CVE-2017-18674

CVE-2017-18674 affects Samsung mobile devices running Android N (7.0); the Timaservice time service is susceptible to a kernel panic. The issue is associated with Samsung ID SVE-2017-8593, May 2017. CVSS indicates network attack vector with low privileges required and high availability impact. Th...

CVE-2017-18686

This CVE (CVE-2017-18686) affects Samsung mobile devices running M(6.0) and N(7.0). The issue is information disclosure through broadcasting an unprotected intent, allowing contact information to leak to a log file. The Samsung internal ID is SVE-2016-7180 (February 2017). Publicly documented imp...

CVE-2017-18691

Samsung mobile devices with Exynos8890 (M6.0 and N7.0) are affected by multiple buffer overflows in TSP sysfs cmd_store. Root cause: unsafe handling in TSP sysfs cmd_store leading to buffer overflows. Impact: described as buffer overflows with high/critical severity (CVSS v3.1: 9.8; network acces...

CVE-2017-6292

Summary: CVE-2017-6292 is an integer overflow in NVIDIA TLZ TrustZone’s TA-to-TA communication handler that can cause an out-of-bounds write, potentially enabling local code execution or denial of service within TrustZone. Affected: NVIDIA TLZ TrustZone OS components on Android devices (notably S...

CVE-2017-6426

CVE-2017-6426 is a documented information-disclosure vulnerability in the Qualcomm SPMI driver (Android kernel). A local-attack requires user interaction and could let a malicious local app access data outside its permission levels. Affected are Pixel and Pixel XL devices per the CVE list. The so...

CVE-2017-8250

CVE-2017-8250 (Qualcomm GPU driver, Android CAF builds) affects Qualcomm GPU driver in Android CAF using the Linux kernel. The vulnerability arises when user-controlled variables nr_cmds and nr_bos are passed between functions without checks, allowing an integer overflow that can overflow a small...

CVE-2017-8254

CVE-2017-8254 affects Qualcomm-based Android devices that use CAF builds with the Linux kernel. The issue is a null/invalid audio client pointer being dereferenced before it is validated, as described in the CVE entry. The documented impact in the provided sources is limited to this dereference t...

CVE-2017-8257

CVE-2017-8257 affects Qualcomm CAF Android devices using the Linux kernel, specifically the sde_rotator debug interface. The issue arises when multiple processes read registers and one process frees the debug buffer while another still uses it, creating a use-after-free-like condition. The NVD re...

CVE-2017-8263

CVE-2017-8263 affects Qualcomm components in Android CAF builds that use the Linux kernel. The issue is a kernel fault triggered by certain operations on a read-only user-space virtual address, with a high impact (local, high confidentiality/integrity/availability implications). Exploitation deta...

CVE-2017-8281

CVE-2017-8281 is reported as a race condition in Qualcomm CAF Android builds using the Linux kernel, affecting the DCI driver and allowing access to memory that has already been freed during event status queries. Connected sources identify the affected component as the DCI driver in Qualcomm auto...

CVE-2017-9685

The CVE-2017-9685 entry concerns Qualcomm WLAN driver race conditions in Android CAF builds using the Linux kernel, producing a Use-After-Free condition. Affected software is Qualcomm products with CAF Android releases, where the WLAN driver’s race condition can impact confidentiality, integrity,...

CVE-2017-9690

CVE-2017-9690 affects Qualcomm QBT1000 driver in Android devices (MSM/Linux kernel) via the qbt1000 ioctl handler. The vulnerability arises from an incorrect buffer size check that allows an integer overflow, which can lead to a buffer overflow and local elevation of privileges (EoP) within a pri...

CVE-2017-9709

CVE-2017-9709 is a privilege-escalation issue in telephony affecting Android for MSM/CAF Linux-kernel builds. Affected components are telephony-related in Android variants (Android for MSM, Firefox OS for MSM, QRD Android) with CAF kernel usage. The vulnerability is described as enabling elevatio...

CVE-2018-11265

CVE-2018-11265 concerns a buffer overflow in Qualcomm MProc when Android CAF/Linux kernel handles log_buf with a uint64_t; the log_buf pointer may access memory beyond bounds when incremented in memcpy. Multiple sources (NVD entry and CNVD/PRION-style mappings) associate this with Android on Pixe...

CVE-2018-11296

CVE-2018-11296 is a Qualcomm WLAN Host buffer overflow affecting Android on Pixel/Nexus devices, caused by a buffer overwrite while processing a firmware message in the WLAN handler. The vulnerability is in the Qualcomm WLAN Host within CAF/Linux-based builds. Impact is memory corruption potentia...

CVE-2018-11304

CVE-2018-11304 describes a possible buffer overflow in msm_adsp_stream_callback_put caused by insufficient input validation of user-provided data, leading to an integer overflow across CAF-powered Android releases (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux kernel. The vuln...

CVE-2018-11823

CVE-2018-11823 affects CAF Android releases (Android for MSM, Firefox OS for MSM, QRD Android) based on the Linux kernel. The vulnerability is a double-free in the power module triggered by freeing device memory during driver probe failure. Root cause described as improper memory handling in the ...

CVE-2018-11898

CVE-2018-11898 affects Qualcomm WLAN host components in CAF Android builds (Android for MSM/CAF Linux kernel). The issue is an out-of-bounds read when processing a start BSS request if the SSID length exceeds the maximum, leading to potential memory access violations. The NVD entry and related re...

CVE-2018-11960

CVE-2018-11960. A use-after-free condition in the Qualcomm HWEngines component (SPS driver) used in CAF Android builds (Linux kernel) can cause kernel errors. Affected context and wording in connected records indicate the issue arises within the SPS driver in Android CAF environments across affec...

CVE-2018-21046

CVE-2018-21046 affects Samsung mobile devices running O(8.x) software. The issue is a clipboard data exposure via the Emergency Dialer when a USB device is connected. The connected documents do not provide a concrete root cause, exploit details, or remediation steps. No public mitigation details ...

CVE-2018-21049

CVE-2018-21049 affects Samsung mobile devices with N7.x/O8.x (Exynos). The issue is an arbitrary memory write in a Trustlet caused by a secure driver exposing access to sensitive APIs (Samsung ID SVE-2018-12881). CVSS v3.1 base score 9.8 (CRITICAL): Network attack, no user interaction, high impac...

CVE-2018-21062

The CVE-2018-21062 entry covers Samsung mobile devices running N(7.x) and O(8.x). The vulnerability allows an attacker to view Streams content (e.g., a Gallery slideshow) of a locked Secure Folder by connecting an external device when biometric authentication is disabled. The underlying impact is...

CVE-2018-21079

CVE-2018-21079 affects Samsung mobile devices on L/M/N/O releases, with a kernel pointer leak in the USB gadget driver (SVE-2017-10993). The Red Hat and CNVD entries corroborate the issue as described, but the connected documents do not provide specific affected component versions beyond the gene...

CVE-2018-3586

CVE-2018-3586 describes an integer overflow that can overflow to a buffer overflow in the ADSPRPC heap manager used by CAF Qualcomm components on Android (Android for MSM, Firefox OS for MSM, QRD Android) running the Linux kernel. Affected: Qualcomm ADSPRPC heap manager within CAF Android builds....

CVE-2018-5825

CVE-2018-5825 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds with CAF Linux kernels prior to the 2018-04-05 patch level. The kernel IPA driver contains a Use-After-Free condition in the IPA subsystem, as described in the NVD record. The vulnerability is rated with CV...

CVE-2018-5834

CVE-2018-5834 affects Android CAF WLAN components (Android for MSM, Firefox OS for MSM, QRD Android) via a buffer overwrite in the kernel interface path __wlan_hdd_cfg80211_vendor_scan(). The issue is described as a potential buffer overwrite in CAF Android releases before the 2018-06-05 patch le...

CVE-2018-9491

CVE-2018-9491 affects Android’s media framework: in NdkMediaCodec.cpp, AMediaCodecCryptoInfo_new may trigger an out-of-bounds write caused by an integer overflow. This could allow remote code execution in external apps with no extra privileges, with user interaction required for exploitation. Aff...

CVE-2018-9503

The CVE-2018-9503 entry describes an out-of-bounds read in rfc_process_mx_message() within rfc_ts_frames.cc, leading to remote information disclosure without requiring privileges or user interaction. Affected software includes Android versions 7.0 through 9.0. The vulnerability’s root cause is a ...

CVE-2018-9513

CVE-2018-9513 describes a local privilege escalation in the Android kernel due to a memory corruption issue from a double free in the copy_process path of fork.c. The vulnerability allows a local attacker to escalate privileges without user interaction, by exploiting a double release/memory corru...

CVE-2018-9525

CVE-2018-9525 affects Android 9 Framework: an elevation of privilege via a permissions bypass in the AndroidManifest.xml SliceBroadcastReceiver for com.android.settings.slice.action.WIFI_CHANGED. This could allow a local attacker to change device settings with no additional privileges and no user...

CVE-2018-9529

CVE-2018-9529 affects Android 9 and is triggered by an out-of-bounds write in ixheaacd_individual_ch_stream within ixheaacd_channel.c caused by a missing bounds check. The issue could allow remote code execution with no privileges, with user interaction required for exploitation. No exploitation ...

CVE-2018-9538

CVE-2018-9538 affects Android (8.1, 9) and relates to V4L2SliceVideoDecodeAccelerator::Dequeue, where an incorrect bounds check enables a possible out-of-bounds read of a function pointer. This could allow local escalation of privilege with no user interaction. The vulnerability is associated wit...

CVE-2018-9541

CVE-2018-9541 affects Android devices (Android 7.0–9) and targets the Bluetooth stack. The flaw is in the function avrc_pars_vendor_rsp of avcr_pars_ct.cc , where a missing bounds check can cause an out-of-bounds read. This can lead to remote information disclosure in the Bluetooth service withou...

CVE-2018-9553

CVE-2018-9553 : In MasteringMetadata::Parse of mkvparser.cc, a double-free can occur due to an insecure default value, enabling remote code execution. Affected: Android devices/versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9. Exploitation requires user interaction (local attack). Evidence ties this CVE ...

CVE-2018-9554

The CVE-2018-9554 issue affects Android's IMediaExtractor.cp, specifically in the dumpExtractors path, where a permissions bypass could allow disclosure of recently accessed media files. The underlying impact is local information disclosure without execution privileges, with no user interaction r...

CVE-2018-9592

CVE-2018-9592: In mca_ccb_hdl_rsp() of mca_cact.cc on Android 7.0–9.0, an out-of-bounds read due to a missing bounds check could allow remote information disclosure with no privileges and no user interaction required. The vulnerability affects Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9 as cited i...

CVE-2019-11341

On Samsung P(9.0) devices, the vulnerability enables a physically proximate attacker to start a TCP dump via the Service Mode feature (accessible after entering the *#9900# check code) without user knowledge. The OTP that protects this feature is generated locally, and the password creation logic...

CVE-2019-2037

CVE-2019-2037 affects Android: the issue resides in l2cu_send_peer_config_rej in l2c_utils.cc, where an incorrect bounds check allows an out-of-bounds read, enabling remote information disclosure without extra privileges and without user interaction. Affected versions include Android 7.0, 7.1.1, ...

CVE-2019-2038

CVE-2019-2038 corresponds to an Android vulnerability in rw_i93_process_sys_info (rw_i93.cc) where a missing bounds check allows an out-of-bounds read. The impact is local information disclosure without extra execution privileges, with exploitation requiring user interaction. Affected Android ver...

CVE-2019-2039

In CVE-2019-2039, the flaw is a possible out-of-bounds read in rw_i93_sm_detect_ndef within rw_i93.cc, caused by a missing bounds check. This can lead to local information disclosure on Android devices. Affected products/versions include Android 7.0, 7.1.x, 8.x, and 9 (as listed in the NVD entry)...

CVE-2019-2041

The CVE-2019-2041 issue concerns the NFC module configuration in Android devices, where an insecure default value can cause a failure to distinguish between devices. This enables local elevation of privilege with no extra execution privileges, with user interaction required for exploitation. Affe...

CVE-2019-2052

CVE-2019-2052 : In VisitPointers of heap.cc, Android’s System component, there is a potential out-of-bounds read caused by type confusion. This could enable remote information disclosure without extra execution privileges or user interaction. Affected Android versions include 7.0, 7.1.1, 7.1.2, 8...

CVE-2019-20540

CVE-2019-20540 affects Samsung mobile devices running N(7.x), O(8.x), and P(9.0) Exynos software. The issue is a buffer over-read in the core touch screen driver that can lead to a possible information leak. Connected sources corroborate the same description; no explicit patch/version details or ...

CVE-2019-20548

CVE-2019-20548 affects Samsung mobile devices with P(9.0) software on Qualcomm chipsets. The root cause is a buffer overflow in the bootloader , enabling potential arbitrary execution on affected devices. The vulnerability has a high to critical impact profile (NVD CVSS v3.1: 9.8, network attack ...

CVE-2019-20558

CVE-2019-20558 concerns a Buffer Overflow in the Touch Screen Driver on Samsung mobile devices with N(7.x), O(8.x) and P(9.0) Exynos chipsets (Samsung ID SVE-2019-14990). Affected component: Touch Screen Driver. Root cause: buffer overflow. Impact per sources: CVSS3.1 base score 9.8 (CRITICAL) wi...

CVE-2019-20559

CVE-2019-20559 affects Samsung mobile devices running Android P (9.0). The vulnerability is in the Gallery application, permitting viewing of photos on the lock screen. The Samsung ID is SVE-2019-15055 (October 2019). The connected documents do not specify the exact root cause, vulnerable compone...

CVE-2019-20571

The CVE-2019-20571 entry describes a type confusion vulnerability in the WVDRM Trustlet on Samsung mobile devices running O(8.x) with TEEGRIS, allowing arbitrary code execution. Affected component: WVDRM Trustlet; root cause: type confusion. Impact: arbitrary code execution with high severity (pe...

CVE-2019-20578

CVE-2019-20578 affects Samsung mobile devices running P 9.0 on Exynos 9820 chipsets. The root cause is a buffer overflow that occurs when loading the UH Partition during Secure Boot. Impact is high confidentiality, integrity, and availability concerns for Secure Boot processes on affected models....

CVE-2019-20582

CVE-2019-20582 concerns a use-after-free in the ion driver on Samsung mobile devices with Exynos9810 (O(8.x) and P(9.0)). The NVD entry lists a CVSS-3.1 base score of 9.8 (CRITICAL) with network attack vector, no privileges required, and high impacts to confidentiality, integrity, and availabilit...

CVE-2019-20595

CVE-2019-20595 concerns Samsung mobile devices running P(9.0) where the Quick Panel can enable or disable the Bluetooth stack without authentication. Affected: Samsung mobile devices with P(9.0) software (as cited in the CVE records). Root cause: an insecure Quick Panel action allows state change...