CVE-2018-11985

CVE-2018-11985 affects Android releases (Android for MSM, Firefox OS for MSM, QRD Android) built with CAF Linux kernel. The vulnerability is a heap overflow caused by an integer overflow when allocating heap with a user-supplied size, arising from roundup to native pointer. CVSS2/3 indicate MEDIU...

CVE-2018-21084

Samsung mobile devices running L(5.1), M(6.0), and N(7.x) contain a race condition leading to a read-after-free in get_kek (CVE-2018-21084; Samsung ID SVE-2017-11174). Connected sources confirm the vulnerability exists but do not specify affected models beyond the Android/Samsung platforms or pro...

CVE-2018-3577

CVE-2018-3577 affects Qualcomm WLAN within Android CAF builds (Android for MSM, etc.) prior to the 2018-06-05 patch level. The issue arises while processing fragments: when fragment count is very large, an integer overflow can cause a buffer overflow. The vulnerability is documented in multiple s...

CVE-2018-5853

CVE-2018-5853 describes a race condition in a driver used by CAF Android for MSM (Linux kernel variants) including Android for MSM, Firefox OS for MSM, and QRD Android. The issue potentially leads to a use-after-free condition. Impact details in the provided sources indicate local attack requirem...

CVE-2018-5899

CVE-2018-5899 affects Android CAF builds (Android for MSM, Firefox OS for MSM, QRD Android) with the Linux kernel used in these releases. A use-after-free occurs in the TDLS path: netbuf is freed in ol_tx_completion_handler and subsequently accessed by NBUF_UPDATE_TX_PKT_COUNT. This use-after-fre...

CVE-2018-5919

CVE-2018-5919 affects the Qualcomm QCACLD-2.0 WLAN host driver in Android CAF/Linux kernels (Android for MSM, QRD Android). The issue is a use-after-free in the WLAN host driver that can cause the device to reboot. Public remediation references include a CodeAurora patch (commit 81a80c9973833f7cd...

CVE-2018-9358

CVE-2018-9358 describes an out-of-bounds read in Bluetooth code path: in gatts_process_attribute_req (gatt_sc.cc), a missing bounds check can read uninitialized data, enabling remote information disclosure in the Bluetooth process without extra privileges and with no user interaction. Affected: A...

CVE-2018-9487

CVE-2018-9487 affects Android components (Vpn.java: setVpnForcedLocked) where a bad UID check could block internet traffic through VPN, causing a local denial of service. Impact per available data: LOCAL attack vector with HIGH availability impact; UI interaction required for exploitation. CVSS m...

CVE-2018-9519

CVE-2018-9519 affects Android, specifically the Easel component (easelcomm_hw_build_scatterlist). The issue is a race-condition–driven out-of-bounds write in the kernel that can lead to local escalation of privileges with System privileges required; no user interaction is needed. The available do...

CVE-2018-9572

CVE-2018-9572 affects Android 9 in the impd_drc_parse_coeff function of impd_drc_static_payload.c, where a missing bounds check can cause an out-of-bounds write leading to remote code execution with no privileges and requiring user interaction for exploitation. The issue is documented in multiple...

CVE-2018-9575

CVE-2018-9575 affects Android 9, with a vulnerability in impd_parse_dwnmix_instructions in impd_drc_static_payload.c. The root cause is a missing bounds check, causing an out-of-bounds write that could enable remote code execution. Exploitation is described as requiring user interaction, and the ...

CVE-2018-9582

CVE-2018-9582 affects Android 8.0–9 package installer, enabling local elevation of privilege via bypassing the unknown-source warning in a confused deputy scenario. Exploitation requires no user interaction; attacker gains partial to high impact on confidentiality, integrity, and availability. Th...

CVE-2019-20531

CVE-2019-20531 affects Samsung mobile devices running Android P (9.0) on Exynos chipsets, with a vulnerability in the Wi‑Fi kernel drivers that permits an out-of-bounds read. Related Samsung identifiers: SVE-2019-15692, SVE-2019-15693. CVSS data indicate a High impact on confidentiality and avail...

CVE-2019-20537

CVE-2019-20537 affects Samsung mobile devices on P(9.0) platforms leveraging the SEM Trustlet (TEEGRIS/Qualcomm chipsets). The vulnerability is an arbitrary memory overwrite in the SEM Trustlet, which can lead to arbitrary code execution. Affected hardware/firmware details: Samsung devices using ...

CVE-2019-20539

CVE-2019-20539 affects Samsung mobile devices running N(7.x), O(8.x), and P(9.0) on Broadcom chipsets. The vulnerability is an out-of-bounds read in the Wi-Fi vendor command, leading to information leakage. Impact is described as partial confidentiality loss; no exploit details are provided in th...

CVE-2019-2055

CVE-2019-2055 affects Android 10 via the libxaac library, where an out-of-bounds write due to a missing bounds check enables remote code execution with the attacker needing no privileges and requiring user interaction. The issue is documented across multiple feeds (NVD, RH, CNVD) and is associate...

CVE-2019-20567

The CVE-2019-20567 issue affects Samsung mobile devices running N(7.x), O(8.x), and P(9.0) on Exynos chipsets. The root cause is a heap overflow in up_parm, which leads to code execution in the bootloader. Documented impact is high/severe (bootloader code execution possible). Exploitation details...

CVE-2019-20568

CVE-2019-20568 describes a race condition leading to a Use-After-Free on Samsung mobile devices running O(8.x) and P(9.0) (Exynos and Qualcomm chipsets). The Samsung internal ID is SVE-2019-15067. Connected sources reaffirm the issue but do not provide concrete exploit details, affected component...

CVE-2019-20577

CVE-2019-20577 affects Samsung mobile devices running P(9.0) on Exynos chipsets, where the Mali GPU driver can cause a kernel panic. The issue is documented across multiple sources (NVD, Red Hat RH:CVE-2019-20577, CVE records) with Samsung’s internal reference SVE-2019-14372 (August 2019). Public...

CVE-2019-20594

Affected software/hardware: Samsung mobile devices with O(8.1) and P(9.0) on Exynos chipsets. Vulnerability: a heap overflow in the bootloader. Root cause: heap overflow in bootloader code (unspecified module) leading to potential impact on device integrity. Impact: Partial to high in CVSS terms ...

CVE-2019-2068

CVE-2019-2068 affects Android 10 via libxaac, where an out-of-bounds write due to a missing bounds check could enable remote code execution. Exploitation requires user interaction; the CVSS data indicates network access as a potential vector (NVD) and high impact (RCE) per Android bulletin. Remed...

CVE-2019-20782

CVE-2019-20782 describes a buffer overflow in LG Advanced Flash (LAF) on LG mobile devices running Android 7.x–8.1. The issue is tied to LG’s LAF component and 나타는 root cause is a buffer overflow. Documents specify affected versions and device scope but do not provide exploit details, affected pr...

CVE-2019-2127

CVE-2019-2127 affects Android Media Framework: memory corruption via a use-after-free in AudioInputDescriptor::setClientActive. This can enable local elevation of privilege with no extra execution privileges and no user interaction required. Affected versions include Android 7.0–9.0. The issue is...

CVE-2019-2138

CVE-2019-2138 concerns libxaac on Android 10, where a missing bounds check can cause an out-of-bounds read leading to information disclosure. The vulnerability affects Android 10 and manifests as an information disclosure flaw that requires user interaction to exploit. Root cause is an out-of-bou...

CVE-2019-2172

CVE-2019-2172 is a information-disclosure flaw in the Android 10 libxaac component caused by uninitialized data. The vulnerability could allow access to information without extra execution privileges, with the attack requiring user interaction. Affected product: Android 10 (libxaac in Android). T...

CVE-2019-2203

CVE-2019-2203 is a local elevation-of-privilege in Android’s CryptoPlugin.decrypt due to a heap-buffer overflow causing an out-of-bounds write. Affected: Android 8.0–10. Impact: local privilege escalation with no user interaction (per CVE description). The Red Hat and NVD records corroborate the ...

CVE-2019-2216

CVE-2019-2216 affects Android 10 and is described across multiple sources as a local elevation of privilege due to improper input validation in overlay notifications. The vulnerability could allow a malicious overlaying app to gain high privileges without notifying the user, with exploitation req...

CVE-2019-9260

CVE-2019-9260 affects Android 10 and is a Bluetooth information-disclosure vulnerability caused by an out-of-bounds read from an incorrect bounds check. Exploitation is possible remotely over a network with no user interaction, potentially leading to partial confidentiality loss. NVD metrics show...

CVE-2019-9307

CVE-2019-9307 affects Android 10 libAACdec in the Media framework, with an integer overflow causing an out-of-bounds write and remote code execution; user interaction is required for exploitation. Android 10 security release notes indicate fixes with patch level 2019-09-01 or later, but no exploi...

CVE-2019-9328

CVE-2019-9328 affects the Android 10 Bluetooth stack, with an out-of-bounds read caused by a missing bounds check. This can lead to remote information disclosure without privileges and without user interaction. The entries consistently describe the issue as part of Android 10 and reference the An...

CVE-2019-9351

CVE-2019-9351 affects the Android 10 Framework, specifically a bypass in SyncStatusObserver that allows local information disclosure by failing to enforce a permission check between user profiles. Exploitation is described as requiring no user interaction and provides only local access with parti...

CVE-2019-9387

CVE-2019-9387 describes an out-of-bounds read in the Android Bluetooth stack caused by a missing bounds check. The vulnerability could enable remote information disclosure without requiring privileges or user interaction. Affected product is Android 10 (Android Bluetooth stack); the description d...

CVE-2019-9419

The CVE-2019-9419 issue affects the Android Bluetooth stack on Android 10. It is a possible out-of-bounds read due to a missing bounds check that can allow remote information disclosure without additional privileges or user interaction. Exploitation would occur over the network. Android’s securit...

CVE-2019-9470

CVE-2019-9470 is an Android kernel vulnerability affecting the dma_sblk_start path in abc-pcie.c. The issue is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with system execution privileges required; no user interaction is needed. Publicly documen...

CVE-2020-0089

CVE-2020-0089 is a localElevation of privilege issue in Android 11, caused by a missing permission check in the audio server. The vulnerability allows escalation of privileges to modify audio settings without extra execution privileges or user interaction. Affected software/module: Android 11 aud...

CVE-2020-0128

CVE-2020-0128 affects Android 10 and is described as an out-of-bounds read in the AMPEG4ElementaryAssembler during addPacket, caused by an integer overflow. The impact is information disclosure via remote access without user interaction. The vulnerability is documented across multiple sources (NV...

CVE-2020-0133

CVE-2020-0133 affects Android 10. The issue arises in MockLocationAppPreferenceController.java where a permissions bypass allows spoofing GPS location, enabling local privilege escalation. Exploitation details are not publicly provided in the connected documents; the NVD entry lists local attack ...

CVE-2020-0137

CVE-2020-0137 is an Elevation of Privilege vulnerability in Android 10 where the code path setIPv6AddrGenMode in NetworkManagementService.java bypasses a required networking permission due to a missing permission check. This could allow a locally authenticated attacker to gain privileges with no ...

CVE-2020-0160

Concretely affected: Android 10 devices vulnerable through the Media/SampleTable path in SampleTable.cpp (setSyncSampleParams). The root cause is a missing bounds check that can trigger resource exhaustion, leading to remote denial of service. Exploitation requires user interaction, and the impac...

CVE-2020-0162

CVE-2020-0162 affects Android’s Media Framework (MPEG4Extractor.cpp). The vulnerability arises from improper input validation in parseSampleAuxiliaryInformationOffsets, enabling resource exhaustion that could lead to remote Denial of Service on Android 10. The issue’s impact is a DoS with partial...

CVE-2020-0164

CVE-2020-0164 is an Android/Pixel vulnerability affecting the NFC subsystem. In the function phNxpNciHal_NfcDep_cmd_ext within phNxpNciHal_NfcDepSWPrio.cc, there is an out-of-bounds read caused by a missing bounds check, enabling local information disclosure and potential system-level code execut...

CVE-2020-0166

CVE-2020-0166 affects Android 10, where in multiple functions of URI.java a missing validation during parceling of URI information can lead to local privilege escalation. The Android Security Bulletin (Pixel Update Bulletin) lists CVE-2020-0166 under the Android runtime with Updated AOSP version ...

CVE-2020-0188

The CVE-2020-0188 entry concerns Android 10 and a vulnerability in SettingsSliceProvider.java. In onCreatePermissionRequest, a PendingIntent error can permit a permissions bypass, enabling local elevation of privilege with user privileges required and no user interaction needed. Public disclosure...

CVE-2020-0204

CVE-2020-0204 affects Android 10 with a flaw in InstallPackage (package.cpp) that allows bypassing the initial signature check for an OS update due to a Time of Check/Time of Use condition. This can enable local escalation of privilege, with no additional execution privileges required beyond user...

CVE-2020-0210

CVE-2020-0210 affects Android 10 Framework code (removeSharedAccountAsUser in AccountManager.java), enabling a local elevation of privilege due to a permissions bypass (confused deputy). Exploitation requires no user interaction; local access suffices. The Pixel security bulletin lists this issue...

CVE-2020-0312

CVE-2020-0312 affects Android 11 Battery Saver. It describes a permission bypass caused by an unsafe PendingIntent that could disclose local information; exploitation details are not provided, and no in-the-wild status is stated. The vulnerability is mitigated by Android 11 security updates (patc...

CVE-2020-0317

CVE-2020-0317 affects Android 11, where UsageStatsManager may access protected data due to a missing permission check. The described issue is a local information disclosure with no required user interaction. Documents confirm that Android 11 includes security fixes and release notes listing mitig...

CVE-2020-0318

The CVE-2020-0318 entry affects Android 11 System UI, where an uncaught exception can crash the system, causing a local Denial of Service without requiring user interaction. The impact is a local, permanent DoS on affected devices, with no confidentiality/integrity concerns stated. Exploitation i...

CVE-2020-0319

CVE-2020-0319 is an Android 11 NFC stack vulnerability caused by a missing bounds check that enables an out-of-bounds write, leading to local elevation of privilege with system execution privileges and potential firmware compromise. Exploitation requires user interaction. CVSS v3.1 base score 7.8...

CVE-2020-0331

CVE-2020-0331 affects Android 11, describing a permissions bypass in Settings that can lead to local disclosure of the device IMEI. Exploitation is local, with low attack complexity, requiring LOW privileges and no user interaction. The issue is documented across multiple sources (NVD, Red Hat, P...