE-2019-2131

CVE-2019-2131 affects Android devices where an application with overlay permission can display overlays on top of the Settings UI, potentially enabling local elevation of privilege. The issue is tied to the overlay permission mechanism on versions including Android 7.0–9.x (Android-7.0, 7.1.1, 7....

CVE-2019-2159

CVE-2019-2159 affects the Android 10 libxaac library, with an out-of-bounds write due to a missing bounds check. The vulnerability could allow remote code execution and requires user interaction to exploit. Exploitation details (such as vectors) are not provided in the connected documents, and a ...

CVE-2019-2164

CVE-2019-2164 affects Android 10 due to an out-of-bounds read in libxaac caused by a missing bounds check. This could disclose information without full execution privileges; exploitation requires user interaction. The Red Hat entry confirms the same description; no patch/version details are provi...

CVE-2019-2195

The CVE-2019-2195 issue affects Android, described as an input-validation flaw in tokenize of sqlite3_android.cpp that allows an attacker-controlled INSERT statement. This leads to local elevation of privilege with no additional execution privileges required and no user interaction needed. Produc...

CVE-2019-2202

CVE-2019-2202 occurs in Android’s CryptoPlugin.decrypt and describes a possible heap buffer overflow leading to local privilege escalation without user interaction. Affected software is Android 9 and Android 10 (Media/crypto plugin path). The issue is described as an out-of-bounds write in Crypto...

CVE-2019-2204

CVE-2019-2204 affects Android (Android versions 8.1 and 9). The issue is an out-of-bounds read in FindSharedFunctionInfo within objects.cc that can lead to remote code execution in pacprocessor without user interaction. This is a System component vulnerability with ATT&CK-agnostic remote code exe...

CVE-2019-2210

CVE-2019-2210 affects Android 9–10 where the qmi_vs_service.cc load_logging_config path can trigger an out-of-bounds write caused by a heap buffer overflow, enabling local privilege escalation without user interaction. Public sources (NVD/Red Hat/NVD list, Pixel bulletin) identify this as a Local...

CVE-2019-9235

CVE-2019-9235 affects Android 10 NFC functionality. The issue is an out-of-bounds read caused by a missing bounds check in NFC, enabling local information disclosure with user interaction required for exploitation. Impact is described as partial confidentiality loss with no privilege escalation. ...

CVE-2019-9256

CVE-2019-9256 is a vulnerability in Android’s libmediaextractor. The issue is an out-of-bounds write caused by an integer overflow in the MPEG4Extractor/ media handling within libmediaextractor. It could lead to remote code execution on affected Android 10 devices, with user interaction required ...

CVE-2019-9262

CVE-2019-9262 affects the MPEG4Extractor component in Android 10 media extraction. The issue is an out-of-bounds write caused by an integer overflow in MPEG4Extractor, potentially enabling remote code execution in the media extractor. Exploitation requires user interaction. Impact stated as RCE w...

CVE-2019-9282

CVE-2019-9282 affects Google’s Skia library used in Android 10. The issue is an out-of-bounds read due to a missing bounds check, enabling remote information disclosure with no execution privileges and requiring user interaction to exploit. The Android security release notes indicate fixes are pa...

CVE-2019-9285

CVE-2019-9285 describes an out-of-bounds read in Bluetooth on Android 10 due to a missing bounds check. Exploitation could lead to remote DoS without user interaction. Affected product/variant: Android 10 (Android ID: A-111215315). Public metrics: CVSSv3.1 base score 7.5 (High) with network attac...

CVE-2019-9292

CVE-2019-9292 affects Android 10’s Activity Manager service, enabling information disclosure via a confused deputy. It could allow local disclosure of the current foreground process without extra privileges, with no user interaction required. Mitigation is to run a device with Android 10 patch le...

CVE-2019-9293

CVE-2019-9293 affects Android 10, describing an out-of-bounds read in libstagefright due to a missing bounds check. This could allow remote information disclosure with no execution privileges, though exploitation requires user interaction. The vulnerability is documented across multiple sources (...

CVE-2019-9305

CVE-2019-9305 affects libAACdec in Android 10 (Android-10). The root cause is an integer overflow causing an out-of-bounds write, enabling remote code execution. Exploitation requires user interaction; no additional privileges are needed beyond the targeted device. Documented under Android 10 rel...

CVE-2019-9415

CVE-2019-9415 affects Android 10 via the libstagefright component. The issue is an information-disclosure vulnerability caused by uninitialized data, enabling remote information leakage without extra execution privileges. Exploitation requires user interaction. Public details originate from Andro...

CVE-2019-9428

CVE-2019-9428 affects the Android Framework. The issue arises from BROWSEABLE intents that can allow remote disclosure of sensitive URLs, with exploitation requiring user interaction. Affected product/version: Android 10 (Android Framework). Root cause: abuse of BROWSEABLE intents enabling inform...

CVE-2020-0038

CVE-2020-0038 affects Android devices (Android 8.0–10) due to a missing bounds check in rw_i93_sm_update_ndef of rw_i93.cc , which can cause a read of uninitialized data and lead to remote information disclosure without additional execution privileges or user interaction. The available documents ...

CVE-2020-0153

CVE-2020-0153 is an Android elevation-of-privilege issue caused by a missing bounds check in phNxpNciHal_ext.cc, specifically in phNxpNciHal_write_ext. The out-of-bounds write could grant local SYSTEM-level execution without user interaction. The vulnerability affects Android-10; exploitation sta...

CVE-2020-0156

CVE-2020-0156 affects Android 10 and points to an out-of-bounds read in the NxpNfc::ioctl path of NxpNfc.cpp caused by a missing bounds check. The issue enables local information disclosure with user privileges; exploitation does not require user interaction but is local in nature. CVSS metrics i...

CVE-2020-0175

CVE-2020-0175 affects Android 10 in the Media Framework handling path; the issue is in the XMF_ReadNode function in eas_xmf.c, where improper input validation can cause resource exhaustion leading to a remote Denial of Service with no extra privileges. Exploitation requires user interaction. Publ...

CVE-2020-0264

CVE-2020-0264 affects Android 11, specifically libstagefright. It describes a possible out-of-bounds write caused by an integer overflow in the media framework, which could enable remote code execution. Exploitation requires user interaction. The issue is documented across multiple sources and is...

CVE-2020-0271

CVE-2020-0271 affects Android 11 and is listed in Android 11 security release notes under System as an Elevation of Privilege (EoP) issue. The vulnerability arises from an insecure default value in the Settings app, enabling local escalation of privilege and tapjacking with user interaction requi...