CVE-2017-17765

CVE-2017-17765 concerns Qualcomm WLAN in Android CAF builds using the Linux kernel. The issue arises when values received from firmware are not properly validated in the function wma_get_ll_stats_ext_buf() , causing an integer overflow in buffer size calculations that can lead to a buffer overflo...

CVE-2017-17769

CVE-2017-17769 involves information leakage in the Qualcomm component (MSM audio driver; listed as qdsp6v2 in the Pixel bulletin) affecting Android for MSM and related builds. The vulnerability is an information-disclosure issue with confidentiality impact (NVD CVSS3: HIGH, base 5.5) and is categ...

CVE-2017-18056

CVE-2017-18056 affects Android for MSM, Firefox OS for MSM, and CAF Linux-kernel builds, where improper input validation for vdev_id in wma_unified_bcntx_status_event_handler() (received from firmware) can cause an out-of-bounds memory read. The issue is tied to the WLAN stack (Qualcomm component...

CVE-2017-18059

CVE-2017-18059 affects Qualcomm WLAN/WMA on Android platforms (Android for MSM, Firefox OS for MSM, QRD Android) with CAF Linux kernel. The root cause is improper input validation of the vdev id in wma_scan_event_callback() (received from firmware), which can lead to an out-of-bounds memory read....

CVE-2017-18657

CVE-2017-18657 concerns Samsung mobile devices running M(6.0)/N(7.x) software. The issue is an arbitrary write in a trustlet (Samsung ID SVE-2017-8893). Connected documents (Red Hat, NVD/NVD mirror, CVE lists) corroborate the same root cause description, with no publicly detailed exploit or affec...

CVE-2017-18660

CVE-2017-18660 affects Samsung mobile devices running M(6.0) and N(7.x). The root cause is a buffer overflow in tlc_server, identified with Samsung SVE-2017-8888. CVSS v3.1 base score 9.8 (CRITICAL) with NETWORK attack vector, no privileges required, no user interaction, and impacts to confidenti...

CVE-2017-18672

CVE-2017-18672 affects Samsung mobile devices running Lollipop (5.0/5.1), Marshmallow (6.0), and Nougat (7.x). The issue arises from incorrect exception handling for Intents in framework.jar, allowing a local attacker to force a reboot. References across multiple feeds corroborate the same vulner...

CVE-2017-18675

CVE-2017-18675 affects Samsung mobile devices on M(6.0)/N(7.x) with Exynos7420/Exynos8890. The issue is in the Camera application, which can leak uninitialized memory via the ion subsystem. The Red Hat and NVD records reiterate the same description; no additional exploit details, affected version...

CVE-2017-18687

Technical details (affected product/version, root cause, impact, or fixes) are not publicly provided in the connected documents. Monitor for updates; current sources summarize the issue but do not offer actionable specifics.

CVE-2017-18693

CVE-2017-18693 affects Samsung mobile devices running KK (4.4), L (5.0/5.1), M (6.0), and N (7.0). A buffer overflow is reported in the fps sysfs entry , with Samsung ID SVE-2016-7510 . Connected sources (Red Hat, CVE listings) corroborate the same description. The documents do not specify affect...

CVE-2017-7365

CVE-2017-7365 is a Qualcomm bootloader elevation-of-privilege issue disclosed in the Android 2017-06-05 bulletin. It is listed as EoP (High) for the Bootloader component; exploitation would yield higher privileges within the kernel/boot context. Patches are provided via Qualcomm AMSS bulletins an...

CVE-2017-8239

CVE-2017-8239 is an information-disclosure issue in the Camera driver on Android devices (Qualcomm components) listed under the 2017 Pixel/Nexus bulletin. The vulnerability is categorized as ID with moderate severity in the camera driver, with no exploitation details provided in the available doc...

CVE-2017-9686

The CVE-2017-9686 issue affects the Qualcomm SPS driver in Android environments (CAF/Linux kernel variants that include Android for MSM/CAF). Root cause is a double free/use-after-free in the SPS driver when debugfs logging is enabled. Reported impact includes local access with partial confidenti...

CVE-2017-9723

CVE-2017-9723 affects the synaptics_dsx touchscreen driver used in Android for MSM, Firefox OS for MSM, and QRD Android prior to 2017-06-05. The issue arises because a stack-allocated buffer size can be set to exceed the size of the stack, enabling a stack-based overflow. The connected documents ...

CVE-2018-11302

CVE-2018-11302 corresponds to a WLAN buffer overflow issue described in Qualcomm CAF Android variants (Android for MSM, Firefox OS for MSM, QRD Android) where input from userspace could be copied into a kernel buffer without proper validation. The CVE is listed under the Qualcomm component mappin...

CVE-2018-12011

Technical details about CVE-2018-12011 are not provided in the supplied documents; no exposed affected products, versions, or remediation are specified here. Monitor for updates.

CVE-2018-14981

CVE-2018-14981 affects LG devices running Android 6.0–8.1, where the SystemUI application’s intents grant incorrect access control. The root cause is an access-control fault in SystemUI intents, enabling bypass of security restrictions; exploitation status is not detailed in the provided document...

CVE-2018-3567

CVE-2018-3567 is a WLAN buffer overflow affecting Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds leveraging CAF on Linux kernels before 2018-04-05. The vulnerability arises in WLAN when processing HTT_T2H_MSG_TYPE_PEER_MAP or HTT_T2H_MSG_TYPE_PEER_UNMAP messages (root cause:...

CVE-2018-3582

CVE-2018-3582 is a buffer overflow in Qualcomm WLAN affecting Android Pixel/Nexus devices, stemming from improper input validation in WMA event handling. The vulnerability is classified as Elevation of Privilege (EoP) with a Medium impact in the Android/Qualcomm WLAN component. Connected sources ...

CVE-2018-9369

CVE-2018-9369 describes a local elevation-of-privilege in the bootloader where a fastboot command allows a user to pass kernel command line arguments. The root cause is the bootloader’s handling of user-supplied kernel parameters, enabling a local attacker to gain higher privileges without additi...

CVE-2018-9480

CVE-2018-9480 describes an out-of-bounds read in bta_hd_get_report_act (bta_hd_act.cc) that could enable remote information disclosure via the Bluetooth service without user interaction. The issue stems from improper input validation. Documented details appear in NVD/Red Hat entries and the Andro...

CVE-2018-9522

CVE-2018-9522 refers to an elevation of privilege vulnerability in Android 9 where the serialization functions of StatsLogEventWrapper.java can trigger an out-of-bounds write due to unnecessary functionality. The issue enables local privilege escalation in a privileged system process without extr...

CVE-2018-9543

CVE-2018-9543 affects Android and is described as an information disclosure due to a data wipe issue in trim_device within f2fs_format_utils.c, where the data partition may not be wiped during a factory reset. This could enable local disclosure of information after a factory reset without extra p...

CVE-2018-9570

CVE-2018-9570 affects Android 9 and involves an out-of-bounds write in impd_parse_drc_ext_v1 within impd_drc_dynamic_payload.c. The root cause is missing bounds checking in this function, which could allow remote code execution with a local attacker?no, this CVE entry states remote code execution...

CVE-2018-9573

Affected software: Android 9. Root cause: out-of-bounds write in impd_parse_filt_block within impd_drc_dynamic_payload.c due to missing bounds checks. Impact: remote code execution with high severity (user interaction required; NULL/LOCAL aspects per CVE). Exploitability: explicit exploitation de...

CVE-2019-1996

CVE-2019-1996 affects Android Bluetooth processing. In avrc_pars_browse_rsp (avrc_pars_ct.cc), a missing bounds check can cause an out-of-bounds read, enabling remote information disclosure over Bluetooth with no extra privileges and no user interaction. Affects Android 8.0, 8.1, and 9. The issue...

CVE-2019-2033

CVE-2019-2033 affects Android 9; the issue is in dnssd_clientstub.c: create_hdr exposes a use-after-free, enabling local privilege escalation with no extra privileges and no user interaction needed. The Android bulletin lists this under the System component as CVE-2019-2033 with Elevation of Priv...

CVE-2019-20542

CVE-2019-20542 affects Samsung mobile devices running Android N (7.1), O (8.x), and P (9.0) on Exynos chipsets. The issue is a kernel driver stack overflow. No exploit details or specific vulnerable components/version numbers are provided beyond this description. No remediation or patch version i...

CVE-2019-20551

CVE-2019-20551 affects Samsung mobile devices running N(7.x), O(8.x), and P(9.0). The issue allows bypassing Factory Reset Protection (FRP) via a Class 0 Type Message, as noted with Samsung ID SVE-2019-14941 (October 2019). Connected Red Hat/Redundancy sources reiterate the same FRP bypass claim;...

CVE-2019-20553

CVE-2019-20553 affects Samsung mobile devices running P9.0 on chipsets SM6150, SM8150, SM8150_FUSION, exynos7885, exynos9610, and exynos9820. The issue allows arbitrary memory read and write operations in the RKP component, as described in multiple sources (Samsung ID SVE-2019-15143). Public refe...

CVE-2019-20608

The CVE-2019-20608 entry concerns Samsung mobile devices running N(7.x), O(8.x), and P(9.0). The vulnerability is described as an issue where an attacker can use Emergency mode to disable features on these devices (Samsung IDs SVE-2018-13164, SVE-2018-13165). Connected sources (Red Hat, NVD, CVE ...

CVE-2019-2061

CVE-2019-2061 affects Android 10; the libxaac library has an out-of-bounds write due to a missing bounds check, enabling remote code execution with network access and user interaction required per the NVD entry. Red Hat and CNVD mirrors confirm the same description. Android 10 security release no...

CVE-2019-2120

CVE-2019-2120 affects Android via a vulnerability in OatFileAssistant::GenerateOatFile where an insecure default value can cause file corruption, enabling local elevation of privilege with no additional privileges and without user interaction. Affected are Android 7.0 through 9 (Android-7.0, 7.1....

CVE-2019-2197

CVE-2019-2197 affects Android platforms (8.0–10) via an issue in CachedBluetoothDevice.java:processPhonebookAccess where an insecure default value permits a permission bypass, enabling local disclosure of the user’s contact list. Exploitation requires local access with low attack complexity and i...

CVE-2019-2202

CVE-2019-2202 occurs in Android’s CryptoPlugin.decrypt and describes a possible heap buffer overflow leading to local privilege escalation without user interaction. Affected software is Android 9 and Android 10 (Media/crypto plugin path). The issue is described as an out-of-bounds write in Crypto...

CVE-2019-2233

CVE-2019-2233 affects Android 10. In UserSwitcherController.java’s getUserCount/getCount, a logic error could allow creation of a new user, enabling local privilege escalation for an attacker with physical access and no extra execution privileges or user interaction required. CVSSv3.1 base score ...

CVE-2019-9256

CVE-2019-9256 is a vulnerability in Android’s libmediaextractor. The issue is an out-of-bounds write caused by an integer overflow in the MPEG4Extractor/ media handling within libmediaextractor. It could lead to remote code execution on affected Android 10 devices, with user interaction required ...

CVE-2019-9309

CVE-2019-9309 affects Android 10 due to an out-of-bounds write in the NFC handling caused by a missing bounds check. This could enable local elevation of privilege with user interaction required for exploitation. The vulnerability is documented in the Android 10 security release notes and is addr...

CVE-2019-9375

CVE-2019-9375 affects Android 10 where hostapd may trigger an out-of-bounds write due to a race condition, enabling local privilege escalation with SYSTEM privileges and no user interaction. The issue is tied to the hostapd component; exploitation status and precise exploit paths are not detailed...

CVE-2019-9384

CVE-2019-9384 affects Android 10 in the framework component LockPatternUtils. The issue is an improper permissions check that enables elevation of privilege by bypassing the Lockguard, granting System-level execution privileges without user interaction. The CVE entry notes local exploitation is p...

CVE-2019-9415

CVE-2019-9415 affects Android 10 via the libstagefright component. The issue is an information-disclosure vulnerability caused by uninitialized data, enabling remote information leakage without extra execution privileges. Exploitation requires user interaction. Public details originate from Andro...

CVE-2020-0012

The CVE-2020-0012 issue affects the FPC Fingerprint TEE in Android. Root cause: an out-of-bounds write in fpc_ta_pn_get_unencrypted_image (fpc_ta_pn.c) due to a missing bounds check. Impact: local elevation of privilege to SYSTEM level; no user interaction required. Exploitation is local and coul...

CVE-2020-0119

CVE-2020-0119 affects Android 10 and is caused by improper certificate validation in WifiConfigManager.java (addOrUpdateNetworkInternal and related functions), enabling a possible man-in-the-middle attack that could lead to remote information disclosure. Exploitation requires user interaction, an...

CVE-2020-0138

CVE-2020-0138 affects Android 10 with the flaw in get_element_attr_rsp of btif_rc.cc, where a missing bounds check allows an out-of-bounds write. This could enable remote code execution without additional privileges and without user interaction, typically via Bluetooth usage (though Bluetooth is ...

CVE-2020-0140

CVE-2020-0140 relates to Android 10 and is described in multiple sources as an information-disclosure vulnerability due to a missing bounds check in rw_i93_sm_detect_ndef of rw_i93.c. The underlying issue can enable remote information disclosure without extra execution privileges and without user...

CVE-2020-0147

CVE-2020-0147 affects Android 10 (Pixel devices) due to an out-of-bounds read in btu_hcif_esco_connection_chg_evt of btu_hcif.cc caused by a missing bounds check. This enables local information disclosure with system-execution privileges needed; no user interaction required. Connected sources con...

CVE-2020-0150

CVE-2020-0150 is tied to Android 10 and affects the rw_t3t_message_set_block_list path in rw_t3t.cc, where a missing bounds check can cause an out-of-bounds write. This leads to local escalation of privilege with no additional execution privileges required and no user interaction needed, per NVD ...

CVE-2020-0153

CVE-2020-0153 is an Android elevation-of-privilege issue caused by a missing bounds check in phNxpNciHal_ext.cc, specifically in phNxpNciHal_write_ext. The out-of-bounds write could grant local SYSTEM-level execution without user interaction. The vulnerability affects Android-10; exploitation sta...

CVE-2020-0155

CVE-2020-0155 affects Android 10, specifically in the NFC HAL code path: phNxpNciHal_send_ese_hal_cmd in phNxpNciHal_ext.cc. The root cause is a missing bounds check that enables an out-of-bounds write. Impact per the description is local elevation of privilege with user privileges required; expl...

CVE-2020-0175

CVE-2020-0175 affects Android 10 in the Media Framework handling path; the issue is in the XMF_ReadNode function in eas_xmf.c, where improper input validation can cause resource exhaustion leading to a remote Denial of Service with no extra privileges. Exploitation requires user interaction. Publ...