CVE-2023-48359

CVE-2023-48359 affects the autotest driver (Unisoc-based platforms) and is caused by improper input validation that can trigger an out-of-bounds write. The documented impact is a local denial of service with SYSTEM privileges required. Affected scope and exact product/version details are not expl...

CVE-2024-20122

In vdec, a defect described as an out-of-bounds read due to improper structure design could cause local information disclosure with system-level privileges required. The vulnerability requires no user interaction for exploitation. A remediation is listed as Patch ID ALPS09008925 (Issue MSV-1572)....

CVE-2024-34663

CVE-2024-34663 concerns an integer overflow in libSEF.quram.so present on Samsung Mobile devices prior to SMR Oct-2024 Release 1. The issue enables local attackers to perform out-of-bounds memory writes, with a local attack vector and no user interaction required. Publicly documented impact indic...

CVE-2025-32324

The CVE-2025-32324 entry concerns the Android ActivityManagerShellCommand.java onCommand path, where a confused deputy could allow arbitrary activity launches and lead to local privilege escalation. The underlying issue enables exploitation with no extra execution privileges and without user inte...

CVE-2025-48540

CVE-2025-48540 describes a local elevation-of-privilege vulnerability in the Android stack caused by a logic error in processTransactInternal of RpcState.cpp, which can trigger a local out-of-memory write. Exploitation requires local access; no user interaction is needed. Public references in And...

CVE-2025-48558

CVE-2025-48558 affects the Android BatteryService.java component, where multiple functions could enable implicit intent hijacking of a system app. This yields local elevation of privilege without extra privileges or user interaction. The connected documents confirm the vulnerability type and impa...

CVE-2025-48562

CVE-2025-48562 is an Android information-disclosure flaw caused by a logic error in the writeContent function of RemotePrintDocument.java. The issue can lead to local information disclosure without additional execution privileges, and exploitation requires user interaction. Multiple connected sou...

CVE-2025-48605

CVE-2025-48605 concerns Android’s KeyguardViewMediator.java, where a logic error in multiple functions enables a potential lockscreen bypass. The vulnerability allows local escalation of privilege without extra execution privileges and without user interaction, as described in multiple sources (N...

CVE-2026-0014

CVE-2026-0014 affects AppOpsService.java (method isPackageNullOrSystem) and describes a possible persistent denial of service due to improper input validation. The issue enables local DoS without user interaction or privileges, as indicated in multiple sources. Exploitation status and specific ex...

CVE-2026-0037

CVE-2026-0037 corresponds to a memory corruption issue in multiple functions of ffa.c, caused by a logic error. The CVE affects Google Android components and is described as enabling local escalation of privilege with no extra execution privileges and no user interaction required. The impact is n...

CVE-2026-0068

In Android, CVE-2026-0068 affects PackageInstallerService.java (createSessionInternal). The vulnerability enables a local attacker to remove a DPC app from a managed device without DO consent due to persistence desync, potentially causing local elevation of privilege if a malicious app is install...

CVE-2014-9781

CVE-2014-9781 is a buffer overflow in drivers/video/fbcmap.c within the Qualcomm components of Android on Nexus 7 (2013) devices, prior to 2016-07-05. The underlying issue is a buffer overflow in the fbcmap driver that could allow a crafted application to escalate privileges. Affected stack: Andr...

CVE-2014-9790

CVE-2014-9790 affects the Qualcomm MMC/debugfs.c component in Android on Nexus 5/7 (2013) prior to 2016-07-05. The bug arises because read/write operations do not validate pointers, enabling a local attacker to gain privileges with a crafted application (privilege escalation). The issue is docume...

CVE-2014-9793

The CVE-2014-9793 issue affects Android on Nexus 7 (2013) devices, where platform/msm_shared/mmc.c in Qualcomm components mishandles the power-on write-protect feature. This can allow a local attacker to escalate privileges via a crafted app. Root cause is a mishandling of write-protect on power-...

CVE-2014-9891

CVE-2014-9891 affects the Qualcomm qseecom driver (drivers/misc/qseecom.c) in Android on Nexus 5 devices prior to 2016-08-05. The issue arises from not validating certain buffer addresses, allowing a local attacker to escalate privileges via a crafted application that invokes an ioctl call. Impac...

CVE-2014-9946

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2014-9949

CVE-2014-9949 is described as a TrustZone vulnerability in Android CAF builds that use the Linux kernel. The issue is an Untrusted Pointer Dereference in TrustZone, with impact articulated as high in the CVSS metrics (LOCAL exploit, low attack complexity, user interaction required, and high confi...

CVE-2015-3840

CVE-2015-3840 affects Android 5.1.1 and earlier via the MessageStatusReceiver service in the AndroidManifest.xml. The vulnerability lets local users alter the sent/received status of SMS and MMS messages without requiring the WRITE_SMS permission. This is a local-privilege-impacting issue affecti...

CVE-2015-9003

In CVE-2015-9003, a cryptographic issue in TrustZone could potentially affect all Android releases from CAF using the Linux kernel. The connected documents identify TrustZone/Android CAF/Linux kernel as the affected area, but do not provide detailed root cause, affected subcomponents, specific vu...

CVE-2015-9045

CVE-2015-9045 is a buffer overflow vulnerability in Qualcomm GERAN within CAF Android builds that use the Linux kernel. The flaw allows a buffer overflow while taking power measurements, impacting affected Qualcomm components. The CVSS data in the public record indicates a high to critical impact...

CVE-2015-9050

CVE-2015-9050 describes an out-of-bounds access during a CA call in Qualcomm CAF Android/Linux kernel components. The NVD entry assigns CRITICAL risk (CVSS3: 9.8) with network attack vector and no user interaction. Connected documents refer to Qualcomm/Android out-of-bounds issues but do not prov...

CVE-2015-9055

Technical details for CVE-2015-9055 are not publicly provided in the connected documents. Please monitor for updates; current documents do not specify affected products, versions, root cause, or fixes beyond the high‑level description.

CVE-2016-0831

The CVE-2016-0831 issue affects Android Telephony: the function getDeviceIdForPhone in internal/telephony/PhoneSubInfoController.java does not check the READ_PHONE_STATE permission, enabling an information disclosure vulnerability. Affected are Android 5.x before 5.1.1 (LMY49H) and 6.x before 201...

CVE-2016-11038

The CVE-2016-11038 issue affects Samsung mobile devices (software up to 2016-04-05) involving the Jack audio service. The vulnerability arises from missing access control for shared memory in the Jack service, enabling arbitrary code execution or privilege escalation. Affected component: Jack aud...

CVE-2016-2445

CVE-2016-2445 affects the NVIDIA media driver on Android for Nexus 9 devices prior to 2016-05-01. The vulnerability is an elevation of privilege: a crafted application could gain privileged access, with local attack vector and user interaction required. CVSS‑3 metrics indicate Local access, High ...

CVE-2016-2478

CVE-2016-2478 affects Android Mediaserver, specifically mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver. The root cause is mishandling of pointers, allowing a crafted app to gain privileges (Signature or SignatureOrSystem). Affected Android versions: 4.x before 4.4.4, 5.0.x before...

CVE-2016-3748

CVE-2016-3748 affects the Android 6.x sockets subsystem. A local attacker could bypass intended system-call restrictions by a crafted app making an ioctl call, via internal bug 28171804. The published details indicate an elevation-of-privilege flaw in sockets (local access to system calls outside...

CVE-2016-3752

CVE-2016-3752 affects Android 6.x, where internal/app/ChooserActivity.java in the ChooserTarget service mishandles target security checks, enabling a local attacker with a crafted app to escalate privileges. The issue is categorized as an elevation of privilege in the ChooserTarget service. Affec...

CVE-2016-3756

CVE-2016-3756 : Tremolo/res012.c in mediaserver on Android affects 4.x up to 4.4.3/4.4.4, 5.0.x up to 5.0.2, 5.1.x up to 5.1.1, and 6.x up to 2016-07-01. The issue arises because Tremolo’s mediaserver component does not validate the number of partitions in crafted media files, allowing a remote a...

CVE-2016-3761

CVE-2016-3761 affects Android NFC: NfcService.java in the NFC stack is vulnerable on Android 4.x up to 4.4.3, 5.0.x up to 5.0.1, 5.1.x up to 5.1.0, and 6.x prior to the 2016-07-01 patch level. A crafted background application can cause a foreground-app information disclosure. Root cause is descri...

CVE-2016-3798

CVE-2016-3798 affects the MediaTek hardware sensor driver on Android One devices. A locally exploitable privilege-escalation occurs when a crafted application is processed by the MediaTek sensor driver, tied to Android internal bug 28174490 and MediaTek ALPS02703105. The vulnerability is listed a...

CVE-2016-3849

CVE-2016-3849: Privilege escalation via the ION driver on Pixel C; affected Android ION functionality vulnerable to crafted apps before 2016-08-05. Root cause: kernel/ION interaction allows local code execution with high impact. Patch status: patch not publicly available; fix delivered via latest...

CVE-2016-3850

CVE-2016-3850 describes an integer overflow in aboot.c (Qualcomm bootloader) affecting Android devices prior to 2016-08-05, including Nexus 5, 5X, 6P, and 7 (2013). The vulnerability allows privilege escalation via a crafted header field in a boot image. The provided documents do not specify exac...

CVE-2016-3855

CVE-2016-3855 affects Qualcomm components in Android; the issue is in drivers/thermal/supply_lm_core.c where a count parameter is not validated, enabling out-of-bounds memory access and potentially a denial of service or other impact via a crafted application. The documents reference Qualcomm int...

CVE-2016-3859

The CVE-2016-3859 issue affects the Qualcomm camera driver in Android on Nexus 5, 5X, 6, and 6P prior to 2016-09-05. The root cause is an elevation of privilege via a crafted application, allowing a local attacker to gain higher privileges within the device. The Android security bulletin notes th...

CVE-2016-3864

CVE-2016-3864 affects the Qualcomm Radio Interface Layer in Android on Nexus 5, 5X, 6, 6P, and Android One devices prior to 2016-09-05. A crafted application can privilege-escalate to the attacker’s context via the RIL, per Android/Qualcomm bug references. Impact is local privilege escalation wit...

CVE-2016-3882

CVE-2016-3882 describes an off-by-one error in server/wifi/anqp/VenueNameElement.java within Android’s Wi‑Fi stack. Affected products are Android 6.x before 2016-10-01 and Android 7.0 before 2016-10-01. By connecting to a crafted access point that supplies a targeted (Venue Group or Venue Type) v...

CVE-2016-5855

CVE-2016-5855 affects the Qualcomm SPCom driver in Qualcomm AMSS/Android stacks. The root cause is a user‑supplied buffer being cast to a structure without validating the source buffer size, potentially leading to memory corruption or information exposure as described in the CVE entry. Connected ...

CVE-2016-6672

CVE-2016-6672 affects the Android Synaptics touchscreen driver on Nexus 5X devices. A local attacker can gain privileges via a crafted application due to an elevation of privilege in the Synaptics driver (internal bug 30537088). The issue is documented across multiple sources and is listed under ...

CVE-2016-6673

CVE-2016-6673 is an elevation-of-privilege flaw in the NVIDIA camera driver on Android devices (Nexus 9) prior to 2016-10-05. A specially crafted app could exploit this to gain kernel/privileged access. CNVD-2016-09382 explicitly describes a privilege- acquisition vulnerability and an attacker us...

CVE-2016-6680

CNVD-2016-09390 describes CVE-2016-6680 as an information disclosure vulnerability in the Qualcomm CORE/HDD WLAN driver (wlan_hdd_wext.c) on Android devices, prior to 2016-10-05, affecting Nexus 5X and Android One. An attacker could obtain sensitive information by inducing a crafted application t...

CVE-2016-6691

CVE-2016-6691 affects the Qualcomm Wi-Fi gbk2utf module in Android. The vulnerability allows remote attackers to cause a denial of service (framework crash) or potentially other unspecified impact by connecting to an AP presenting a malformed GBK-encoded SSID, due to improper handling in service/...

CVE-2016-6719

CVE-2016-6719 is an elevation-of-privilege issue in the Bluetooth component of Android. Affected: Android 4.x before 4.4.4; 5.0.x before 5.0.2; 5.1.x before 5.1.1; 6.x before 2016-11-01; 7.0 before 2016-11-01. Description: a local malicious application could pair with any Bluetooth device without...

CVE-2016-6726

Technical details about CVE-2016-6726 are not provided in the supplied documents. The NVD record lists an unspecified vulnerability in Qualcomm components on Nexus 6/Android One. Monitor for updates.

CVE-2016-8446

Technical details about CVE-2016-8446 (MediaTek components in Android) are not provided in the connected documents. Public info here is limited to the NVD entry; patch/version/exploit specifics are not included. Monitor for updates.

CVE-2017-0618

CVE-2017-0618 is an elevation-of-privilege vulnerability in the MediaTek command queue driver that could allow a local malicious app to execute arbitrary code in the kernel context on Android. The issue requires compromising a privileged process first and is rated High. Affected component: MediaT...

CVE-2017-0874

CVE-2017-0874 is a DoS in Android's media framework (libavc). The NVD entry lists affected Android versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0 (Android ID A-63315932). The Android Security Bulletin entry for 2017-12-01/05 confirms a DoS issue in the Media framework and notes patches released...

CVE-2017-11058

CVE-2017-11058 affects Android on MSM/Qualcomm WLAN (cfg80211 vendor command handling). The issue is a buffer over-read in the WLAN driver, prompting potential information disclosure (confidentiality impact). Affected firmware, per Pixel/Nexus security bulletin, was addressed by the 2017-11-05 pa...

CVE-2017-13264

CVE-2017-13264 affects Android’s media framework, specifically the Avcdec component, across Android 6.0–8.1 (6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1). The Pixel/Android bulletin assigns DoS risk (high) for affected devices and lists versions updated by the 2018-03-05 patch level (AOSP changes add...

CVE-2017-13270

CVE-2017-13270 is an Elevation of Privilege (EoP) vulnerability in the upstream kernel mnh_sm driver affecting Android kernel. The issue is categorized as EoP in the Kernel components table of the Pixel/Nexus security bulletin, labeled as Moderate impact for the mnh_sm driver. There is no exploit...