CVE-2023-44127

CVE-2023-44127 involves LG-patched call management (com.android.server.telecom). The issue is that it launches implicit intents which disclose sensitive data (e.g., contact details and phone numbers) to all third-party apps on the same device. Exploitation details are not provided in the document...

CVE-2024-20109

CVE-2024-20109 affects the component identified as ccu (referenced across Red Hat/NVD entries and related advisories). The root cause is a missing bounds check that allows an out-of-bounds write, resulting in local escalation of privileges with System-level execution privileges required. No user ...

CVE-2025-0089

CVE-2025-0089 affects the Android Launcher application and is described as a logic error that can enable local escalation of privilege without user interaction. The issue is listed in the Android security bulletin with high severity (EoP) for Framework and related components, and patch levels 202...

CVE-2025-36902

In CVE-2025-36902, the vulnerable component is syna_tcm2_sysfs.c, specifically the syna_cdev_ioctl_store_pid() function. It reports a heap buffer overflow causing an out-of-bounds write, which could enable local escalation of privilege with System execution privileges required. Exploitation requi...

CVE-2025-48623

CVE-2025-48623 concerns the Linux kernel’s pkvm path in init_pkvm_hyp_vcpu, where an input validation error can cause an out-of-bounds write. The Red Hat/EUVD/NVD/NVD-enrichment entries corroborate a local privilege-escalation impact due to this improper validation, with no user interaction requi...

CVE-2026-0065

CVE-2026-0065 is a local elevation of privilege vulnerability in the Android Framework component, specifically a logic error in the areBackgroundActivityStartsAllowed method of BackgroundLaunchProcessController.java that permits unintended background activity launches. Exploitation requires User-...

CVE-2026-0124

CVE-2026-0124 is described in connected sources as an out-of-bounds write due to a missing bounds check that enables local Elevation of Privilege without user interaction. In the Pixel security bulletin, it is listed under Pixel vulnerabilities as a Bootloader issue (EoP, Critical). The Red Hat a...

CVE-2014-9799

CVE-2014-9799 concerns Android on Nexus 5 and 7 (2013) devices before 2016-07-05, where a Qualcomm makefile omits -fno-strict-overflow, potentially enabling local privilege escalation via crafted apps that exploit incorrect compiler optimization of an integer-overflow protection mechanism. The is...

CVE-2014-9896

Technical details (affected product/component, root cause, impact, fix) are not publicly provided in the connected documents. Please monitor for updates from official advisories to obtain confirmed remediation guidance.

CVE-2014-9897

CVE-2014-9897 affects Android on Nexus 5, in Qualcomm components (sound/soc/msm/qdsp6v2/msm-lsm-client.c). The vulnerability arises because the code path in msm-lsm-client.c does not validate certain user-space data, enabling an attacker to obtain sensitive information via a crafted application. ...

CVE-2014-9898

CVE-2014-9898 affects Android on Nexus 5 and Nexus 7 (2013) devices due to a flaw in arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c where input parameters are not properly validated. This enables a crafted application to obtain sensitive information. The issue is associated with Android internal bug ...

CVE-2014-9965

Technical details about CVE-2014-9965 are not publicly available in the provided connected documents. The descriptions restate the parsing issue in Android CAF/Linux SCM call handling; monitor for updates from the cited sources.

CVE-2014-9980

Technical details for CVE-2014-9980 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-0576

CVE-2015-0576 describes a buffer overflow in the HSDPA component used by Qualcomm in Android CAF/Linux kernel implementations. Connected sources corroborate a Qualcomm HSDPA buffer overflow affecting CAF-based Android releases, with CNVD noting potential arbitrary-code execution or denial of serv...

CVE-2015-3843

The CVE-2015-3843 entry concerns the Android SIM Toolkit (STK) framework prior to 5.1.1 LMY48I. Affected component: STK within Android, related to com/android/internal/telephony/cat/AppInterface.java (internal bug 21697171). Impact: an unprivileged app can intercept or emulate unspecified Telepho...

CVE-2015-6624

CVE-2015-6624 affects Android 6.0 and earlier builds; System Server information disclosure allows a crafted application to obtain sensitive permissions (Signature or SignatureOrSystem). The vulnerability is described as a local information-disclosure in System Server, enabling access to restricte...

CVE-2015-9005

CVE-2015-9005 affects TrustZone on CAF Android builds via the Linux kernel, describing an Integer Overflow that could lead to a Buffer Overflow. The available sources do not provide concrete technical details (no root-cause, patch/version info, or explicit exploit data). The CVSS metrics indicate...

CVE-2015-9037

Summary: CVE-2015-9037 refers to a buffer over-read/overflow in Qualcomm closed-source components used in Qualcomm-based Android devices with CAF/Linux kernel, specifically in the downlink 3G NAS message processing. The vulnerability could allow a remote attacker to execute arbitrary code or caus...

CVE-2015-9044

In CVE-2015-9044, Qualcomm products with CAF Android releases using the Linux kernel have a vulnerability in LTE where an assertion can be reached due to an improper bound on the size of a frequency list. The NVD metrics indicate a CRITICAL impact (Network, No privileges, No user interaction) wit...

CVE-2015-9062

Technical details about CVE-2015-9062 are not publicly provided in the connected documents. Monitor for updates.

CVE-2016-0850

The CVE-2016-0850 issue concerns the PORCHE_PAIRING_CONFLICT in Android’s Bluetooth stack, which allows a remote attacker to bypass pairing restrictions by presenting a crafted device. Affected Android versions include 4.x (before 4.4.4), 5.x (before 5.0.2 for 5.0, before 5.1.1 for 5.1), and 6.x ...

CVE-2016-2440

CVE-2016-2440 affects Android’s Binder component, specifically the code path in libs/binder/IPCThreadState.cpp within Binder. The description indicates that object references are mishandled, allowing a crafted application to gain privileges (elevation of privilege) on affected Android versions. A...

CVE-2016-2444

CVE-2016-2444 : Elevation of privilege in the NVIDIA media driver on Android (Nexus 9) prior to 2016-05-01. A crafted application could allow a local attacker to gain privileges within the kernel context. Affected component: NVIDIA media driver; affected device: Nexus 9 (Android). Root cause: mem...

CVE-2016-2446

The CVE-2016-2446 entry concerns an Elevation of Privilege in the NVIDIA video driver on Android, affecting Nexus 9 devices prior to the 2016-05-01 patch. The vulnerability could allow a locally installed app to execute arbitrary code in the kernel context, enabling privilege escalation. Affected...

CVE-2016-2456

CVE-2016-2456 affects the MediaTek Wi‑Fi driver in Android One devices (pre May 1, 2016). The issue is an elevation of privilege via a crafted app, tied to internal bug 27275187. Root cause details are not provided beyond this description. The Android Security Bulletin indicates patch levels of M...

CVE-2016-2498

CVE-2016-2498 affects the Qualcomm Wi‑Fi driver in Android on Nexus 7 (2013) devices, prior to 2016-06-01, enabling a crafted application to bypass data access restrictions and potentially disclose data. The vulnerability is documented as an information-disclosure issue tied to the Wi‑Fi driver. ...

CVE-2016-3768

CVE-2016-3768 : Elevation of privilege in the Qualcomm performance component on Android before 2016-07-05 (Nexus 5/6/5X/6P/7 (2013)). Root cause: crafted app exploits Android internal bug 28172137 and Qualcomm bug CR1010644 to gain kernel privileges. Impact: local code execution with high/critica...

CVE-2016-3770

CVE-2016-3770 concerns MediaTek driver privilege-escalation on Android One devices. The issue arises from MediaTek drivers in Android prior to 2016-07-05 that allow a locally crafted application to gain elevated privileges (Android internal bug 28346752; MediaTek ALPS02703102). The vulnerability ...

CVE-2016-3818

CVE-2016-3818 affects libc in Android 4.x prior to 4.4.4. A crafted file can trigger a denial of service, causing a device hang or reboot. Root cause: vulnerability in libc used by Android devices. Impact is limited to DoS (no remote code execution indicated in the provided data). Public remediat...

CVE-2016-3823

CVE-2016-3823 affects the Mediaserver in Android’s mediaserver, specifically the secure-session feature in the mm-video-v4l2 venc component. The issue arises from mishandling heap pointers, enabling a crafted application to gain privileges. Affected products/versions include Android 4.x before 4....

CVE-2016-3825

CVE-2016-3825 affects Android Mediaserver (mm-video-v4l2/vidc/venc/src/omx_video_base.cpp) where a faulty memory allocation in mediaserver could allow a privilege escalation via a crafted app. Affected are Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01. The issue is des...

CVE-2016-3868

CVE-2016-3868 affects the Qualcomm power driver on Nexus 5X and 6P, enabling local privilege escalation via a crafted app. Root cause is in the Qualcomm power driver before 2016-09-05 (Android builds for Nexus devices). The issue is listed as High severity in the 2016-09 Android bulletin; patches...

CVE-2016-3871

CVE-2016-3871 refers to multiple buffer overflows in codecs/mp3dec/SoftMP3.cpp within libstagefright/mediaserver on Android. The root cause is memory corruption in the MP3 decoding path, enabling a crafted application to gain privileges. Affected platforms include Android 4.x up to 4.4.4, 5.0.x u...

CVE-2016-3883

CVE-2016-3883 affects Android Telephony’s SMSDispatcher.java in the Telephony stack. The flaw is that premium-SMS warnings are not properly constructed, allowing a crafted app to spoof the premium-payment confirmation dialog. Affected Android versions include 4.x up to 4.4.4, 5.0.x up to 5.0.2, 5...

CVE-2016-3894

CVE-2016-3894 (Android/Qualcomm DMA component) details: The Nexus 6 Qualcomm DMA component prior to 2016-09-05 is affected by an information disclosure vulnerability exploitable by a crafted Android application, enabling local access to sensitive data. Root cause is in the Qualcomm DMA component;...

CVE-2016-3898

CVE-2016-3898 affects Android Telephony: a crafted application can modify TTY mode by broadcasting an intent, triggering a denial of service that disrupts locked-screen 911 TTY functionality. Affected versions include Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 ...

CVE-2016-3901

CVE-2016-3901 affects the Qualcomm cryptographic engine driver (drivers/crypto/msm/qcedev.c) in Android. It describes multiple integer overflows that enable a local privilege escalation via a crafted application on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices. Root cause is integer overfl...

CVE-2016-3903

CVE-2016-3903 is a vulnerability in the Qualcomm camera driver (drivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c) affecting Android on Nexus 5, 5X, 6, 6P and Android One, prior to the Oct 5, 2016 patch. The connected CNVD entry notes an integer overflow in the Qualcomm camera driver, w...

CVE-2016-3939

CVE-2016-3939 affects the Qualcomm video driver (drivers/video/msm/mdss/mdss_debug.c) in Android on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices. Root cause is in the Qualcomm mdss_debug path that allows a crafted application to gain privileges locally. Public details indicate an elevatio...

CVE-2016-6718

CVE-2016-6718 is an elevation-of-privilege issue in the Android 7.0 Account Manager Service. A local malicious app could bypass user interaction requirements and retrieve sensitive information without user consent. The root cause is a local bypass of interaction prompts within the Account Manager...

CVE-2016-6720

CVE-2016-6720 is an information-disclosure vulnerability in libstagefright within Mediaserver on Android. A local malicious application could access data outside its permissions by exploiting Mediaserver’s handling of media processing. Affected Android versions include 4.x before 4.4.4, 5.0.x bef...

CVE-2016-6728

CVE-2016-6728 is a privilege-escalation flaw in the kernel ION subsystem of Android that could allow a local malicious app to execute code in kernel context. The issue is triggered via ION memory management and historically affects Android releases prior to the 2016-11-05 patch level, with potent...

CVE-2016-6745

Summary (CVE-2016-6745) : Elevation of privilege in the Synaptics touchscreen driver on Android (pre-2016-11-05) could allow a local, malicious app to execute arbitrary code in the kernel context. This requires a privileged process to be compromised first, making it a local-privilege-elevation is...

CVE-2016-7989

CVE-2016-7989 affects Samsung Galaxy S4–S7. A malformed OTA WAP PUSH SMS containing an OMACP message triggers an unhandled ArrayIndexOutOfBoundsException in Samsung’s WifiServiceImpl (wifi-service.jar), causing the Android runtime to crash repeatedly and render the device unusable until a factory...

CVE-2016-8423

CVE-2016-8423 is an elevation-of-privilege vulnerability in the Qualcomm bootloader that could let a local malicious app execute arbitrary code in the kernel context. Public sources describe Android as the affected product, with explicit remediation tied to the 2017-01-05 patch level for devices ...

CVE-2017-0617

CVE-2017-0617 is a Privilege Escalation in the MediaTek video driver on Android. The issue allows a local malicious app to execute code in the kernel context by exploiting the MediaTek video driver after compromising a privileged process. Affected component: MediaTek video driver (Android). Impac...

CVE-2017-0636

CVE-2017-0636 is an elevation of privilege in the MediaTek command queue driver on Android, enabling a local attacker to execute arbitrary code in the kernel context. Affected component: MediaTek command queue driver (MediaTek components in the 2017-06 Android bulletin). Root cause: vulnerability...

CVE-2017-0710

CVE-2017-0710 is an elevation-of-privilege vulnerability in the Android kernel (Upstream Linux tcb/KernelTCB). The CNVD entry describes a privilege-lifting issue in KernelTCB in Android where an attacker could bypass privilege validation and access arbitrary ptrace, enabling local privilege escal...

CVE-2017-11025

CVE-2017-11025 affects Android on MSM (and related CAF/Linux-based Android builds) with a race condition in audio_effects_shared_ioctl() that can lead to memory corruption. The vulnerability is associated with Qualcomm Audio and is categorized in connected sources as an elevation-of-privilege iss...

CVE-2017-11040

CVE-2017-11040: Information disclosure in Qualcomm CAF Android releases using the Linux kernel. Reading from sysfs nodes may expose more information than allowed, enabling partial confidentiality loss (CVSS2: 4.3; CVSS3: 5.5). Affected: Qualcomm products with CAF Android builds on Linux kernel; i...