CVE-2023-20626

CVE-2023-20626 affects MediaTek’s msdc module. The issue is an out-of-bounds write caused by an incorrect bounds check, enabling local escalation of privileges with System execution privileges required and no user interaction needed. Several connected records corroborate the vulnerability in msdc...

CVE-2023-20635

The CVE-2023-20635 issue concerns the keyinstall module (noted across multiple sources) where an integer overflow can lead to information disclosure. Reported impact is local information disclosure with system-level execution privileges required, and exploitation does not require user interaction...

CVE-2023-20670

The CVE-2023-20670 entry describes a local out-of-bounds write in audio caused by a missing bounds check, enabling local escalation to System execution privileges without user interaction. The vulnerability is associated with MediaTek audio components and is tied to patch ALPS07648710 (Issue ALPS...

CVE-2023-20689

CVE-2023-20689 affects MediaTek WLAN firmware; root cause is an integer overflow in the WLAN firmware that can trigger a system crash and remote denial of service. Exploitation does not require privileges or user interaction. Affected component: WLAN firmware (MediaTek). Mitigation: patch ALPS076...

CVE-2023-20706

CVE-2023-20706 affects the MediaTek apu module. The issue is an out-of-bounds read caused by a missing bounds check, enabling local information disclosure with no user interaction and no additional privileges required. Exploitation details or active exploit status are not provided in the document...

CVE-2023-20783

CVE-2023-20783 describes an out-of-bounds write in the keyinstall component due to a missing bounds check, enabling local privilege escalation with System-level privileges; exploitation is reported as possible without user interaction. The available references consistently cite this issue and a p...

CVE-2023-20808

CVE-2023-20808 affects OPTEE on MediaTek chipsets. The vulnerability is an out-of-bounds write caused by a missing bounds check in OPTEE, enabling local escalation of privileges with System execution privileges required and no user interaction needed. Exploitation status is not detailed in the pr...

CVE-2023-21301

CVE-2023-21301 affects Android’s ActivityManagerService and enables a local attacker to determine whether an app is installed without query permissions through a side-channel information disclosure. This could lead to local privilege escalation without additional execution privileges or user inte...

CVE-2023-21316

CVE-2023-21316 affects Google Android: an information-disclosure side channel in content that lets an app determine whether another app is installed without query permissions. Local attack with no user interaction; no explicit exploit details or affected versions are provided in the documents. Re...

CVE-2023-32816

The CVE-2023-32816 entry describes a vulnerability in the gnss service where an out-of-bounds read results from improper input validation. The issue can lead to local information disclosure with system execution privileges required and does not require user interaction. A patch is identified: ALP...

CVE-2023-32838

CVE-2023-32838 concerns the MediaTek dpe module, with a reported issue of an out-of-bounds write caused by missing valid range checking. The vulnerability could enable local escalation of privilege with System execution privileges, and exploitation does not require user interaction. The available...

CVE-2023-32866

CVE-2023-32866 affects the MediaTek mmp module. The vulnerability is a memory corruption caused by an incorrect bounds check in mmp, enabling local escalation of privilege with System execution privileges required. Exploitation is reported to require no user interaction. The entry notes a patch/m...

CVE-2023-33912

CVE-2023-33912 concerns the Contacts service in UNISOC-induced chipsets where a missing permission check could allow local information disclosure with no additional execution privileges. The available connected documents consistently state that the vulnerability enables local access to informatio...

CVE-2023-42643

CVE-2023-42643: The vulnerability is in validationtools, where a missing permission check could allow local information disclosure without additional privileges. The affected software component is described as validationtools; the underlying cause is insufficient access control enabling disclosur...

CVE-2023-42650

CVE-2023-42650 concerns UNISOC chipsets’ engineermode. The vulnerability is due to a missing permission check in engineermode, which could allow local information disclosure without requiring additional execution privileges. The NVD entry lists a CVSSv3.1 base score of 5.5 (Medium) with LOCAL att...

CVE-2023-48353

CVE-2023-48353 affects the vsp driver (UNISOC chipsets). A logic error can cause a use-after-free in the driver, leading to local denial of service with SYSTEM execution privileges required. CVSS 3.1/3.1 indicates LOCAL access, HIGH privileges, and an Availability impact. Public details describe ...

CVE-2024-20112

CVE-2024-20112 affects the isp component, with a missing bounds check causing an out-of-bounds read. The issue can lead to local denial of service and allows system execution privileges; exploitation requires user interaction. A fix is available as Patch ID ALPS09071481 (Issue ID MSV-1730). Conne...

CVE-2026-0046

Technical details are not publicly available in the provided connected documents beyond the general CVE-2026-0046 description (InputInterceptor/Letterbox.java, tapjacking/overlay scenario). Monitor for updates.

CVE-2014-9799

CVE-2014-9799 concerns Android on Nexus 5 and 7 (2013) devices before 2016-07-05, where a Qualcomm makefile omits -fno-strict-overflow, potentially enabling local privilege escalation via crafted apps that exploit incorrect compiler optimization of an integer-overflow protection mechanism. The is...

CVE-2014-9800

CVE-2014-9800 is an integer overflow in lib/heap/heap.c within the Qualcomm component of Android on Nexus 5 and Nexus 7 (2013) devices prior to 2016-07-05. The vulnerability could be triggered by a crafted application to gain privileges, as described in multiple sources (Android/Qualcomm internal...

CVE-2014-9889

CVE-2014-9889 affects Android on Nexus 5, where drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c does not validate CPP frame messages, enabling privilege escalation via a crafted app. Root cause: lack of CPP frame message validation in Qualcomm component. Impact stated: attacker could gai...

CVE-2014-9896

Technical details (affected product/component, root cause, impact, fix) are not publicly provided in the connected documents. Please monitor for updates from official advisories to obtain confirmed remediation guidance.

CVE-2014-9946

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2015-3831

CVE-2015-3831 affects Android mediaserver, specifically the BpMediaHTTPConnection in media/libmedia/IMediaHTTPConnection.cpp. The readAt function may overflow a buffer when processing data provided by another application, leading to memory corruption and potential code execution within the medias...

CVE-2015-6643

CVE-2015-6643 affects Android Setup Wizard in 5.x (before 5.1.1 LMY49F) and 6.0 (before 2016-01-01). The issue allows a physically proximate attacker to modify device settings or bypass reset protection via the Setup Wizard, indicating an elevation of privilege. Root cause is tied to the Setup Wi...

CVE-2015-8939

CVE-2015-8939 concerns a privilege-escalation flaw in the Qualcomm video driver used by Android on Nexus 7 (2013) . The issue stems from the driver file drivers/video/msm/mdp4_util.c , where data for the red/green/blue stages is not validated, enabling a local attacker with a crafted app to gain ...

CVE-2015-9012

CVE-2015-9012 describes an elevation of privilege in Qualcomm closed‑source components within Android, affecting the Android kernel. The linked records consistently identify the issue as a privilege escalation vulnerability in Qualcomm components used by Android devices, with no public exploit de...

CVE-2015-9053

CVE-2015-9053 describes a buffer overflow in Qualcomm-provided components used in Android CAF builds on devices with the Linux kernel, specifically in the processing of USIM responses. The vulnerability is located in Qualcomm closed-source components integrated in Android, and the issue could all...

CVE-2015-9068

CVE-2015-9068 affects Qualcomm products with Android CAF builds using the Linux kernel. The root cause is improper validation of an argument to a mink syscall, as described in the CVE description. The entry is mapped to a highly critical impact profile (network attack vector, no user interaction,...

CVE-2016-0822

CVE-2016-0822 affects the MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01. The flaw allows a local attacker to gain privileges via a crafted application that leverages conn_launcher access (internal bug 25873324). Impact is privilege escalation within the kernel context. Th...

CVE-2016-0839

CVE-2016-0839 affects mediaserver in Android 6.x, where post_proc/volume_listener.c mishandles deleted effect context. The issue enables remote attackers to trigger memory corruption and potentially execute arbitrary code or cause a denial of service via a crafted media file. Affected component i...

CVE-2016-10235

CVE-2016-10235 is a denial-of-service vulnerability in the Qualcomm Wi‑Fi driver affecting Android kernels. The NVD entry assigns CVSSv3 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, no privileges required, and no user interaction; impact is only on availability (PARTIA...

CVE-2016-10347

CVE-2016-10347 affects Qualcomm components in Android CAF builds using the Linux kernel; the issue is that an argument to a hypervisor function is not properly validated, enabling potential remote exploitation. The vulnerability is serious (CVSS v3 base score 9.8, CRITICAL) with network access an...

CVE-2016-10380

CVE-2016-10380 affects Qualcomm components in Android CAF builds and relates to an information disclosure where the UE can send unprotected MeasurementReports that reveal UE location. Affected environment is Qualcomm-based Android devices using CAF with the Linux kernel. The underlying issue is i...

CVE-2016-10382

CVE-2016-10382 affects Qualcomm products running CAF Android builds on the Linux kernel. The issue is insufficient access control for the I2C bus, enabling potential improper access. Public details consistently describe it as a high-severity vulnerability with a CVSSv3 base score of 9.8 (CRITICAL...

CVE-2016-2411

CVE-2016-2411 describes an elevation of privilege in the Qualcomm Power Management kernel driver on Android 6.x prior to 2016-04-01. The root cause is a vulnerability in the power management kernel component that could allow a local malicious application with root access to execute code in the ke...

CVE-2016-2437

CVE-2016-2437 concerns the NVIDIA video driver in Android on Nexus 9 devices. The issue allows a locally executed, crafted application to gain privileges and execute code in the kernel context due to an internal bug (27436822). Public description confirms local privilege escalation with high impa...

CVE-2016-2487

CVE-2016-2487 affects libstagefright in the Mediaserver component of Android. A crafted application can escalate privileges to obtain Signature/SignatureOrSystem access on Android 4.x (before 4.4.4), 5.0.x (before 5.0.2), 5.1.x (before 5.1.1), and 6.x (before 2016-06-01). Impact is elevated privi...

CVE-2016-2492

The CVE-2016-2492 entry describes an elevation-of-privilege in the MediaTek power-management driver on Android devices prior to 2016-06-01, specifically affecting Android One. A local attacker could exploit a crafted application to gain kernel-level privileges. The Android 2016-06-01 security bul...

CVE-2016-2498

CVE-2016-2498 affects the Qualcomm Wi‑Fi driver in Android on Nexus 7 (2013) devices, prior to 2016-06-01, enabling a crafted application to bypass data access restrictions and potentially disclose data. The vulnerability is documented as an information-disclosure issue tied to the Wi‑Fi driver. ...

CVE-2016-3767

CVE-2016-3767 is an elevation-of-privilege flaw in the MediaTek Wi‑Fi driver affecting Android One devices prior to the 2016-07-05 patch level. A locally executed, crafted application could gain kernel privileges due to MediaTek internal bug ALPS02689526 (Android internal bug 28169363). The issue...

CVE-2016-3823

CVE-2016-3823 affects the Mediaserver in Android’s mediaserver, specifically the secure-session feature in the mm-video-v4l2 venc component. The issue arises from mishandling heap pointers, enabling a crafted application to gain privileges. Affected products/versions include Android 4.x before 4....

CVE-2016-3846

The vulnerability CVE-2016-3846 affects the Serial Peripheral Interface (SPI) driver in Android on Nexus 5X and Nexus 6P (before 2016-08-05). Root cause: an internal bug (28817378) enables a local attacker’s crafted app to escalate privileges within the kernel. Impact: privilege escalation could ...

CVE-2016-3871

CVE-2016-3871 refers to multiple buffer overflows in codecs/mp3dec/SoftMP3.cpp within libstagefright/mediaserver on Android. The root cause is memory corruption in the MP3 decoding path, enabling a crafted application to gain privileges. Affected platforms include Android 4.x up to 4.4.4, 5.0.x u...

CVE-2016-3875

Technical details beyond the Initial Description are not provided in the connected documents. No vendor/product/version/remediation specifics are present. Monitor for updates.

CVE-2016-3884

CVE-2016-3884 affects Android's Notification Manager Service (server/notification/NotificationManagerService.java) in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01. The root cause is missing UID checks, which allows a crafted application to bypass restrictions on method calls, constitut...

CVE-2016-3888

CVE-2016-3888 affects Android 4.x (4.4.4+), 5.0.x (5.0.2+), 5.1.x (5.1.1+), 6.x (before 2016-09-01) and 7.0 (before 2016-09-01). The issue, in internal/telephony/SMSDispatcher.java, lets physically proximate attackers bypass Factory Reset Protection and trigger premium SMS sending during Setup Wi...

CVE-2016-3892

CVE-2016-3892 affects the Qualcomm SPMI driver in Android prior to 2016-09-05 on Nexus 5, 5X, 6 and 6P. The issue is an information-disclosure vulnerability that allows a crafted Android application to obtain sensitive data due to flaws in the SPMI driver. Impact is described as partial confident...

CVE-2016-3920

CVE-2016-3920 affects Android Mediaserver (libstagefright) via id3/ID3.cpp. A crafted file could cause a denial of service (device hang or reboot) in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01. Connected sources confirm the issue and note that...

CVE-2016-3922

CVE-2016-3922 affects Android Telephony: libril/RilSapSocket.cpp in the Telephony stack on Android 6.x (before 2016-10-01) and 7.0 (before 2016-10-01) relies on variable-length arrays, enabling privilege elevation via a crafted app. Root cause: use of variable-length arrays in the vulnerable code...