CVE-2017-0753

CVE-2017-0753 is a remote code execution vulnerability reported in the Android libraries (libgdx), affecting Android versions 7.1.1, 7.1.2, and 8.0 (Android ID: A-62218744). The available connected documents indicate the issue is classified as RCE in the Libraries section of the Android Security ...

CVE-2017-11038

CVE-2017-11038 is a Qualcomm memory-subsystem Elevation of Privilege flaw affecting Android on MSM devices (and CAF-based kernels) where, during boot image header processing, range checks can be bypassed by supplying different header versions. This enables possible local privilege escalation. The...

CVE-2017-11040

CVE-2017-11040: Information disclosure in Qualcomm CAF Android releases using the Linux kernel. Reading from sysfs nodes may expose more information than allowed, enabling partial confidentiality loss (CVSS2: 4.3; CVSS3: 5.5). Affected: Qualcomm products with CAF Android builds on Linux kernel; i...

CVE-2017-11066

CVE-2017-11066 affects Android on MSM platforms (Android for MSM, Firefox OS for MSM, QRD Android) with CAF Linux kernel; during ubi image flashing, an uninitialized memory region could be accessed. Connected records corroborate this description. The provided documents do not include explicit exp...

CVE-2017-11080

CVE-2017-11080 is a local buffer overflow vulnerability described for Android on MSM/CAF platforms (Linux kernel path) when processing a user-supplied sparse image and the sparse header block size equals 4294967296. The issue affects Qualcomm bootloader components as mapped in the CVE references,...

CVE-2017-11085

CVE-2017-11085 affects Android on MSM platforms (CAF Linux kernel lineage) and is tied to the Qualcomm audio driver component msm-audio-effects-q6-v2.c. The root cause is an integer overflow in msm_audio_effects_virtualizer_handler that leads to a buffer overflow. This could enable memory corrupt...

CVE-2017-13153

CVE-2017-13153 is an elevation-of-privilege vulnerability in Android’s media framework (libaudioservice) affecting Android 8.0. The Android Security Bulletin (December 2017) lists this CVE under the Media framework section as EoP with updated AOSP versions for 8.0, indicating a local attacker cou...

CVE-2017-13157

CVE-2017-13157 is an information-disclosure vulnerability in Android's activitymanagerservice affecting Android 5.1.1–8.0. The Android bulletin groups it under System with the Android bug ID A-32990341 and lists it as an ID-type issue with updated AOSP versions for 2017-12-01. No exploitation det...

CVE-2017-13192

CVE-2017-13192 affects Android Media Framework (HEVC decoder) via ihevcd_parse_slice_header.c. The issue arises when a slice address is zero after the first slice, causing an infinite loop in slice header parsing and enabling remote denial of service without user interaction. Affected Android ver...

CVE-2017-13202

CVE-2017-13202 is an information-disclosure vulnerability in Android’s media framework component libeffects . Affects Android releases listed in the entry: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. The connected documents consistently describe the issue as a libeffects information-disclosur...

CVE-2017-13206

CVE-2017-13206 is an information-disclosure vulnerability in Android’s media framework (aacdec) affecting Android 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. The issue is documented in multiple sources (NVD entry; Pixel/Nexus security bulletin). The Pixel bulletin lists this CVE under the...

CVE-2017-13226

CVE-2017-13226 is a MediaTek MTK elevation-of-privilege vulnerability affecting the Android kernel. The connected records identify MTK as the component and describe an EoP issue with MediaTek MTK in Android devices (notably Pixel/Nexus in related bulletins). The documents do not disclose the exac...

CVE-2017-13246

CVE-2017-13246 affects the Android kernel network driver (Upstream kernel). It is described as an information‑disclosure vulnerability in the Network driver, with the Pixel/Nexus Android bulletin listing it under Kernel components as a Moderate‑severity issue. No concrete patch version or remedia...

CVE-2017-13265

CVE-2017-13265 is an Elevation of Privilege issue in the Android system related to OTA updates affecting Android 7.0–8.1. The Android Security Bulletin places this as a System component EoP vulnerability and indicates a remediation via the 2018-03-05 patch level for Pixel/Nexus devices; the NVD e...

CVE-2017-13295

CVE-2017-13295 is a DoS in the Android framework component known as the package installer. Affected Android versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. The Android Pixel/Nexus bulletin lists this issue under the Framework update with Updated AOSP versions 6.0–8.1 and notes that security pa...

CVE-2017-13296

CVE-2017-13296 is an information-disclosure vulnerability in the Android media framework (libavc). Affected Product/Component: Android media framework (libavc) across Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Root cause: information disclosure within libavc leads to partial confid...

CVE-2017-13298

CVE-2017-13298 is an information-disclosure vulnerability in Android’s media framework (libhavc) affecting Android 6.0–8.1. The issue is described as information disclosure; no specifics on root cause are provided in the initial text. Connected sources indicate the vulnerability affected Pixel/Ne...

CVE-2017-14879

CVE-2017-14879 affects the Qualcomm IPA driver (Android on Google Pixel/Nexus) via an IPA ioctl path that uses ipa_idr_find(), which can return a wrong structure pointer, causing slab out-of-bounds access in the IPA driver. This is listed as Elevation of Privilege (EoP) with a Moderate severity i...

CVE-2017-14884

CVE-2017-14884 affects Qualcomm WLAN components in Android CAF builds using the Linux kernel. Root cause: missing bounds check on data_len in WLANQCMBR_McProcessMsg, potentially causing a buffer overflow in WLANFTM_McProcessMsg. Impact: elevation of privilege on a locally exploited path within Qu...

CVE-2017-14890

The CVE-2017-14890 entry covers a buffer overwrite in Qualcomm WLAN via wma_send_bcn_buf_ll() during SWBA event handling, caused by improper validation of vdev_map in Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels prior to the 2018-04-05 patch level. ...

CVE-2017-15820

CVE-2017-15820 affects Qualcomm Graphics_Linux in Android CAF builds using the Linux kernel. The issue is a Use-After-Free in a KGSL IOCTL handler, enabling potentially elevated privileges if exploited locally. The Android Security Bulletin (CAF/Linux path) classifies the CVE under Graphics_Linux...

CVE-2017-15834

CVE-2017-15834: A race condition in Qualcomm Diagchar's diag_dbgfs_read_dcistats while accessing diag_dbgfs_dci_data_index in Android for MSM platforms (CAF Linux kernel lineage) can lead to a heap overflow. Affected components include Qualcomm diagchar and kernel subsystems across Android builds...

CVE-2017-17765

CVE-2017-17765 concerns Qualcomm WLAN in Android CAF builds using the Linux kernel. The issue arises when values received from firmware are not properly validated in the function wma_get_ll_stats_ext_buf() , causing an integer overflow in buffer size calculations that can lead to a buffer overflo...

CVE-2017-17860

Technical details about CVE-2017-17860 are not publicly available in the provided Connected documents; no affected products, versions, root cause, impact, or fixes are disclosed here. Monitor for updates.

CVE-2017-18056

CVE-2017-18056 affects Android for MSM, Firefox OS for MSM, and CAF Linux-kernel builds, where improper input validation for vdev_id in wma_unified_bcntx_status_event_handler() (received from firmware) can cause an out-of-bounds memory read. The issue is tied to the WLAN stack (Qualcomm component...

CVE-2017-18057

CVE-2017-18057: In Android for MSM, Firefox OS for MSM, QRD Android, with CAF Linux kernels, improper input validation for vdev id in wma_nlo_scan_cmp_evt_handler() (received from firmware) can lead to an out-of-bounds memory read. Affected platforms and components are described in the NVD entry;...

CVE-2017-18058

CVE-2017-18058 describes an out-of-bounds memory read in Qualcomm WLAN when processing wow_buf_pkt_len in wma_wow_wakeup_host_event(), triggered by firmware input. Affected platforms include Android for MSM, Firefox OS for MSM, QRD Android, and CAF Linux-based Android releases. Root cause is impr...

CVE-2017-18070

CVE-2017-18070 describes a vulnerability in Qualcomm WLAN on Android (CAF) where, in the function wma_ndp_end_response_event_handler() , the local variable len_end_rsp (uint32) can overflow if event->num_ndp_end_rsp_per_ndi_list is very large. This overflow can lead to a heap overwrite of the ...

CVE-2017-18661

CVE-2017-18661: A buffer overflow in Samsung mobile devices (Android M/6.0 and N/7.x) process_cipher_tdea; Samsung ID SVE-2017-8973. Documents provide the flaw but do not specify exploit vectors, affected firmware versions, or a patch/fix. No exploitation details are present in the provided sourc...

CVE-2017-18668

CVE-2017-18668 affects Samsung mobile devices running Android M (6.0) software. The records indicate the vulnerability allows an attacker to prevent users from making outbound calls and sending outbound text messages, linked to Samsung ID SVE-2017-8706. The available documents do not specify the ...

CVE-2017-18674

CVE-2017-18674 affects Samsung mobile devices running Android N (7.0); the Timaservice time service is susceptible to a kernel panic. The issue is associated with Samsung ID SVE-2017-8593, May 2017. CVSS indicates network attack vector with low privileges required and high availability impact. Th...

CVE-2017-18686

This CVE (CVE-2017-18686) affects Samsung mobile devices running M(6.0) and N(7.0). The issue is information disclosure through broadcasting an unprotected intent, allowing contact information to leak to a log file. The Samsung internal ID is SVE-2016-7180 (February 2017). Publicly documented imp...

CVE-2017-6426

CVE-2017-6426 is a documented information-disclosure vulnerability in the Qualcomm SPMI driver (Android kernel). A local-attack requires user interaction and could let a malicious local app access data outside its permission levels. Affected are Pixel and Pixel XL devices per the CVE list. The so...

CVE-2017-8277

In CVE-2017-8277, Qualcomm products running Android CAF builds on the Linux kernel are affected. The issue occurs in the function msm_dba_register_client: if a client’s registration fails, the object is freed but not removed from the list, enabling a use-after-free when the list is traversed next...

CVE-2018-11265

CVE-2018-11265 concerns a buffer overflow in Qualcomm MProc when Android CAF/Linux kernel handles log_buf with a uint64_t; the log_buf pointer may access memory beyond bounds when incremented in memcpy. Multiple sources (NVD entry and CNVD/PRION-style mappings) associate this with Android on Pixe...

CVE-2018-11296

CVE-2018-11296 is a Qualcomm WLAN Host buffer overflow affecting Android on Pixel/Nexus devices, caused by a buffer overwrite while processing a firmware message in the WLAN handler. The vulnerability is in the Qualcomm WLAN Host within CAF/Linux-based builds. Impact is memory corruption potentia...

CVE-2018-11304

CVE-2018-11304 describes a possible buffer overflow in msm_adsp_stream_callback_put caused by insufficient input validation of user-provided data, leading to an integer overflow across CAF-powered Android releases (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux kernel. The vuln...

CVE-2018-11823

CVE-2018-11823 affects CAF Android releases (Android for MSM, Firefox OS for MSM, QRD Android) based on the Linux kernel. The vulnerability is a double-free in the power module triggered by freeing device memory during driver probe failure. Root cause described as improper memory handling in the ...

CVE-2018-11878

CVE-2018-11878 affects Qualcomm WLAN HOST components in Android CAF/Linux-based WLAN stack. Description: a memory access error during processing of a WLAN driver command could allow a local attacker to exploit (per CVSS metrics: Local access, low complexity, with High impact on confidentiality, i...

CVE-2018-11960

CVE-2018-11960. A use-after-free condition in the Qualcomm HWEngines component (SPS driver) used in CAF Android builds (Linux kernel) can cause kernel errors. Affected context and wording in connected records indicate the issue arises within the SPS driver in Android CAF environments across affec...

CVE-2018-12014

CVE-2018-12014 describes a null pointer dereference in the NAT module of the Linux kernel used in CAF Android releases (Android for MSM, Firefox OS for MSM, QRD Android) via a freed pointer without a NULL assignment. In the NVD listing, the vulnerability is characterized as a local vulnerability ...

CVE-2018-21039

CVE-2018-21039 affects Samsung mobile devices running Android 7.0 (Nougat). The issue arises when granting Location permission to the compass feature in Quick Tools/QuickTools, enabling a lockscreen bypass. Connected sources reiterate the vulnerability but do not provide detailed root-cause analy...

CVE-2018-21063

Technical details about CVE-2018-21063 are not publicly available in the provided documents. Monitor for updates from vendors (e.g., Red Hat, CVE databases) and check for any new advisories or patches.

CVE-2018-21088

CVE-2018-21088 affects Samsung mobile devices running N(7.x). The issue is that InputMethodManagerService exposes an unprotected system service, enabling an attacker to trigger a reboot. The description in connected sources confirms the root cause and impact, but there are no specific patch versi...

CVE-2018-3568

CVE-2018-3568 is a WLAN buffer-overflow vulnerability reported in Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds prior to the 2018-04-05 patch level. The issue occurs in __wlan_hdd_cfg80211_vendor_scan() and can lead to a buffer overwrite. Connected sources confirm the code ...

CVE-2018-3580

CVE-2018-3580 describes a stack-based buffer overflow in the WLAN driver when the pmkid_count exceeds the PMKIDCache size on CAF Android (Android for MSM, Firefox OS for MSM, QRD Android) builds using the Linux kernel. The issue affects all such Android releases and relates to the PMKID cache siz...

CVE-2018-3582

CVE-2018-3582 is a buffer overflow in Qualcomm WLAN affecting Android Pixel/Nexus devices, stemming from improper input validation in WMA event handling. The vulnerability is classified as Elevation of Privilege (EoP) with a Medium impact in the Android/Qualcomm WLAN component. Connected sources ...

CVE-2018-5820

CVE-2018-5820 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android on CAF builds using Linux kernel prior to the 2018-04-05 patch level. The issue arises in wma_tbttoffset_update_event_handler(), where a firmware-supplied parameter is used to allocate a local buffer without prope...

CVE-2018-5840

CVE-2018-5840 is a Buffer Copy without Checking Size of Input in the DRM SDE driver initialization path of Android/Linux kernel (CAF variants). The NVD entry states impact as high (local, user interaction required) with a high both for CVSS3 and CVSS2. Affected component appears in the Qualcomm G...

CVE-2018-5854

CVE-2018-5854 is a stack-based buffer overflow affecting the Qualcomm bootloader used in CAF/Linux-based Android deployments (fastboot). The vulnerability is classified as an Elevation of Privilege (EoP) issue with High/Critical impact, occurring in the bootloader component and enabling local pri...