CVE-2017-13200

CVE-2017-13200 is an information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization. The consolidating sources identify the affected Android versions as 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. The vulnerability is classified as ID (information disclosure) with ...

CVE-2017-13203

CVE-2017-13203 is a disclosed vulnerability in the Android media framework (libavc) that enables information disclosure. Affected products/versions: Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Root cause is in libavc within the Media framework; CVSS details indicate Confidentiality impact HIGH (or PARTI...

CVE-2017-13222

CVE-2017-13222 is an information-disclosure vulnerability in the Android Upstream/kernel layer affecting the Android kernel. The connected records confirm it is a kernel/Upstream information disclosure issue (Android ID A-38159576) with no public exploitation details provided in the documents. Th...

CVE-2017-13226

CVE-2017-13226 is a MediaTek MTK elevation-of-privilege vulnerability affecting the Android kernel. The connected records identify MTK as the component and describe an EoP issue with MediaTek MTK in Android devices (notably Pixel/Nexus in related bulletins). The documents do not disclose the exac...

CVE-2017-13235

The CVE-2017-13235 entry concerns a vulnerability in the Android Media framework. The provided sources identify it as part of the Pixel/Nexus security bulletin and list affected Android versions 7.0, 7.1.1, 7.1.2, 8.0, and 8.1, within the Media framework component. The Pixel bulletin groups CVE-2...

CVE-2017-13270

CVE-2017-13270 is an Elevation of Privilege (EoP) vulnerability in the upstream kernel mnh_sm driver affecting Android kernel. The issue is categorized as EoP in the Kernel components table of the Pixel/Nexus security bulletin, labeled as Moderate impact for the mnh_sm driver. There is no exploit...

CVE-2017-13295

CVE-2017-13295 is a DoS in the Android framework component known as the package installer. Affected Android versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. The Android Pixel/Nexus bulletin lists this issue under the Framework update with Updated AOSP versions 6.0–8.1 and notes that security pa...

CVE-2017-13301

CVE-2017-13301 is a DoS in Android 8.0’s system UI (Android system UI). The available connected sources indicate this affects Pixel/Nexus devices (Android 8.0) and is categorized as DoS in the Android System UI component, with a moderate severity patch path in the Pixel/ Nexus security bulletin s...

CVE-2017-13306

CVE-2017-13306 is an elevation-of-privilege vulnerability in the Upstream kernel mnh driver affecting Android kernel components. The issue is categorized as EoP with a moderate severity in Android security bulletins, implying a privilege escalation path within the kernel module rather than user-s...

CVE-2017-14873

CVE-2017-14873 affects Android devices using MSM CAF Linux kernels with the Qualcomm graphics driver. The issue is described as a kernel memory overwrite in the pp_pgc_get_config() function, enabling a local escalation of privileges or memory corruption as indicated by the CVSS in public records....

CVE-2017-14892

CVE-2017-14892 affects Android for MSM, Firefox OS for MSM, and QRD Android builds prior to 2017-09-19. The issue stems from not properly validating the return value of q6asm_open_shared_io() in msm_pcm_hw_params(), which can lead to a dangling pointer access. The available sources describe the v...

CVE-2017-14895

CVE-2017-14895 affects Android for MSM/CAF builds using the Linux kernel. After a subsystem reset, the iwpriv interface does not report accurate information. The vulnerability is triggered locally (LOCAL) with low attack complexity and requires no authentication, potentially impacting confidentia...

CVE-2017-18055

The CVE-2017-18055 issue is a buffer overflow in Qualcomm WLAN/Wma. Root cause: improper input validation of wmi_event->num_vdev_mac_entries in wma_pdev_set_hw_mode_resp_evt_handler(), as the event is received from firmware. Affected software/hardware: Android on MSM platforms (CAF/Linux kerne...

CVE-2017-18061

CVE-2017-18061 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel. The vulnerability stems from a potential buffer overflow when processing an AOA (Android Open Accessory) measurement event from WIGIG firmware in wil_aoa_evt_meas(), with Wil6210 as the rela...

CVE-2017-18062

CVE-2017-18062 affects Qualcomm Wma in Android devices (Wma driver) with CAF-based Android/Linux stacks. Root cause: potential buffer overflow in wma_process_utf_event() while handling UTF events, leading to local elevation of privilege (EoP). Documented impact: EoP with high confidentiality, int...

CVE-2017-18281

CVE-2017-18281 describes a vulnerability in the Android Video component used by CAF (Linux kernel-based) where a boolean variable is typecast to int before reading, causing an out-of-bounds read. Affected is Android releases that rely on CAF with the Linux kernel. According to NVD, the CVSS metri...

CVE-2017-18658

Samsung mobile devices running M(6.0) software are affected by CVE-2017-18658 via the multiwindow_facade API. The vulnerability allows an attacker to cause a NullPointerException and system halt by attempting a screen touch on a non-existing display. Affected component and root cause are noted as...

CVE-2017-18669

CVE-2017-18669 affects Samsung mobile devices running N(7.x) software. The issue is caused by Persona exposing an unprotected API that allows launching any activity with system privileges, enabling privilege escalation from a normal user to a system-level operation. Root cause: unprotected API ex...

CVE-2017-18677

CVE-2017-18677 affects Samsung mobile devices running M (6.0) and N (7.x). The root cause described across connected sources is an unprotected Intent that allows an attacker to reset the configuration of certain applications. Impact stated: attacker can reset app configurations, with no explicit ...

CVE-2017-3749

CVE-2017-3749 affects Lenovo VIBE phones (Idea Friend Android app). The vulnerability allows private data to be backed up and restored via Android Debug Bridge, enabling tampering that leads to privilege escalation when exploited with CVE-2017-3748 and CVE-2017-3750. Connected sources also descri...

CVE-2017-6292

Summary: CVE-2017-6292 is an integer overflow in NVIDIA TLZ TrustZone’s TA-to-TA communication handler that can cause an out-of-bounds write, potentially enabling local code execution or denial of service within TrustZone. Affected: NVIDIA TLZ TrustZone OS components on Android devices (notably S...

CVE-2017-8254

CVE-2017-8254 affects Qualcomm-based Android devices that use CAF builds with the Linux kernel. The issue is a null/invalid audio client pointer being dereferenced before it is validated, as described in the CVE entry. The documented impact in the provided sources is limited to this dereference t...

CVE-2017-8256

CVE-2017-8256 affects Qualcomm components in Android CAF builds using the Linux kernel. The vulnerability is an array bounds issue that can occur when userspace sends more than 16 multicast addresses, potentially enabling memory corruption within the kernel. The NVD entry lists CVSS2/3 base score...

CVE-2017-8264

CVE-2017-8264 affects the camera driver in all Qualcomm products with Android CAF builds on the Linux kernel. The issue results from a userspace process that can cause a Denial of Service in the Qualcomm camera driver. The available documents do not specify the exact vulnerable component version,...

CVE-2017-8280

CVE-2017-8280 affects Qualcomm WLAN driver in Android CAF builds using the Linux kernel. The issue arises during the wlan calibration data store/retrieve operation, where a race condition can lead to a memory leak and a buffer overflow during context switches. In scope here are Qualcomm products ...

CVE-2017-9686

The CVE-2017-9686 issue affects the Qualcomm SPS driver in Android environments (CAF/Linux kernel variants that include Android for MSM/CAF). Root cause is a double free/use-after-free in the SPS driver when debugfs logging is enabled. Reported impact includes local access with partial confidenti...

CVE-2017-9701

Technical details about CVE-2017-9701 are not publicly available in the provided connected documents; the information comes from the initial description only. Monitor for updates.

CVE-2017-9706

Technical details about CVE-2017-9706 are not provided in the supplied documents. The initial description only notes a potential array out-of-bounds in a display driver; no vendor/product/version specifics or fixes are included. Monitor for updates.

CVE-2017-9719

CVE-2017-9719 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel with the MDSS HDMI CEC kernel driver. The issue is a buffer overflow in HDMI CEC parsing when the frame size is out of range, potentially enabling local code execution with high impact on conf...

CVE-2017-9721

CVE-2017-9721 describes a buffer overflow in the boot loader when parsing the splash image, affecting Android on MSM (and related CAF-based builds) and related Qualcomm components. The entry notes the vulnerability arises in the splash image parsing path in the boot loader, with CVSS details indi...

CVE-2018-11260

CVE-2018-11260 affects Android CAF WLAN components in Android releases built on the CAF Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The issue is described as an integer overflow during processing of an FILS connection request, which can lead to a buffer overflow when the key ...

CVE-2018-11281

CVE-2018-11281 describes a use-after-free condition in CAF-based Android variants (Android for MSM, Firefox OS for MSM, QRD Android) due to unsafe handling of IPA_IOC_MDFY_RT_RULE IOCTL header entries. If called for entries that were previously deleted, the header is used without proper validatio...

CVE-2018-11294

CVE-2018-11294 affects Qualcomm CAF Android WLAN components (WLAN HOST). The issue arises in the WLAN firmware handling, where information for 4 Access Categories (AC) is provided but only the first 3 ACs are copied due to improper conditional logic. This truncation potentially affects the WLAN A...

CVE-2018-11852

CVE-2018-11852 affects Qualcomm WLAN host components used in Android (CAF Qualcomm WLAN stack). The vulnerability stems from an improper check in the WMA API for inputs received from firmware, which can cause an out-of-bounds write to the host structure. According to the Pixel security bulletin, ...

CVE-2018-11886

CVE-2018-11886 affects Qualcomm WLAN host in Android CAF/linux-kernel WLAN stack. Root cause: missing validation when calculating MPDU data length leads to an integer overflow, then a buffer overflow in the WLAN function. Impact per sources is consistent with local, low-privilege exploitation and...

CVE-2018-11898

CVE-2018-11898 affects Qualcomm WLAN host components in CAF Android builds (Android for MSM/CAF Linux kernel). The issue is an out-of-bounds read when processing a start BSS request if the SSID length exceeds the maximum, leading to potential memory access violations. The NVD entry and related re...

CVE-2018-14981

CVE-2018-14981 affects LG devices running Android 6.0–8.1, where the SystemUI application’s intents grant incorrect access control. The root cause is an access-control fault in SystemUI intents, enabling bypass of security restrictions; exploitation status is not detailed in the provided document...

CVE-2018-14982

According to CNVD-2020-28452, CVE-2018-14982 affects LG devices based on Android 6.0–8.1, with the GNSS application performing incorrect access control. The root cause is described as an access-control flaw that could let a remote attacker gain access to the GNSS app. The connected sources indica...

CVE-2018-21058

CVE-2018-21058 affects Samsung mobile devices running Android 7.0/8.0 on Exynos 7420/8890/8996. The issue enables cache attacks against the Keymaster AES-GCM implementation because T-Tables are used and the Cryptography Extension (CE) is not utilized. Samsung ID: SVE-2018-12761. No exploitation o...

CVE-2018-21065

The CVE-2018-21065 entry concerns an integer underflow in eCryptFS on Samsung mobile devices running Android M/N/O, caused by a missing size check (Samsung ID SVE-2017-11855). Affected products are Samsung mobile devices with M(6.0), N(7.x), and O(8.x) software. The available documents describe t...

CVE-2018-3579

The CVE-2018-3579 issue affects the WLAN driver in CAF Android builds (Android for MSM, Firefox OS for MSM, QRD Android) that use the Linux kernel. The root cause is that event->num_entries_in_page, a value received from firmware, is not properly validated, which can lead to a buffer over-read...

CVE-2018-3580

CVE-2018-3580 describes a stack-based buffer overflow in the WLAN driver when the pmkid_count exceeds the PMKIDCache size on CAF Android (Android for MSM, Firefox OS for MSM, QRD Android) builds using the Linux kernel. The issue affects all such Android releases and relates to the PMKID cache siz...

CVE-2018-5834

CVE-2018-5834 affects Android CAF WLAN components (Android for MSM, Firefox OS for MSM, QRD Android) via a buffer overwrite in the kernel interface path __wlan_hdd_cfg80211_vendor_scan(). The issue is described as a potential buffer overwrite in CAF Android releases before the 2018-06-05 patch le...

CVE-2018-5840

CVE-2018-5840 is a Buffer Copy without Checking Size of Input in the DRM SDE driver initialization path of Android/Linux kernel (CAF variants). The NVD entry states impact as high (local, user interaction required) with a high both for CVSS3 and CVSS2. Affected component appears in the Qualcomm G...

CVE-2018-5890

CVE-2018-5890 affects Android CAF builds (Android for MSM, Firefox OS for MSM, QRD Android) where fdt_totalsize of the current device tree is reported as 0, bypassing a check for a valid device tree. Described impact: bypass of device-tree validation before patch level 2018-06-05. Patch level 201...

CVE-2018-9476

CVE-2018-9476 affects Android 8.0–8.1 via the Bluetooth stack: avrc_pars_browsing_cmd in avrc_pars_tg.cc, where a use-after-free caused by improper locking can enable remote privilege escalation with no user interaction. Exploitation is described as remote, with no additional execution privileges...

CVE-2018-9487

CVE-2018-9487 affects Android components (Vpn.java: setVpnForcedLocked) where a bad UID check could block internet traffic through VPN, causing a local denial of service. Impact per available data: LOCAL attack vector with HIGH availability impact; UI interaction required for exploitation. CVSS m...

CVE-2018-9519

CVE-2018-9519 affects Android, specifically the Easel component (easelcomm_hw_build_scatterlist). The issue is a race-condition–driven out-of-bounds write in the kernel that can lead to local escalation of privileges with System privileges required; no user interaction is needed. The available do...

CVE-2018-9536

CVE-2018-9536 affects Android 9 via libFDK, where out-of-bounds writes result from incorrect bounds checks. This vulnerability can enable remote code execution with no extra privileges, requiring user interaction to exploit. Public references in the connected documents include the Android 2018-11...

CVE-2018-9557

CVE-2018-9557 affects Android 7.0, 7.1.1, and 7.1.2. In really_install_package() within install.cpp, there is a possible free of arbitrary memory caused by uninitialized data, enabling local elevation of privilege without extra execution privileges and without user interaction. The NVD entry conf...