CVE-2017-11093

CVE-2017-11093 affects Android MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel for Display; the issue is a buffer over-read caused by missing upper-bound validation when reading the EDID field num_of_cea_blocks, potentially exposing kernel memory and causing information dis...

CVE-2017-13201

CVE-2017-13201 is an information-disclosure vulnerability in Android’s media framework (mediadrm). Affected Android versions include 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. The Pixel/Nexus security bulletin groups this under Media framework and marks it as Moderate severity, with CVSS...

CVE-2017-13207

CVE-2017-13207 is an information-disclosure vulnerability in Android’s Media Framework (stagefright mpeg4writer) affecting Android 7.0, 7.1.1, 7.1.2 and 8.0. The issue is documented by NVD and reflected in the Pixel/Nexus bulletin under the Media framework. Affected component: stagefright mpeg4wr...

CVE-2017-13219

CVE-2017-13219 affects the Android kernel Synaptics touchscreen controller. Connected sources identify a denial-of-service flaw in the Upstream kernel’s Synaptics touchscreen component, exploitable on Android devices (e.g., Pixel/Nexus context). The vulnerability is a DoS with potential impact on...

CVE-2017-13241

CVE-2017-13241 is an information-disclosure vulnerability in the Android media framework component libstagefright_soft_avcenc . Affected Android versions include 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. The connected sources confirm the issue is an information disclosure vulnerability ...

CVE-2017-13257

CVE-2017-13257 affects Android. The issue is a use-after-free in bta_pan_data_buf_ind_cback (bta_pan_act.cc) that can lead to an out-of-bounds read of memory allocated via malloc, resulting in information disclosure. Exploitation details are not provided beyond a note that user interaction is req...

CVE-2017-13299

CVE-2017-13299 affects the Android media framework libavc. Connected sources indicate the issue is in the Media framework component, impacting Android versions 6.0 through 8.1 (including 6.0.0–8.1). The Pixel/Nexus bulletin classifies CVE-2017-13299 as NSI (not specified/NSI in update table) with...

CVE-2017-14900

CVE-2017-14900 describes a buffer overrun in the WLAN vendor path when the QCA_NL80211_VENDOR_SUBCMD_GET_CHAIN_RSSI is processed and the MAC address attribute contains fewer than 6 bytes. Affected stack includes Android for MSM, Firefox OS for MSM, QRD Android, and CAF Android releases using the ...

CVE-2017-14916

CVE-2017-14916 describes a buffer size validation issue in the message passing interface within Android for MSM, Firefox OS for MSM, and QRD Android (CAF Linux kernel). The flaw arises from improper validation of buffer sizes, enabling a potential high-impact, network-exposed condition with remot...

CVE-2017-15817

CVE-2017-15817 is a Qualcomm WLAN remote code execution vulnerability in CAF Android builds using the Linux kernel. If an access point sends a challenge text longer than 128 bytes, the host driver can fail validation, potentially allowing remote code execution via WLAN. Affected: Qualcomm WLAN co...

CVE-2017-15848

CVE-2017-15848 affects Android for MSM (CAF builds) via the fastrpc kernel driver. A userspace-triggered buffer overflow in the fastrpc driver is the stated vulnerability, potentially enabling local impact with high CVSS2/3 scores (LOCAL, LOW/LOW privileges for CVSS2; LOCAL, LOW privileges, NONE ...

CVE-2017-15853

The CVE-2017-15853 issue affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds on CAF kernels prior to the 2018-04-05 patch level. Root cause: during PTT processing, ptt_sock_send_msg_to_app() may be called without validating packet length, enabling a buffer over-read. Impa...

CVE-2017-18053

CVE-2017-18053 affects Android for MSM/CAF Linux kernel environments and Qualcomm WLAN (Wma) via wma_p2p_lo_event_handler, where improper input validation of fix_param->vdev_id leads to potential out-of-bounds memory reads from firmware. Affected component is the WLAN stack (Wma), with impact ...

CVE-2017-18691

Samsung mobile devices with Exynos8890 (M6.0 and N7.0) are affected by multiple buffer overflows in TSP sysfs cmd_store. Root cause: unsafe handling in TSP sysfs cmd_store leading to buffer overflows. Impact: described as buffer overflows with high/critical severity (CVSS v3.1: 9.8; network acces...

CVE-2017-18693

CVE-2017-18693 affects Samsung mobile devices running KK (4.4), L (5.0/5.1), M (6.0), and N (7.0). A buffer overflow is reported in the fps sysfs entry , with Samsung ID SVE-2016-7510 . Connected sources (Red Hat, CVE listings) corroborate the same description. The documents do not specify affect...

CVE-2017-6263

NVIDIA driver on Android contains a use-after-free vulnerability caused by improper use of the list_for_each kernel macro, potentially enabling local code execution and privilege escalation. Severity is high; exploitation is local and requires no user interaction per the provided data. The issue ...

CVE-2017-6287

CVE-2017-6287 affects NVIDIA libnvrm in Android, caused by a missing bounds check that enables an out-of-bounds read and local information disclosure. Multiple sources (NVD, CNVD, Prion/N-CVE references) describe it as a moderate-severity information-disclosure issue in the media framework compon...

CVE-2017-8243

CVE-2017-8243 is documented with concrete details in connected sources: it affects Qualcomm components, specifically the SoC driver, categorized as Elevation of Privilege (EoP) with a Moderate impact. The root cause is a buffer overflow that can occur when processing a firmware image file. Public...

CVE-2017-8258

CVE-2017-8258 corresponds to an array out-of-bounds access in the camera driver of Qualcomm components on CAF Android releases using the Linux kernel. The vulnerability affects Qualcomm camera driver access within the kernel space and could potentially be triggered by interactions with the camera...

CVE-2017-8272

CVE-2017-8272 affects Qualcomm components in Android CAF builds using the Linux kernel. In a driver function, a value supplied from userspace is not properly validated, potentially causing an out-of-bounds heap write. The vulnerability is described as a kernel-level issue with the potential for m...

CVE-2017-9716

CVE-2017-9716 affects the Qualcomm Qbt1000 driver (Qualcomm components) in Android for MSM and related CAF-based kernels. The vulnerability is described as an Elevation of Privilege (EoP) issue, with CVE records (NVD, CVELIST, CNVD) confirming the driver as the vulnerable component and noting an ...

CVE-2018-11278

CVE-2018-11278 affects CAF Venus HW in Android for MSM, Firefox OS for MSM, and QRD Android builds. The vulnerability occurs when Venus HW decodes input bit stream buffers: it searches for a start code, and if the start code is not found in the entire buffer, the implementation may over-fetch bey...

CVE-2018-11298

CVE-2018-11298 concerns a buffer overflow in Qualcomm WLAN Host within Android CAF builds using the Linux kernel. During processing of the SET_PASSPOINT_LIST command, the realm string passed from upper layers is not guaranteed to be NULL terminated, allowing strlen to determine its length and con...

CVE-2018-11300

CVE-2018-11300 affects Qualcomm WLAN Host in CAF Android releases (Android for MSM, Firefox OS for MSM, QRD Android) where a callback from a worker thread frees memory still in use by the WLAN subsystem, creating a classic Use‑After‑Free condition. This can impact kernel-level security in devices...

CVE-2018-11832

CVE-2018-11832: A heap overflow in the PMIC function due to missing input-size validation affects CAF Android builds (Android for MSM, Firefox OS for MSM, QRD Android). Root cause: lack of input size validation before copying to a buffer. Impact: heap overflow as described in the CVE; exploitatio...

CVE-2018-11868

CVE-2018-11868 describes a buffer overflow in the nan response event handler due to lack of length validation for values received from firmware. The issue affects Android releases (Android for MSM, Firefox OS for MSM, QRD Android) derived from CAF using the Linux kernel, with the root cause being...

CVE-2018-11894

CVE-2018-11894 is listed in Qualcomm WLAN HOST components with High severity. The provided documents indicate the issue arises from an integer overflow while processing preferred network offload scan results, which may lead to a buffer overflow when a large frame length is received from the firmw...

CVE-2018-11897

The CVE-2018-11897 entry concerns CAF Android/Linux kernel WLAN code. Affected: Android releases (Android for MSM, Firefox OS for MSM, QRD Android) using CAF’s Linux kernel. The issue occurs while processing a diag event after connecting to a network, where an out-of-bounds read can occur if the ...

CVE-2018-21041

CVE-2018-21041 affects Samsung mobile devices running O(8.x). The issue allows access to the Gallery inside the Secure Folder without authentication. The vulnerability is rooted in the Secure Folder access flow (exact root cause not detailed in the provided documents). Impact is elevated: unautho...

CVE-2018-21048

CVE-2018-21048 affects Samsung mobile devices running O(8.x) software. The vulnerability manifests as a notification leak on a locked device when in Standalone Dex mode, linked to Samsung’s internal ID SVE-2018-12925. No specific affected models, firmware versions, root cause details, exploit vec...

CVE-2018-21051

The CVE-2018-21051 entry concerns Samsung mobile devices with Exynos N(7.x) and O(8.x) software, where an invalid free in the fingerprint Trustlet can lead to arbitrary code execution. The vulnerability is supported by multiple connected records (e.g., NVD, Red Hat, CNVD) that describe the same i...

CVE-2018-21067

No concrete technical details (affected product/component, root cause, versions, or fix) are provided across the connected documents for CVE-2018-21067. The sources only repeat the generic Samsung Trustlet information disclosure description. Monitor for updates.

CVE-2018-21085

CVE-2018-21085 affects Samsung mobile devices running L(5.x), M(6.0), and N(7.x) with a race condition leading to use-after-free in the vnswap_deinit_backing_storage path. The issue is documented under Samsung’s SVE-2017-11176 identity; no remediation details are provided in the connected sources...

CVE-2018-21090

CVE-2018-21090 affects Samsung mobile devices with software up to 2017-11-03 on S.LSI Exynos modem chipsets, due to a baseband buffer overflow in the Exynos modem chipset. The issue is described across multiple sources (NVD entry, Red Hat advisory, CNVD entry, PRION page, CVE listing) with CVSS v...

CVE-2018-3577

CVE-2018-3577 affects Qualcomm WLAN within Android CAF builds (Android for MSM, etc.) prior to the 2018-06-05 patch level. The issue arises while processing fragments: when fragment count is very large, an integer overflow can cause a buffer overflow. The vulnerability is documented in multiple s...

CVE-2018-3597

CVE-2018-3597 affects the ADSP RPC driver in Android CAF builds using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). Before the 2018-06-05 security patch level, this issue could allow an arbitrary kernel write via a local attack on vulnerable devices. The CVSS metrics in the...

CVE-2018-5853

CVE-2018-5853 describes a race condition in a driver used by CAF Android for MSM (Linux kernel variants) including Android for MSM, Firefox OS for MSM, and QRD Android. The issue potentially leads to a use-after-free condition. Impact details in the provided sources indicate local attack requirem...

CVE-2018-5919

CVE-2018-5919 affects the Qualcomm QCACLD-2.0 WLAN host driver in Android CAF/Linux kernels (Android for MSM, QRD Android). The issue is a use-after-free in the WLAN host driver that can cause the device to reboot. Public remediation references include a CodeAurora patch (commit 81a80c9973833f7cd...

CVE-2018-9454

CVE-2018-9454 affects Android (Android 6.0–8.1). Root cause: in bnep_data_ind of bnep_main.cc, a missing bounds check allows an out-of-bounds read, leading to possible local information disclosure without extra privileges. Impact is information disclosure; exploitation requires local access and d...

CVE-2018-9566

CVE-2018-9566 affects Android devices via an out-of-bounds read in process_service_search_rsp located in sdp_discovery.c. The issue arises from a missing bounds check, enabling potential remote information disclosure when connected to a malicious Bluetooth device. Exploitation requires user inter...

CVE-2018-9567

CVE-2018-9567 affects Pixel devices: a bug in verified boot causes the certificate fingerprint to appear identical despite different signing keys, enabling local privilege escalation with no user interaction. The Android Security Bulletin (Dec 2018) indicates patches at the 2018-12-01 and 2018-12...

CVE-2018-9572

CVE-2018-9572 affects Android 9 in the impd_drc_parse_coeff function of impd_drc_static_payload.c, where a missing bounds check can cause an out-of-bounds write leading to remote code execution with no privileges and requiring user interaction for exploitation. The issue is documented in multiple...

CVE-2018-9575

CVE-2018-9575 affects Android 9, with a vulnerability in impd_parse_dwnmix_instructions in impd_drc_static_payload.c. The root cause is a missing bounds check, causing an out-of-bounds write that could enable remote code execution. Exploitation is described as requiring user interaction, and the ...

CVE-2019-20539

CVE-2019-20539 affects Samsung mobile devices running N(7.x), O(8.x), and P(9.0) on Broadcom chipsets. The vulnerability is an out-of-bounds read in the Wi-Fi vendor command, leading to information leakage. Impact is described as partial confidentiality loss; no exploit details are provided in th...

CVE-2019-20545

Samsung mobile devices with O(8.x) and P(9.0) (Exynos chipsets) are affected by CVE-2019-20545 due to a buffer overflow in the HDCP Trustlet that contaminates secure TEEGRIS memory. The issue is tracked as Samsung SVE-2019-15283 (November 2019). Impact is described as high/critical with potential...

CVE-2019-2055

CVE-2019-2055 affects Android 10 via the libxaac library, where an out-of-bounds write due to a missing bounds check enables remote code execution with the attacker needing no privileges and requiring user interaction. The issue is documented across multiple feeds (NVD, RH, CNVD) and is associate...

CVE-2019-20555

Technical details about CVE-2019-20555 are not publicly provided in the supplied documents. The connected records repeat the same vulnerability description without affected versions, root cause, exploit, or remediation specifics. Monitor for updates from official advisories.

CVE-2019-20559

CVE-2019-20559 affects Samsung mobile devices running Android P (9.0). The vulnerability is in the Gallery application, permitting viewing of photos on the lock screen. The Samsung ID is SVE-2019-15055 (October 2019). The connected documents do not specify the exact root cause, vulnerable compone...

CVE-2019-20572

CVE-2019-20572 describes a buffer overflow in the load_kernel path on Samsung mobile devices with Exynos chips running O(8.1) and P(9.0). The issue is triggered by untrusted data and is documented across multiple feeds (NVD entry and Red Hat/CVE references) under the Samsung ID SVE-2019-14939. Th...

CVE-2019-2058

CVE-2019-2058 concerns a vulnerability in the Android 10 library component libAACdec where an out-of-bounds read can lead to remote information disclosure . The entry states that exploitation requires user interaction and that the affected product is Android 10. Connected sources corroborate the ...