CVE-2018-21061

CVE-2018-21061 affects Samsung mobile devices running N(7.1) and O(8.x). The issue allows a counterfeit/“fake” charger to execute critical functions while the device is locked, enabling partial confidentiality, integrity, and availability impacts as indicated in CVSS vectors. The problem is descr...

CVE-2018-21071

Technical details about CVE-2018-21071 are not publicly provided in the connected documents. Monitor for updates from vendors and security advisories for affected products and remediation.

CVE-2018-3566

CVE-2018-3566 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds with CAF linux kernels prior to the 2018-04-05 security patch level. Root cause: a buffer overwrite in ProcSetReqInternal() caused by a missing length check. The issue is categorized as Elevation of Privile...

CVE-2018-3576

CVE-2018-3576 describes an improper validation of an array index in the Qualcomm WLAN driver’s sapInterferenceRssiCount() function, causing array out-of-bounds access on Android devices using the Linux kernel (CAF Android for MSM, Firefox OS for MSM, QRD Android). The issue affects Android releas...

CVE-2018-3578

CVE-2018-3578 is a heap overflow in the Qualcomm WLAN component caused by a type mismatch for ie_len, leading Android CAF/Linux kernel builds to allocate insufficient heap memory. The issue is described as a local vulnerability with HIGH impact (CVSS3: LOCAL, LOW complexity, NO privileges, USER i...

CVE-2018-3587

CVE-2018-3587 is tied to the Qualcomm qcacld-2.0 WLAN driver in Android CAF builds, where a Use-After-Free in a firmware memory dump feature can lead to Elevation of Privilege (EoP). The NVD listing shows a CVSS v3 base score of 7.8 (HIGH) with LOCAL attack vector, low complexity, and privileges ...

CVE-2018-5828

Vulnerability CVE-2018-5828 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds with CAF Linux kernels prior to 2018-04-05. The issue is in function wma_extscan_start_stop_event_handler() where vdev_id is taken from firmware and not properly validated, potentially leading...

CVE-2018-5836

CVE-2018-5836 is elaborated in CNVD-2018-13387 as a Qualcomm WLAN information-disclosure issue affecting Android devices (Pixel/Nexus) prior to 2018-06-05. The root cause is that the wma_nan_rsp_event_handler() path fails to properly validate the data_len value received from firmware, enabling po...

CVE-2018-5843

The connected CNVD entry CNVD-2018-22555 ties CVE-2018-5843 to the Qualcomm Modem driver in Android on Pixel/Nexus, describing a vulnerability in wma_pdev_div_info_evt_handler() where there is no upper bound check on event->num_chains_valid from firmware, allowing a buffer overwrite of the fix...

CVE-2018-5850

CVE-2018-5850 affects Android CAF/Linux kernel components. The vulnerability arises from insufficient validation of a key length in csr_update_fils_params_rso(), which can cause an integer underflow and lead to a buffer overflow in affected Android releases using the Linux kernel. Provided docume...

CVE-2018-5855

CVE-2018-5855 affects Qualcomm WLAN Host components within Android CAF builds. The issue arises from padding/shrinking a nested WMI packet, potentially causing a buffer over-read in all CAF Android releases prior to the patched level. According to the CVE entry, this is rated critical (CVSS v3: 9...

CVE-2018-5896

CVE-2018-5896 affects Android CAF builds using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) prior to the 2018-06-05 security patch level. The issue is a kernel panic caused by an out-of-bounds read from not checking the source buffer length against the packet stream length ...

CVE-2018-9444

The CVE-2018-9444 issue affects Android’s media framework, specifically the ih264d_video_decode path in ih264d_api.c. It can cause resource exhaustion via an infinite loop, leading to remote denial of service on affected devices (Android 6.0–7.1.2). Exploitation requires user interaction; no expl...

CVE-2018-9530

CVE-2018-9530 affects Android 9, where in file ixheaacd_aac_tns.c (function ixheaacd_tns_ar_filter_dec) there is a missing bounds check causing a possible out-of-bounds write. This could enable remote code execution with no extra privileges and requires user interaction to exploit. The Android se...

CVE-2018-9531

The CVE-2018-9531 issue is in Android 9 (Media framework) within AudioSpecificConfig_Parse in tpdec_asc.cpp. It describes a possible out-of-bounds write due to a missing bounds check, enabling remote code execution with no extra privileges, with exploitation requiring user interaction. No exploit...

CVE-2018-9533

CVE-2018-9533 affects Android 9 and is described as an out-of-bounds read/write in ixheaacd_dec_data_init (ixheaacd_create.c) that could enable remote code execution with no extra privileges; exploitation reportedly requires user interaction. The issue is documented in the Android 2018-11 securit...

CVE-2018-9562

CVE-2018-9562 affects Android 9; the flaw is an out-of-bounds read in bta_ag_do_disc of bta_ag_sdp.cc caused by an incorrect parameter size, enabling remote information disclosure without privileges and without user interaction. The issue is listed in Android’s December 2018 security bulletin, wi...

CVE-2019-20541

The CVE-2019-20541 entry concerns Samsung mobile devices running Android P (9.0) on Exynos chipsets, where the Wi-Fi kernel drivers are affected by a stack overflow. Affected Samsung IDs include SVE-2019-14965, 14966, 14968–14970, 14980–14984, 15122–15123 (November 2019). The issue originates in ...

CVE-2019-20544

CVE-2019-20544 affects Samsung mobile devices with O(8.x) and P(9.0) Exynos chipsets. The vulnerability is an out-of-bounds write in the ICCC Trustlet, leading to potential memory corruption. Affected component is the ICCC Trustlet; root cause details are limited to the out-of-bounds write descri...

CVE-2019-20624

CVE-2019-20624 affects Samsung mobile devices running N(7.x) and O(8.x). The issue involves S-Voice leaking keyboard learned words via the lock screen, exposing partially sensitive user input. The Samsung internal ID SVE-2018-12981 is referenced. Public details across sources are limited to the d...

CVE-2019-2073

CVE-2019-2073 affects the Android 10 libxaac library, where an out-of-bounds write occurs due to a missing bounds check. This can lead to remote code execution with network access and no extra privileges, with user interaction required for exploitation. The vulnerability is documented across seve...

CVE-2019-2087

CVE-2019-2087 affects Android 10 libxaac. Root cause: out-of-bounds write from a missing bounds check, enabling remote code execution with no privileges and requiring user interaction. Mitigation: apply patches as part of Android 10 updates; devices with a security patch level of 2019-09-01 or la...

CVE-2019-2165

CVE-2019-2165 affects the Android libxaac library in Android 10, where an out-of-bounds read can occur due to a missing bounds check. This could lead to information disclosure without executing code, with user interaction required for exploitation. The provided documents consistently describe the...

CVE-2019-9288

CVE-2019-9288 affects Android 10 via a missing bounds check in libhidcommand_jni, enabling an out-of-bounds write that could cause local elevation of privilege in the USB service without user interaction. Impact is limited to the USB service and requires no additional privileges. Remediation is a...

CVE-2019-9341

Summary : CVE-2019-9341 is a Bluetooth vulnerability in Android 10 where an out-of-bounds read occurs due to a missing bounds check. This could allow remote information disclosure without extra execution privileges and without user interaction. Affected component : Bluetooth stack on Android 10. ...

CVE-2019-9357

CVE-2019-9357 affects libAACdec in Android 10’s Media Framework. An integer overflow can trigger an out-of-bounds write, enabling remote code execution. Exploitation requires user interaction; no privileges beyond the user. Android 10 patch level 2019-09-01 or later mitigates via released securit...

CVE-2019-9397

CVE-2019-9397 affects the Bluetooth component in Android 10. The issue is a missing bounds check that can cause a controlled termination, yielding a remote DoS without needing privileges or user interaction. The vulnerability is documented with Android 10 as affected, and remediation is noted in ...

CVE-2019-9404

CVE-2019-9404 affects Android 10 devices via the Bluetooth stack, where a missing bounds check can cause a remote denial-of-service without user interaction. The issue is documented across multiple sources (NVD and Red Hat) with a consistent description: uncontrolled termination due to an out-of-...

CVE-2019-9405

CVE-2019-9405 affects libAACdec in Android 10’s Media framework, with an out-of-bounds write caused by an integer overflow. This could permit remote code execution with the attacker needing only user interaction (no additional privileges). The Android 10 security release notes list CVE-2019-9405 ...

CVE-2019-9409

CVE-2019-9409 affects the Android 10 media processing stack (libhevc). The issue is an information-disclosure vulnerability caused by uninitialized data, enabling remote information disclosure with no execution privileges required. Exploitation requires user interaction. The connected documents r...

CVE-2019-9440

CVE-2019-9440 is an information-disclosure vulnerability in AOSP Email on Android 10 caused by a confused deputy, enabling local disclosure of the Email app’s protected files. Exploitation requires user interaction. Affected software: AOSP Email component on Android-10. Root cause: improper acces...

CVE-2019-9459

The CVE-2019-9459 entry concerns the Android 10 library libttspico. A heap buffer overflow leads to an out-of-bounds write, enabling remote escalation of privilege without user interaction. Documents specify the affected component (libttspico), the vulnerability class (OOB write due to a heap ove...

CVE-2019-9463

CVE-2019-9463 affects Android 10 platform (Platform component). It describes a bypass of user interaction requirements due to background app interception, potentially enabling local elevation of privilege with no additional execution privileges. Exploitation requires user interaction, per the des...

CVE-2020-0120

CVE-2020-0120 affects Android 10 in the Media/Camera stack: the vulnerability arises from an out-of-bounds write caused by a heap overflow in QCamera3HWI.cpp (notifyErrorForPendingRequests). This could allow local escalation of privilege without requiring user interaction. The available sources c...

CVE-2020-0124

CVE-2020-0124: In Android 10, InstalldNativeService.cpp markBootComplete has an out-of-bounds write due to a missing bounds check, enabling local elevation of privilege to System with no user interaction. The issue is documented as EoP (pixel/Android bulletin) and is addressed by a security updat...

CVE-2020-0129

CVE-2020-0129 affects Android 10, due to an out-of-bounds write in SetData of btm_ble_multi_adv.cc caused by an incorrect bounds check. This can lead to local elevation of privilege without user interaction, as documented in multiple sources (NVD entry and Red Hat/Samsung references). Affected co...

CVE-2020-0142

CVE-2020-0142 describes an information disclosure in Android's rw_i93_sm_format (rw_i93.c) caused by a missing bounds check. The issue allows remote information disclosure with network access and no user interaction. Affected software is Android 10 (as per the CVE entry). The CVSS data provided s...

CVE-2020-0148

CVE-2020-0148 affects Android 10; the vulnerability is an out-of-bounds read in btu_hcif_pin_code_request_evt, btu_hcif_link_key_request_evt, and btu_hcif_link_key_notification_evt in btu_hcif.cc caused by a missing bounds check. This leads to local information disclosure and requires System priv...

CVE-2020-0154

CVE-2020-0154 affects Android 10 with the vulnerability located in the nci_proc_core_rsp function of nci_hrcv.cc. The root cause is an out-of-bounds read due to an incorrect bounds check, which could enable local information disclosure on devices with System privileges and requires no user intera...

CVE-2020-0195

CVE-2020-0195 affects Google's Android Media Framework (Android 10). The vulnerability is an information disclosure in the HEVC/ivant recon CTB path (ihevcd_iquant_itrans_recon_ctb.c and related) caused by uninitialized data, potentially allowing remote information disclosure with no execution pr...

CVE-2020-0211

CVE-2020-0211 refers to a vulnerability in Android 10 where an out-of-bounds read in SumCompoundHorizontalTaps within convolve_neon.cc can lead to remote information disclosure. Exploitation requires user interaction per the description. The issue is documented across multiple sources (NVD, RH, C...

CVE-2020-0292

CVE-2020-0292 affects Android 11 via a Bluetooth vulnerability described as an out-of-bounds read caused by a missing bounds check. The issue could allow local information disclosure with System privileges and may require a compromised firmware; no user interaction is needed. The description conf...

CVE-2020-0300

CVE-2020-0300 affects Android 11 NFC handling, where an out-of-bounds read from uninitialized data can lead to remote information disclosure without user interaction. The NVD CVSSv3.1 base score is 7.5 (High) with network attack vector and no privileges required; CVSSv2 base score 5.0 (Medium). A...

CVE-2020-0302

CVE-2020-0302 affects Android 11 in Settings, where an unsafe PendingIntent enables a permission bypass leading to local information disclosure. Exploitation requires no user interaction, with user privileges required. Root cause: unsafe PendingIntent in Settings. Impact: partial disclosure of da...

CVE-2020-0329

CVE-2020-0329 affects the OMX encoder in Android 11. The root cause is an out-of-bounds read caused by invalid input validation, enabling local information disclosure without user interaction or additional privileges. The issue is documented in the Android 11 security release notes and related ad...

CVE-2020-0348

CVE-2020-0348 affects Android 11 and is tied to the NFC subsystem. The issue is an out-of-bounds read caused by a missing bounds check, potentially enabling remote information disclosure over NFC without user interaction (as per the NVD/Red Hat/CNVD entries). The vulnerability is associated with ...

CVE-2020-0359

CVE-2020-0359 affects the Android GLESRenderEngine on Android 11, where an out-of-bounds read caused by a buffer overflow could enable local information disclosure without user interaction. The issue is described as a local vulnerability with no execution privileges required and no interaction ne...

CVE-2020-0364

CVE-2020-0364 affects Android 11 via libDRCdec, where a missing bounds check causes an out-of-bounds read that can disclose information remotely. Exploitation requires user interaction. The issue is documented as fixed in the Android 11 security release notes; update to Android 11 with the patch ...

CVE-2020-0387

CVE-2020-0387 affects the SmartSpace package: in its manifest files there is a tapjacking vector caused by a missing permission check. The issue enables local elevation of privilege and possible account hijacking, with exploitation requiring user interaction. The vulnerability is categorized as a...

CVE-2020-0406

CVE-2020-0406 affects Android 11 via the libmpeg2dec component. The issue is an out-of-bounds write caused by a missing bounds check in libmpeg2dec, enabling local privilege escalation if triggered with certain parameters; exploitation requires user interaction and does not require prior executio...