CVE-2017-11064

CVE-2017-11064 is a WLAN vulnerability affecting Android for MSM (and variants) where a buffer overread occurs while processing ACA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_PASSPOINT_LIST and QCA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_LIST in __wlan_hdd_cfg80211_set_passpoint_list and hdd_extscan_pas...

CVE-2017-11069

CVE-2017-11069 is a heap overflow in the SafeSwitch image handling, reported for Android for MSM platforms (CAF/Linux kernel) and associated Qualcomm bootloader contexts. The vulnerability arises from manipulation of SafeSwitch Image data, and is categorized in the Qualcomm bootloader area as an ...

CVE-2017-13172

CVE-2017-13172 is a local, Elevation of Privilege vulnerability in the MediaTek Bluetooth driver used by Android kernels. The issue affects the Bluetooth subsystem of MediaTek components and enables privilege escalation without requiring user interaction; CVSSv3 base score 7.8 (HIGH). The NVD ent...

CVE-2017-13182

CVE-2017-13182 affects Android 8.0 and 8.1. The issue is in ACodec::sendFormatChange, where an integer overflow can cause an out-of-bounds write, enabling local privilege escalation with code execution in a privileged process and no user interaction required. The vulnerability is documented in mu...

CVE-2017-13185

CVE-2017-13185 is an information-disclosure vulnerability in Android’s media framework libhevc. Affected products/versions per sources: Android 7.0, 7.1.1, 7.1.2, and 8.0. The root cause is information exposure via the libhevc decoder in the Media framework (details are consistent across NVD/CNVD...

CVE-2017-13210

CVE-2017-13210 affects Android’s CameraDeviceClient.cpp, where an out-of-bounds write occurs in submitRequestList if metadataSize is too small. This can enable local elevation of privilege and code execution in a privileged process without extra privileges or user interaction. Affected Android ve...

CVE-2017-13213

CVE-2017-13213 is a Broadcom bcmdhd driver Elevation of Privilege flaw affecting Android devices (Broadcom WiFi driver in the Android kernel). The public records describe a local-elevation vulnerability in the bcmdhd component, enabling an attacker with local access to escalate privileges on affe...

CVE-2017-13232

CVE-2017-13232 affects Android audioserver and is caused by an out-of-bounds write in a log statement using %s with a non-NULL-terminated array, leading to local information disclosure without requiring user interaction or extra privileges. Affected Android versions per the CVE entry: 5.1.1, 6.0,...

CVE-2017-13244

CVE-2017-13244 is an Elevation of Privilege (EoP) flaw in the Android kernel Easel driver. The upstream kernel Easel component is affected, enabling privilege escalation on Android devices. The issue is classified as EoP with Moderate severity in the Pixel/Nexus bulletin, and addressed by patch l...

CVE-2017-13274

CVE-2017-13274 affects Android Runtime: UriTest.getHost() may misdetermine the web origin, enabling incorrect security decisions. Affected: Android 6.0–8.1. Impact described as high/critical (CVSS 3.0: 9.8; base vector CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Exploitation requires no user i...

CVE-2017-13291

CVE-2017-13291 affects Android devices with vulnerable avrc_ctrl_pars_vendor_rsp in avrc_pars_ct.cc, caused by missing bounds checks that can trigger a NULL pointer dereference. This leads to remote denial of service without user interaction on Android versions 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. Th...

CVE-2017-14887

CVE-2017-14887: In Android for MSM, Firefox OS for MSM, QRD Android, and all CAF Linux-kernel Android releases, processing messages of type eWNI_SME_MODIFY_ADDITIONAL_IES can trigger an integer overflow that may lead to a heap buffer overflow. Affected platforms include Android for MSM and relate...

CVE-2017-15814

The connected CNVD-2018-06014 entry describes an information-disclosure vulnerability in Google's Android Qualcomm Camera_v2 driver, caused by insufficient input validation in the driver. The issue is tied to the Camera_v2 components on Android devices using Qualcomm hardware and enables local in...

CVE-2017-15846

The CVE-2017-15846 entry affects the camera driver in Android for MSM, Firefox OS for MSM, and QRD Android prior to 2017-09-16. Root cause: an untrusted pointer dereference in video_ioctl2() could occur. Impact per sources is potentially high (partial to full confidentiality, integrity, and avail...

CVE-2017-17764

CVE-2017-17764 describes an integer overflow in the firmware-driven buffer-size calculation inside Qualcomm WLAN’s wma_rx_aggr_failure_event_handler() for CAF Android/Linux-kernel builds. The flaw can allow a crafted failure-info value to cause a buffer overflow, enabling local elevation of privi...

CVE-2017-17766

CVE-2017-17766 affects Android/Qualcomm wireless components (MSM stack) and is caused by insufficient validation of num_peers received from firmware, enabling an integer overflow in the buffer allocation size and potentially leading to a buffer overflow. Affected products include Android for MSM,...

CVE-2017-18052

CVE-2017-18052 affects Qualcomm WLAN in Android devices (CAF Linux kernel line) via the wma_mgmt_tx_bundle_completion_handler() function. The root cause is improper input validation for cmpl_params->num_reports, param_buf->desc_ids, and param_buf->status received from firmware, leading t...

CVE-2017-18057

CVE-2017-18057: In Android for MSM, Firefox OS for MSM, QRD Android, with CAF Linux kernels, improper input validation for vdev id in wma_nlo_scan_cmp_evt_handler() (received from firmware) can lead to an out-of-bounds memory read. Affected platforms and components are described in the NVD entry;...

CVE-2017-18060

CVE-2017-18060 affects Qualcomm WLAN within Android on MSM devices (e.g., Android for MSM, CAF-based/Linux kernel stacks). The root cause is improper input validation for resp_event->vdev_id inside wma_unified_bcntx_status_event_handler(), as received from firmware, leading to potential out-of...

CVE-2017-18647

CVE-2017-18647 concerns Samsung mobile devices running M(6,x) and N(7.0) software. The issue lies in the TA Scrypto v1.0 implementation in Secure Driver, where a race condition can lead to a buffer overflow. Affected Samsung identifiers are SVE-2017-8973, SVE-2017-8974, and SVE-2017-8975 (Nov 201...

CVE-2017-18656

CVE-2017-18656 describes a buffer over-read in a trustlet on Samsung mobile devices running M(6.0) and N(7.x). Affected component is the trustlet; root cause is a buffer over-read. The issue has been reported across multiple sources (NVD, Red Hat CVE page, CVE records) with the Samsung ID SVE-201...

CVE-2017-18660

CVE-2017-18660 affects Samsung mobile devices running M(6.0) and N(7.x). The root cause is a buffer overflow in tlc_server, identified with Samsung SVE-2017-8888. CVSS v3.1 base score 9.8 (CRITICAL) with NETWORK attack vector, no privileges required, no user interaction, and impacts to confidenti...

CVE-2017-18665

Samsung mobile devices running Android M (6.0) are affected by CVE-2017-18665 due to a NULL pointer dereference in WifiService via adb-cmd, leading to memory corruption. Connected sources consistently identify the vulnerability as located in WifiService and tied to Samsung’s SVE-2017-8287 (June 2...

CVE-2017-18666

CVE-2017-18666 affects Samsung mobile devices running Android versions from KK (4.4) through N (7.x). The issue allows applications to send arbitrary premium SMS messages due to a vulnerability in the device software (Samsung ID SVE-2017-8701). Impact is that apps could incur charges by sending p...

CVE-2017-18673

CVE-2017-18673 affects Samsung mobile devices running N(7.x) software. The issue allows an attacker to disable the Location service on a locked device, preventing the rightful owner from locating a stolen device. The Samsung ID is SVE-2017-8524 (May 2017). Public documents do not provide details ...

CVE-2017-18675

CVE-2017-18675 affects Samsung mobile devices on M(6.0)/N(7.x) with Exynos7420/Exynos8890. The issue is in the Camera application, which can leak uninitialized memory via the ion subsystem. The Red Hat and NVD records reiterate the same description; no additional exploit details, affected version...

CVE-2017-6280

The CVE-2017-6280 entry concerns the NVIDIA driver and is described as an out-of-bounds read vulnerability that could disclose information. The public records show an NVIDIA component entry with this CVE, a CVSSv3 base score of 7.5 (HIGH) and a CVSSv2 base score of 5.0 (MEDIUM) from NVD, indicati...

CVE-2017-7365

CVE-2017-7365 is a Qualcomm bootloader elevation-of-privilege issue disclosed in the Android 2017-06-05 bulletin. It is listed as EoP (High) for the Bootloader component; exploitation would yield higher privileges within the kernel/boot context. Patches are provided via Qualcomm AMSS bulletins an...

CVE-2017-8250

CVE-2017-8250 (Qualcomm GPU driver, Android CAF builds) affects Qualcomm GPU driver in Android CAF using the Linux kernel. The vulnerability arises when user-controlled variables nr_cmds and nr_bos are passed between functions without checks, allowing an integer overflow that can overflow a small...

CVE-2017-8254

CVE-2017-8254 affects Qualcomm-based Android devices that use CAF builds with the Linux kernel. The issue is a null/invalid audio client pointer being dereferenced before it is validated, as described in the CVE entry. The documented impact in the provided sources is limited to this dereference t...

CVE-2017-8268

CVE-2017-8268 affects Qualcomm components in Android CAF builds using the Linux kernel. The camera application can request frame/command buffer operations with invalid values, causing the camera driver to perform a heap buffer over-read. Documented impact is high (CVSSv3: 7.8; CVSSv2: 9.3). The v...

CVE-2017-9680

CVE-2017-9680 affects Qualcomm components used in Android CAF builds running the Linux kernel. The issue occurs when a pointer argument from userspace is invalid, and a driver may use an uninitialized structure to log an error message. The connected documents confirm the affected stack is Qualcom...

CVE-2017-9724

CVE-2017-9724 affects Qualcomm products running CAF Android builds with the Linux kernel. The root cause is in the ION cache maintenance code, where kernel memory could be written from a user-supplied address due to user-level permissions. This allows a local attacker to Access kernel memory (loc...

CVE-2018-11263

CVE-2018-11263 concerns CAF-derived Android WLAN code in the Linux kernel used on Android for MSM, Firefox OS for MSM, and QRD Android. The issue arises when the radio_id received from the FW is greater than or equal to the maximum, allowing an out-of-bounds write while copying radio stats. The v...

CVE-2018-11297

CVE-2018-11297 affects Qualcomm WLAN Host in Android (CAF/Linux kernel-based builds such as Android for MSM) where the WMA NDP event handler can over-read due to missing validation of input value event_info received from firmware. This is described as a buffer over-read/overflow in the WLAN Host ...

CVE-2018-11302

CVE-2018-11302 corresponds to a WLAN buffer overflow issue described in Qualcomm CAF Android variants (Android for MSM, Firefox OS for MSM, QRD Android) where input from userspace could be copied into a kernel buffer without proper validation. The CVE is listed under the Qualcomm component mappin...

CVE-2018-11851

CVE-2018-11851 relates to a buffer-length calculation input validation flaw in CAF Qualcomm WLAN driver components, causing a possible out-of-bounds write to kernel stack. The vulnerability is documented as a local, impactful issue with high severity (NVD CVSS v2/3 vectors indicate LOCAL access, ...

CVE-2018-21066

CVE-2018-21066 affects Samsung mobile devices running M(6.0) with Exynos or MediaTek chipsets; a buffer overflow in a Trustlet leads to memory corruption. Affected: Samsung devices; impact: high/critical (C, I, A all high). Samsung ID SVE-2018-11599. CVSSv3.1 base score 9.8 (AV:N/AC:L/PR:N/UI:N/S...

CVE-2018-21080

CVE-2018-21080 affects Samsung mobile devices running N(7.x). A physically proximate attacker can use a magnet to activate NFC and bypass the lockscreen (Samsung ID SVE-2017-10897). Exploitation details, affected models/versions, and fixes are not explicitly provided in the connected documents; o...

CVE-2018-3569

CVE-2018-3569 is a Qualcomm WLAN Host vulnerability classified as Elevation of Privilege (EoP) and rated Critical in the 2018-06-05 Android patch set. The issue is a buffer over-read during certain firmware/wlan operations, exposed on CAF Android releases (Android for MSM, Firefox OS for MSM, QRD...

CVE-2018-3581

The CVE concerns the WLAN driver in CAF Android builds (Android for MSM, Firefox OS for MSM, QRD Android) on Linux kernel platforms. The issue is a buffer overwrite that occurs when the vdev_id received from firmware exceeds max_bssid. This is described across multiple sources (NVD entry CVE-2018...

CVE-2018-3586

CVE-2018-3586 describes an integer overflow that can overflow to a buffer overflow in the ADSPRPC heap manager used by CAF Qualcomm components on Android (Android for MSM, Firefox OS for MSM, QRD Android) running the Linux kernel. Affected: Qualcomm ADSPRPC heap manager within CAF Android builds....

CVE-2018-5831

CVE-2018-5831 affects the KGSL driver in CAF Android builds that use the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The vulnerability stems from a reference counting error that can trigger a Use-After-Free condition. The impact is described in the Android/CAF context as a lo...

CVE-2018-5856

CVE-2018-5856 affects the Linux kernel in Qualcomm audio paths (sound/soc/qcom/qdsp6/q6asm.c), caused by a race condition leading to a use-after-free. Vendor-specific Android builds (CAF) on MSM, including Audio components, are affected. The description notes potential kernel panic or other unspe...

CVE-2018-5909

CVE-2018-5909 is documented as a buffer overflow affecting the Rotator component in Qualcomm, reported in Android CAF builds. The vulnerability arises from a lack of proper buffer-size checking in display handling code, which may permit memory corruption. The CVE is listed under Qualcomm componen...

CVE-2018-9362

CVE-2018-9362 affects Android where InboundSmsHandler.java's processMessagePart has improper input validation, enabling remote denial of service with no privileges and no user interaction. Affected products include Android 6.x through 8.1. The connected documents confirm a DoS impact but do not p...

CVE-2018-9436

CVE-2018-9436: An out-of-bounds read due to a missing bounds check in bnep_data_ind of bnep_main.cc could allow remote information disclosure on Android devices. Affected versions: Android 6.0–6.0.1, 7.0–7.1.2, 8.0–8.1. Impact: information disclosure without extra privileges or user interaction. ...

CVE-2018-9485

CVE-2018-9485 affects the Android Bluetooth stack: in l2cble_process_sig_cmd of l2c_ble.cc there is an out-of-bounds read caused by a missing bounds check. This could lead to remote information disclosure over Bluetooth with no user interaction or extra privileges required. Attack vector is adjac...

CVE-2018-9490

The CVE-2018-9490 issue affects Android, specifically the CollectValuesOrEntriesImpl function in elements.cc. The root cause is a type confusion that can enable remote code execution, leading to remote escalation of privilege. The vulnerability is exploitable with user interaction and has a local...

CVE-2018-9491

CVE-2018-9491 affects Android’s media framework: in NdkMediaCodec.cpp, AMediaCodecCryptoInfo_new may trigger an out-of-bounds write caused by an integer overflow. This could allow remote code execution in external apps with no extra privileges, with user interaction required for exploitation. Aff...