CVE-2017-11074

CVE-2017-11074 affects Qualcomm WLAN in Android on MSM platforms (CAF-based kernels) via an obsolete set/reset ssid hotlist API in the WLAN stack. Root cause: legacy API left in kernel/UI interfaces enabling privilege escalation. Impact: as per CVSS, high confidentiality, integrity, and availabil...

CVE-2017-14901

CVE-2017-14901 describes a buffer overrun in the Qualcomm WLAN driver within Android for MSM/CAF Linux kernel when handling QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE with a TXPOWER_SCALE attribute of fewer than 1 byte. Affected components include Android devices using CAF/Linux kernel implement...

CVE-2017-15818

CVE-2017-15818 describes an integer overflow in CAF-built Android stacks (Android for MSM, Firefox OS for MSM, QRD Android) when loading a user application in qseecom. The vulnerability arises in the Linux kernel path used by CAF and can occur if the application partition size rounds up to page_s...

CVE-2017-15859

CVE-2017-15859 is a buffer overrun in the Qualcomm Atheros WLAN stack (qcacld-2.0), triggered when QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB carries fewer than 1 byte in the TXPOWER_SCALE_DECR_DB attribute. Affected: Android for MSM, Firefox OS for MSM, and QRD Android devices prior to ...

CVE-2017-18695

Samsung mobile devices running KK (4.4), L (5.0/5.1), M (6.0), and N (7.0) are affected. An attacker who controls a subdomain can discover a user’s credentials during an email account login via an EAS Autodiscover packet. The initial sources reference a Samsung security update, but no remediation...

CVE-2017-6423

CVE-2017-6423 is an elevation-of-privilege flaw in the Qualcomm Kyro L2 driver within the Android kernel. The vulnerability could allow a local attacker to execute arbitrary code with kernel privileges on affected devices (Pixel and Pixel XL are listed in the Android bulletin). The root cause is ...

CVE-2017-8271

CVE-2017-8271 describes an out-of-bounds memory write in the MDSS Rotator driver used by Qualcomm components on Android CAF builds using the Linux kernel. The issue arises from an unsanitized userspace-controlled parameter, enabling a local attacker to cause memory corruption. The CVSS indicates ...

CVE-2017-9722

CVE-2017-9722 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels. The vulnerability arises when updating a custom EDID (hdmi_tx_sysfs_wta_edid) and the edid_size (controlled by userspace) is too large, causing a buffer overflow. Connected documents corrobo...

CVE-2018-11836

CVE-2018-11836 affects Qualcomm WLAN HOST components in CAF Linux kernel builds for Android (Android for MSM, etc.). The issue is an improper length check that can cause out-of-bounds access in WLAN, enabling local, low-privilege exploitation with no user interaction. Documented impact is high (C...

CVE-2018-11902

CVE-2018-11902 affects Qualcomm WLAN host components in Android CAF builds; root cause is lack of length validation for a value received from firmware, leading to out-of-bounds access in WLAN HOST. The CVE is listed with High severity (per Qualcomm’s 2019-10-05 bulletin grouping for WLAN host). N...

CVE-2018-11905

CVE-2018-11905 is a high-severity issue affecting Android CAF builds using the Linux kernel, involving a possible buffer overflow in a WLAN function caused by insufficient input validation of firmware-supplied values. The CVE is documented with a 3.0/3.0 score of 9.8 (CRITICAL) and a network atta...

CVE-2018-11906

CVE-2018-11906 affects Android releases (Android for MSM, Firefox OS for MSM, QRD Android) built from CAF Linux kernel. The vulnerability is due to default privileged access to ADB and debug-fs, enabling local attackers with low complexity to achieve high-impact confidentiality, integrity, and av...

CVE-2018-15482

CVE-2018-15482 affects LG devices running Android 6.0–8.1, with an incorrect access-control flaw in the MLT application intents. This allows a remote attacker to bypass security restrictions and access the MLT app by sending a crafted request. Impact is described as high/critical in CVSS metrics ...

CVE-2018-3576

CVE-2018-3576 describes an improper validation of an array index in the Qualcomm WLAN driver’s sapInterferenceRssiCount() function, causing array out-of-bounds access on Android devices using the Linux kernel (CAF Android for MSM, Firefox OS for MSM, QRD Android). The issue affects Android releas...

CVE-2018-3599

CVE-2018-3599 is a Use-After-Free in Qualcomm Core Services affecting Qualcomm Android for MSM/CAF-based Android builds (Linux kernel pre-2018-04-05 patch). The issue occurs when notifying a DCI client, enabling EoP with high/critical impact per the Android Pixel bulletin. Mitigation is to apply ...

CVE-2018-5822

CVE-2018-5822 describes a buffer overwrite in WLAN firmware affecting Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android on CAF builds prior to the 2018-04-05 patch level. The issue arises from compromised WLAN FW and is mitigated by updating to the 2018-04-05 security patch level (or ...

CVE-2018-5836

CVE-2018-5836 is elaborated in CNVD-2018-13387 as a Qualcomm WLAN information-disclosure issue affecting Android devices (Pixel/Nexus) prior to 2018-06-05. The root cause is that the wma_nan_rsp_event_handler() path fails to properly validate the data_len value received from firmware, enabling po...

CVE-2018-5855

CVE-2018-5855 affects Qualcomm WLAN Host components within Android CAF builds. The issue arises from padding/shrinking a nested WMI packet, potentially causing a buffer over-read in all CAF Android releases prior to the patched level. According to the CVE entry, this is rated critical (CVSS v3: 9...

CVE-2018-5863

CVE-2018-5863 is a buffer overflow in WLAN HOST caused by an overly large WPA RSN IE length processed by wlan_hdd_cfg80211_set_ie(). Affected are Android releases (Android for MSM, Firefox OS for MSM, QRD Android) provided by CAF on the Linux kernel. The description confirms a memory corruption v...

CVE-2018-5886

CVE-2018-5886 describes a vulnerability where a pointer in an ADSPRPC command is not properly validated in CAF Android builds using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The root cause is improper validation of a pointer in the ADSPRPC path, which can allow access t...

CVE-2018-9535

CVE-2018-9535 is a vulnerability in Android 9 where ixheaacd_reset_acelp_data_fix in ixheaacd_lpc.c can write out of bounds due to a missing bounds check, enabling remote code execution with network attack vector and user interaction required. The issue is documented in NVD for Android 9 and echo...

CVE-2018-9577

The CVE-2018-9577 issue affects Android 9 and is caused by a missing bounds check in impd_parametric_drc_parse_gain_set_params within impd_drc_static_payload.c, leading to a possible out-of-bounds write. This could enable remote code execution with user interaction required, as described in the N...

CVE-2019-20536

This CVE concerns Samsung mobile devices running N (7.1), O (8.x), and P (9.0) (China release). The issue is in the Firewall application, which mishandles the PermissionWhiteLists protection mechanism (Samsung ID SVE-2019-14299). The connected sources confirm the vulnerable component is the Firew...

CVE-2019-20565

Technical details about CVE-2019-20565 are not publicly available in the provided connected documents. Monitor for updates from vendors and security trackers.

CVE-2019-20585

The CVE-2019-20585 issue affects Samsung mobile devices running O(8.x) and P(9.0) with TEEGRIS. Root cause: type confusion in the SEC_FR Trustlet that permits arbitrary code execution. Affected component: SEC_FR Trustlet on Samsung devices; Samsung ID SVE-2019-14851. No concrete remediation or ex...

CVE-2019-20588

CVE-2019-20588 affects Samsung mobile devices running O(8.x) and P(9.0) with TEEGRIS. The SEM Trustlet has a type confusion flaw that can lead to arbitrary code execution. Samsung ID SVE-2019-14891 is associated with this issue. The CVSS-3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) yields a b...

CVE-2019-2060

CVE-2019-2060 affects the Android 10 libxaac library, with a potential out-of-bounds read due to a missing bounds check that could lead to information disclosure. Exploitation requires user interaction. Affected product/version: Android 10; Android ID A-112709994. CVSS data from NVD indicates a b...

CVE-2019-20613

CVE-2019-20613 affects Samsung mobile devices running Android N (7.x) and O (8.x). A time-based SQL injection in the Contacts database is described, with Samsung’s internal ID SVE-2018-13452 (March 2019). Multiple connected sources corroborate a SQL injection vulnerability that can expose or mani...

CVE-2019-20620

CVE-2019-20620 affects Samsung mobile devices running P (Android 9.0) software. The issue is that the Settings application allows unauthenticated changes, per the Samsung notice referencing SVE-2019-13814 and SVE-2019-13815. Documents do not specify the exact vulnerable component, root cause deta...

CVE-2019-2078

CVE-2019-2078 is a vulnerability in the libxaac library used by Android 10. It arises from a missing bounds check causing an out-of-bounds write, potentially enabling remote code execution. Exploitation would require user interaction. Multiple connected sources (e.g., Red Hat and CNVD records) co...

CVE-2019-2083

CVE-2019-2083 refers to an out-of-bounds write in the Android libxaac library, caused by a missing bounds check. The vulnerability could enable remote code execution on Android 10, with execution requiring user interaction for exploitation. The connected Red Hat and CNVD entries corroborate the s...

CVE-2019-2127

CVE-2019-2127 affects Android Media Framework: memory corruption via a use-after-free in AudioInputDescriptor::setClientActive. This can enable local elevation of privilege with no extra execution privileges and no user interaction required. Affected versions include Android 7.0–9.0. The issue is...

CVE-2019-2157

CVE-2019-2157 describes an out-of-bounds read in libxaac leading to information disclosure on Android 10 due to a missing bounds check. The issue requires user interaction to exploit and could be triggered over the network according to CVSS guidance in the public records. Connected sources confir...

CVE-2019-2188

CVE-2019-2188 affects the Android kernel’s Easel image driver. The issue is memory corruption caused by race conditions, enabling local escalation of privilege to System level without user interaction. Public patch details or fixed versions are not provided in the supplied documents. No exploitat...

CVE-2019-9238

The CVE-2019-9238 entry concerns the NFC stack in Android 10, where a missing bounds check can cause an out-of-bounds write. This leads to local elevation of privilege with System execution privileges required, and exploitation requires user interaction. The available connected documents corrobor...

CVE-2019-9266

CVE-2019-9266 involves an out-of-bounds write in Android’s sensorservice due to a missing bounds check, enabling local privilege escalation with System-level privileges and no user interaction required. Affected software is Android 10; the vulnerability is an Elevation of Privilege (EoP) within t...

CVE-2019-9284

The CVE-2019-9284 entry describes a Bluetooth out-of-bounds read in Android 10 that could lead to remote information disclosure without user interaction due to a missing bounds check. Connected sources confirm the vulnerability affects Android-10 Bluetooth components and is addressed in the Andro...

CVE-2019-9288

CVE-2019-9288 affects Android 10 via a missing bounds check in libhidcommand_jni, enabling an out-of-bounds write that could cause local elevation of privilege in the USB service without user interaction. Impact is limited to the USB service and requires no additional privileges. Remediation is a...

CVE-2019-9302

CVE-2019-9302 affects Android 10 via the libAACdec library, where an integer overflow can cause an out-of-bounds write leading to remote code execution. The vulnerability requires user interaction to exploit, with impact described as remote code execution and high severity in the CVSS data. Remed...

CVE-2019-9312

The CVE-2019-9312 entry concerns Android 10 Bluetooth: an out-of-bounds read caused by a missing bounds check in Bluetooth could disclose local information without extra privileges and without user interaction. Affected component is Bluetooth stack on Android 10 (Android ID A-78288018). Reported ...

CVE-2019-9326

CVE-2019-9326 affects Android 10 Bluetooth: a missing bounds check in the Bluetooth stack enables an out-of-bounds read that can disclose remote information without requiring privileges or user interaction. Impact is information disclosure; CVSS v3.1 base score 7.5 (HIGH), network attack vector, ...

CVE-2019-9342

CVE-2019-9342 affects Android 10 Bluetooth stack. The issue is an out-of-bounds read caused by a missing bounds check, enabling remote information disclosure without user interaction over a network. CVSS highlights: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (base 7.5). Remediation: apply Android 10 sec...

CVE-2019-9361

The CVE-2019-9361 entry concerns Android 10’s libavc (media framework) with an information-disclosure flaw caused by uninitialized data. Affected component: libavc in Android 10 (Android-10). Impact: potential remote information disclosure without executing code; exploitation requires user intera...

CVE-2019-9379

CVE-2019-9379 affects the Android 10 libstagefright component. The issue is a resource-exhaustion DoS caused by a missing bounds check in a multimedia processing path. The impact is remote denial of service with no privileges required, and exploitation requires user interaction. There is no docum...

CVE-2019-9394

CVE-2019-9394 affects Android 10, with a Bluetooth vulnerability caused by a missing bounds check in a Bluetooth component that allows remote denial of service without user interaction. The issue is listed in multiple sources (Android 10 security release notes and Red Hat advisory) with the same ...

CVE-2019-9411

CVE-2019-9411 is reported to affect the Android 10 platform, tied to the libavc component. The vulnerability description indicates an information disclosure caused by uninitialized data in libavc, enabling remote information disclosure with no execution privileges required. Exploitation would req...

CVE-2019-9463

CVE-2019-9463 affects Android 10 platform (Platform component). It describes a bypass of user interaction requirements due to background app interception, potentially enabling local elevation of privilege with no additional execution privileges. Exploitation requires user interaction, per the des...

CVE-2020-0044

CVE-2020-0044 affects the Android FPC Fingerprint TEE in the Android kernel. In set_nonce of fpc_ta_qc_auth.c, there is an out-of-bounds read due to a missing bounds check, enabling local information disclosure with system execution privileges required. Exploitation is local and does not require ...

CVE-2020-0059

CVE-2020-0059 : An out-of-bounds read in the Android Bluetooth stack (btm_ble_batchscan_filter_track_adv_vse_cback in btm_ble_batchscan.cc) due to a missing bounds check could disclose information locally without privileges. Affected: Android 10 devices; impact described as information disclosure...

CVE-2020-0124

CVE-2020-0124: In Android 10, InstalldNativeService.cpp markBootComplete has an out-of-bounds write due to a missing bounds check, enabling local elevation of privilege to System with no user interaction. The issue is documented as EoP (pixel/Android bulletin) and is addressed by a security updat...