CVE-2023-33891

CVE-2023-33891 affects the telephony service due to a missing permission check, enabling local information disclosure without additional privileges. The provided documents identify the issue and its impact but do not specify affected products, exact patch versions, or remediation steps. Exploitat...

CVE-2023-40647

CVE-2023-40647 concerns a missing permission check in the Messaging component that could enable local information disclosure without requiring additional execution privileges. Multiple connected sources (including Red Hat, NVD, CNNVD, and related advisories) consistently describe the issue as a l...

CVE-2023-42678

CVE-2023-42678 affects the imsservice in UNISOC chipsets. The root cause is a missing permission check that allows writing permission usage records for an app, enabling local information disclosure without additional execution privileges. The NVD entry (CVSS v3.1: LOCAL attack vector, LOW complex...

CVE-2023-42695

CVE-2023-42695 : In the wifi service, a missing permission check could allow local escalation of privilege. Multiple sources (NVD, Red Hat, CVE listing, CNNVD) describe this issue as a local, low-privilege path to obtain HIGH impact on confidentiality, integrity, and availability, with CVSSv3.1 b...

CVE-2023-48355

In CVE-2023-48355, the issue is a missing bounds check in the jpg driver, leading to an out-of-bounds write. The impact is locally exploitable with SYSTEM privileges required and can cause denial of service (availability impact high) while confidentiality and integrity are not affected. Public re...

CVE-2024-20109

CVE-2024-20109 affects the component identified as ccu (referenced across Red Hat/NVD entries and related advisories). The root cause is a missing bounds check that allows an out-of-bounds write, resulting in local escalation of privileges with System-level execution privileges required. No user ...

CVE-2024-20122

In vdec, a defect described as an out-of-bounds read due to improper structure design could cause local information disclosure with system-level privileges required. The vulnerability requires no user interaction for exploitation. A remediation is listed as Patch ID ALPS09008925 (Issue MSV-1572)....

CVE-2024-43766

CVE-2024-43766 describes an information-disclosure vulnerability in the Android Bluetooth stack caused by invalid error handling in multiple functions of a file named btm_ble_sec.cc . The issue could enable remote information disclosure to a proximal/adjacent attacker with no additional execution...

CVE-2026-0051

CVE-2026-0051 describes a vulnerability in multiple functions of ubsan_throwing_runtime.cpp that can trigger a system crash via improper input validation, leading to remote denial of service with no extra privileges and no user interaction required. The CVE is documented across NVD entries and re...

CVE-2026-0063

CVE-2026-0063 affects the Android framework component PhoneInterfaceManager.java, where a logic error in setAllowedCarriers could disable carrier restrictions, enabling local privilege escalation with no additional privileges and no user interaction required. The issue is cataloged as an Elevatio...

CVE-2026-0070

CVE-2026-0070 affects Android’s DevicePolicyManagerService.java, where improper input validation can enable hiding a system critical package, causing a local denial of service without extra privileges. The available documents consistently describe the issue as a local DoS through the described co...

CVE-2026-0071

Summary: CVE-2026-0071 affects SettingsLib where a logic error may skip a permission check, enabling local escalation of privilege with no additional privileges or user interaction required. The vulnerability is described across NVD, ENISA EUVD, CVE records, and PT/security bulletins, all citing ...

CVE-2026-0086

CVE-2026-0086 affects the Android component DisableSupervisionActivity.kt, where in onCreate a missing null check can permit deletion of supervision data. This enables local escalation of privilege without extra execution privileges and without user interaction. CVSSv3.1 vector (L, L, N, U) yield...

CVE-2026-0100

CVE-2026-0100 : The description across NVD, OSV, and vuln enrichment indicates a vulnerability in the Load path of LoadedArsc.cpp causing an out-of-bounds write via a heap buffer overflow. This can enable local privilege escalation with no extra execution privileges required; exploitation is poss...

CVE-2026-28580

Technical details about CVE-2026-28580 (affected products, vulnerable components, root cause, and fixes) are not publicly available in the provided documents. Monitor for updates in the connected feeds (NVD, EUVD, OSV) for confirmation and patches.

CVE-2014-9781

CVE-2014-9781 is a buffer overflow in drivers/video/fbcmap.c within the Qualcomm components of Android on Nexus 7 (2013) devices, prior to 2016-07-05. The underlying issue is a buffer overflow in the fbcmap driver that could allow a crafted application to escalate privileges. Affected stack: Andr...

CVE-2014-9964

Technical details about CVE-2014-9964 (affected components, root cause, affected versions, exploitability, remediation) are not publicly provided in the connected documents. Monitor for updates from official sources (NVD, Android bulletins) for specifics.

CVE-2014-9979

CVE-2014-9979 affects Qualcomm products with CAF Android builds using the Linux kernel. The vulnerability is a TrustZone system call issue caused by an uninitialized variable in the kernel, potentially leading to compromise of secure memory. The available documents explicitly describe the root ca...

CVE-2015-6624

CVE-2015-6624 affects Android 6.0 and earlier builds; System Server information disclosure allows a crafted application to obtain sensitive permissions (Signature or SignatureOrSystem). The vulnerability is described as a local information-disclosure in System Server, enabling access to restricte...

CVE-2015-9003

In CVE-2015-9003, a cryptographic issue in TrustZone could potentially affect all Android releases from CAF using the Linux kernel. The connected documents identify TrustZone/Android CAF/Linux kernel as the affected area, but do not provide detailed root cause, affected subcomponents, specific vu...

CVE-2015-9013

CVE-2015-9013 is described as an elevation-of-privilege vulnerability in Qualcomm closed‑source components used by Android, affecting the Android kernel. The connected docs identify the issue as a Qualcomm/Android kernel problem but do not provide concrete exploit details, affected versions beyon...

CVE-2015-9021

CVE-2015-9021 describes a security issue where, in all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled. The entry lists a MEDIUM overall impact (CVSS2: AV:N/AC:M/Au:N/C:N/I:N/A:P; CVSS3: LOCAL, LOW/L, NONE to partial impacts) and indicates no public...

CVE-2015-9039

Summary: CVE-2015-9039 affects the Qualcomm eMBMS component in Android CAF builds that use the Linux kernel. The root cause is an assertion that can be reached by a sequence of downlink messages in eMBMS, enabling a potential unauthorized operation. The vulnerability has a high/critical impact pr...

CVE-2015-9047

CVE-2015-9047 affects Qualcomm components in Android CAF builds using the Linux kernel, describing a GNSS vulnerability that occurs when a scan is performed after bootup. The CVE entry notes affected software as Qualcomm products with CAF Android releases and the GNSS subsystem, with a CVSSv3 bas...

CVE-2015-9052

CVE-2015-9052 affects Qualcomm components in Android CAF builds using the Linux kernel LTE stack; the issue is an assertion that can be reached while processing a downlink message. The provided documents do not specify affected product versions, exact root cause details, exploit status, or availa...

CVE-2016-10231

CVE-2016-10231 is an elevation-of-privilege vulnerability in the Qualcomm sound codec driver affecting the Android kernel. The issue could allow a local attacker with access to the device to execute code with kernel privileges. Public references in the connected records tie it to the Qualcomm sou...

CVE-2016-10337

Technical details for CVE-2016-10337 are not publicly available in the provided connected documents. The materials confirm a generic Android/Linux kernel validation issue but do not specify affected products, versions, exploitability, impact, or fixes. Monitor for updates.

CVE-2016-10384

CVE-2016-10384 affects Qualcomm products with Android CAF builds that use the Linux kernel and involve the WLAN driver ioctl. The underlying issue is a potentially reachable assertion in the WLAN driver ioctl, as described in the CVE entry. The Android Security Bulletin (April 2018) notes securit...

CVE-2016-3747

CVE-2016-3747 is a use-after-free vulnerability in the mm-video-v4l2 venc component of Android’s Mediaserver. The flaw affects Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01. Exploitation could allow a crafted application to escalate privileges, demons...

CVE-2016-3748

CVE-2016-3748 affects the Android 6.x sockets subsystem. A local attacker could bypass intended system-call restrictions by a crafted app making an ioctl call, via internal bug 28171804. The published details indicate an elevation-of-privilege flaw in sockets (local access to system calls outside...

CVE-2016-3761

CVE-2016-3761 affects Android NFC: NfcService.java in the NFC stack is vulnerable on Android 4.x up to 4.4.3, 5.0.x up to 5.0.1, 5.1.x up to 5.1.0, and 6.x prior to the 2016-07-01 patch level. A crafted background application can cause a foreground-app information disclosure. Root cause is descri...

CVE-2016-3768

CVE-2016-3768 : Elevation of privilege in the Qualcomm performance component on Android before 2016-07-05 (Nexus 5/6/5X/6P/7 (2013)). Root cause: crafted app exploits Android internal bug 28172137 and Qualcomm bug CR1010644 to gain kernel privileges. Impact: local code execution with high/critica...

CVE-2016-3804

CVE-2016-3804 describes a privilege-escalation in the MediaTek power management driver on Android One devices, prior to 2016-07-05. The root cause is a vulnerability in the MediaTek power management driver that could be exploited by a crafted app to gain higher privileges within the kernel. Affec...

CVE-2016-3813

CVE-2016-3813 is an information-disclosure vulnerability in the Qualcomm USB driver affecting Android on Nexus 5, 5X, 6, and 6P prior to 2016-07-05. A local attacker could exfiltrate sensitive data via a crafted application due to Android internal bug 28172322 and Qualcomm internal bug CR1010222....

CVE-2016-3814

CVE-2016-3814 : NVIDIA kernel driver’s camera component has a heap-buffer overwrite vulnerability that can cause denial of service. Connected docs confirm the heap-overwrite and DoS potential; no explicit remediation details are provided in the supplied materials.

CVE-2016-3825

CVE-2016-3825 affects Android Mediaserver (mm-video-v4l2/vidc/venc/src/omx_video_base.cpp) where a faulty memory allocation in mediaserver could allow a privilege escalation via a crafted app. Affected are Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01. The issue is des...

CVE-2016-3842

The CVE-2016-3842 issue affects the Qualcomm GPU driver in Android on Nexus 5X, 6, and 6P prior to 2016-08-05. A crafted app could escalate privileges locally due to Android internal bug 28377352 and Qualcomm bug CR1002974. Severity is high (local, user interaction required per CVE data). The pat...

CVE-2016-3847

CVE-2016-3847 is a documented vulnerability in the NVIDIA Tegra kernel driver (NVAVP) where a heap write overflow in the nvavp driver could allow a local attacker to gain privileges or execute code. Public details indicate the issue affects Nexus 9 devices running Android prior to the 2016-08-05 ...

CVE-2016-3850

CVE-2016-3850 describes an integer overflow in aboot.c (Qualcomm bootloader) affecting Android devices prior to 2016-08-05, including Nexus 5, 5X, 6P, and 7 (2013). The vulnerability allows privilege escalation via a crafted header field in a boot image. The provided documents do not specify exac...

CVE-2016-3851

CVE-2016-3851 concerns an elevation-of-privilege issue in the LG Electronics bootloader on Nexus 5X devices. The vulnerability arises when a compromised privileged process can be leveraged to gain higher privileges within the system. Public details confirm this is a local escalation risk affectin...

CVE-2016-3855

CVE-2016-3855 affects Qualcomm components in Android; the issue is in drivers/thermal/supply_lm_core.c where a count parameter is not validated, enabling out-of-bounds memory access and potentially a denial of service or other impact via a crafted application. The documents reference Qualcomm int...

CVE-2016-3864

CVE-2016-3864 affects the Qualcomm Radio Interface Layer in Android on Nexus 5, 5X, 6, 6P, and Android One devices prior to 2016-09-05. A crafted application can privilege-escalate to the attacker’s context via the RIL, per Android/Qualcomm bug references. Impact is local privilege escalation wit...

CVE-2016-3897

CVE-2016-3897 affects Android Wi‑Fi: the WifiEnterpriseConfig.java class’s toString() returns the stored password, enabling information disclosure. Affected: Android 4.x before 4.4.4; 5.0.x before 5.0.2; 5.1.x before 5.1.1; 6.x before 2016-09-01. Root cause: sensitive password data is exposed in ...

CVE-2016-3900

CVE-2016-3900 affects Android’s ServiceManager (cmds/servicemanager/service_manager.c). The flaw in ServiceManager allowed a crafted application to register privileged services, enabling local privilege escalation. Affected: Android 5.0.x before 5.0.2; 5.1.x before 5.1.1; 6.x before 2016-10-01; 7...

CVE-2016-3923

CVE-2016-3923 : A vulnerability in Android 7.0’s Accessibility services (mishandling motion events) could allow a local, crafted application to perform touchjacking and gain privileges. Affected: Android 7.0 up to the 2016-10-01 patch level (with fixes addressed in the Android 2016-10-01/2016-10-...

CVE-2016-5855

CVE-2016-5855 affects the Qualcomm SPCom driver in Qualcomm AMSS/Android stacks. The root cause is a user‑supplied buffer being cast to a structure without validating the source buffer size, potentially leading to memory corruption or information exposure as described in the CVE entry. Connected ...

CVE-2016-5858

CVE-2016-5858: A vulnerability in the ioctl handler of Qualcomm components used in Android for MSM, Firefox OS for MSM, and QRD Android. If a user supplies a value that is too large, it can cause an out-of-bounds read, leading to potential information disclosure. The description specifies the aff...

CVE-2016-6680

CNVD-2016-09390 describes CVE-2016-6680 as an information disclosure vulnerability in the Qualcomm CORE/HDD WLAN driver (wlan_hdd_wext.c) on Android devices, prior to 2016-10-05, affecting Nexus 5X and Android One. An attacker could obtain sensitive information by inducing a crafted application t...

CVE-2016-6684

CVE-2016-6684 is documented in the 2016-10-01/10-05 Android vulnerability details as an Information disclosure vulnerability in kernel components. The CVE is associated with Android kernel components (internal bug 30148243) and affects Nexus devices including Nexus 5, 5X, 6, 6P, 9, Nexus Player, ...

CVE-2016-6716

CVE-2016-6716 affects the AOSP Launcher on Android 7.0 (before 2016-11-01). The issue allows a local malicious app to create shortcuts that run with elevated privileges without user consent, constituting a local privilege-escalation by bypassing user interaction. Root cause is a bypass of prompts...