CVE-2018-11889

CVE-2018-11889 affects Android builds using CAF WLAN (Android for MSM, etc.) that rely on the Linux kernel. The vulnerability arises when requesting RSSI timeout, where the local variable context in a WLAN function is freed, potentially leading to access to invalid memory. This could enable memor...

CVE-2025-36928

CVE-2025-36928 : The issue is a potential out-of-bounds write in GetHostAddress of gxp_buffer.h caused by an incorrect bounds check. This can enable local escalation of privilege with no extra execution privileges required and no user interaction needed. Affected reports appear in multiple feeds ...

CVE-2025-48538

CVE-2025-48538 affects the Android Framework, specifically the PackageManagerService.setApplicationHiddenSettingAsUser function. The root cause is improper input validation when hiding system-critical packages, which can allow local denial of service without requiring exploits or user interaction...

CVE-2025-48567

CVE-2025-48567 involves a bypass of a file path filter intended to restrict access to sensitive directories, caused by incorrect Unicode normalization. This can enable local escalation of privilege; exploitation requires user interaction. The CVE is referenced across multiple sources (NVD, Red Ha...

CVE-2025-48568

CVE-2025-48568 describes a race-condition vulnerability that allows a lockscreen bypass and local escalation of privilege. Reports across multiple sources indicate exploitation could occur with no user interaction and requires only local access, with no additional execution privileges needed. And...

CVE-2025-48583

CVE-2025-48583 involves a logic error in BaseBundle.java across multiple Android components, enabling potential arbitrary code execution and local privilege escalation without user interaction. The issue is described consistently across NVD/Red Hat/OSV and related sources as an Elevation of Privi...

CVE-2026-0015

CVE-2026-0015 affects Android components, notably multiple locations in AppOpsService.java where improper input validation can cause a persistent, local Denial of Service . Exploitation requires no user interaction and does not grant additional privileges. The Red Hat/NCSC/NVD entries corroborate...

CVE-2026-0016

CVE-2026-0016 affects CredentialManagerService.java (updateProvidersWhenServiceRemoved). The vulnerability arises from a permissions bypass that could allow overriding settings across users, causing local information disclosure with no extra execution privileges required. Exploitation status is n...

CVE-2026-0099

Technical details about CVE-2026-0099 are not publicly available in the provided connected documents. Monitor for updates from official sources; no further specifics (affected products, root cause, impact, or fixes) are disclosed here.

CVE-2026-0148

The connected sources confirm a concrete issue in VideoRtpPayloadDecoderNode.cpp: an integer overflow can cause an out-of-bounds write, enabling remote code execution without extra privileges or user interaction. Affected component is VideoRtpPayloadDecoderNode.cpp (multiple functions). The CVE e...

CVE-2026-0150

CVE-2026-0150 affects EdgeTPU firmware, specifically the ExecuteGraph command handler. The issue is a possible out-of-bounds write caused by an integer overflow, enabling local escalation of privilege with root privileges required. Exploitation does not require user interaction. The available con...

CVE-2026-0161

CVE-2026-0161 affects Google Android (Pixel bulletin context) with an out-of-bounds write in RtpSession.cpp due to an integer overflow in numberOfReportBlocks, enabling remote privilege escalation without user interaction. Connected sources (Android Pixel bulletin) flag this as an Elevation of Pr...

CVE-2026-28624

CVE-2026-28624 is a confused deputy vulnerability in the Android platform that allows read/write access to files without proper permissions , enabling local escalation of privilege with no additional execution privileges and no user interaction. It carries a CVSS 3.1 score of 7.8 (HIGH) with high...

CVE-2014-9959

CVE-2014-9959 is described as an elevation of privilege vulnerability affecting Qualcomm closed‑source components within Android, specifically the Android kernel. The initial description notes an elevation of privilege with high/critical impact, but the connected documents only reiterate the exis...

CVE-2015-9046

Technical details about CVE-2015-9046 are not publicly provided in the supplied documents. No specific impact, affected products, or fixes are disclosed here. Monitor for updates.

CVE-2016-10232

CVE-2016-10232 is an elevation-of-privil... (shortened to fit)

CVE-2016-10233

CVE-2016-10233 is an elevation of privilege in the Qualcomm video driver affecting the Android kernel. The NVD entry documents a CRITICAL impact with a reported base score of 9.8 (CVSS3) and notes the vulnerability relates to the Qualcomm video driver; references include QC-CR#897452. Connected d...

CVE-2016-10234

CVE-2016-10234 describes an information-disclosure vulnerability in the Qualcomm IPA driver within the Android kernel. The issue could allow a local attacker to access data outside of normal permissions. The CVE is listed under the Android security bulletin with affected devices (Nexus 5X, Nexus ...

CVE-2016-2501

CVE-2016-2501 affects the Qualcomm camera driver in Android before 2016-07-05 on Nexus devices (5X/6/6P/7). The vulnerability enables elevation of privilege by a local attacker via a crafted app, due to issues in the Qualcomm camera driver (Android internal bug 27890772; Qualcomm internal bug CR1...

CVE-2016-2502

CVE-2016-2502 concerns the Qualcomm USB driver in Android (driver file drivers/usb/gadget/f_serial.c). The issue is a privilege-escalation in Nexus 5X/6P due to processing a large GSER_IOCTL size in the GSER_IOCTL call, enabling a local attacker to gain kernel-level privileges. Affected platforms...

CVE-2016-3760

Technical details for CVE-2016-3760 are not publicly available in the provided documents. Monitoring for updates is recommended.

CVE-2016-3801

CVE-2016-3801 affects MediaTek GPS driver on Android One devices prior to 2016-07-05. Root cause: elevation of privilege via a crafted application exploiting MediaTek internal bug ALPS02688853. Impact: local privilege escalation to system could occur; vendor-specific patch not publicly detailed, ...

CVE-2016-3847

CVE-2016-3847 is a documented vulnerability in the NVIDIA Tegra kernel driver (NVAVP) where a heap write overflow in the nvavp driver could allow a local attacker to gain privileges or execute code. Public details indicate the issue affects Nexus 9 devices running Android prior to the 2016-08-05 ...

CVE-2016-3848

CVE-2016-3848 corresponds to a race-condition vulnerability in the NVIDIA media driver (kernel nvavp driver) on Android/Nexus 9 prior to 2016-08-05 that could allow a local attacker to escalate privileges via a crafted application. The Android bulletin notes this as an elevation of privilege in t...

CVE-2016-3853

CVE-2016-3853 involves Google Play services on Nexus devices. The issue allows a local attacker to bypass Factory Reset Protection and delete data via unspecified vectors (internal bug 26803208). The description in the CVE notes this is an elevation of privilege within Google Play services, not a...

CVE-2016-3859

The CVE-2016-3859 issue affects the Qualcomm camera driver in Android on Nexus 5, 5X, 6, and 6P prior to 2016-09-05. The root cause is an elevation of privilege via a crafted application, allowing a local attacker to gain higher privileges within the device. The Android security bulletin notes th...

CVE-2016-3869

CVE-2016-3869 pertains to the Broadcom Wi‑Fi driver in Android prior to 2016-09-05 on Nexus devices (Nexus 5/6/6P/9/Nexus Player/Pixel C). The vulnerability enables elevation of privilege via a crafted application, exploiting Android internal bug 29009982 and Broadcom internal bug RB#96070. Impac...

CVE-2016-3907

CVE-2016-3907 is an information-disclosure vulnerability in Qualcomm components (GPU driver, power driver, SMSM Point-to-Point driver, and sound driver) used in Android. A local malicious app could access data outside its permission levels after compromising a privileged process. The issue is doc...

CVE-2016-5858

CVE-2016-5858: A vulnerability in the ioctl handler of Qualcomm components used in Android for MSM, Firefox OS for MSM, and QRD Android. If a user supplies a value that is too large, it can cause an out-of-bounds read, leading to potential information disclosure. The description specifies the aff...

CVE-2016-6682

CVE-2016-6682 affects the Qualcomm QDSP6v2 driver: drivers/misc/qcom/qdsp6v2/audio_utils.c in Android on Nexus 5X, Nexus 6P, and Android One devices before 2016-10-05. Root cause: the code path fails to initialize certain data structures, enabling an attacker to obtain sensitive information via a...

CVE-2016-6685

Technical details for CVE-2016-6685 are not publicly provided in the supplied connected documents. Monitor for updates. The entry notes a kernel information disclosure on Nexus 6P but lacks specifics on root cause, affected components, remediation, or exploit status.

CVE-2016-8486

The CVE-2016-8486 entry describes an information-disclosure vulnerability in Qualcomm closed-source components within Android kernel. Affected product/area: Android kernel with Qualcomm components. Root cause: information disclosure; impact: leakage of data to an attacker with local/proximate acc...

CVE-2017-11045

CVE-2017-11045 affects the Android camera stack (Android for MSM / CAF Linux kernel) in the camera driver function, where a race condition can lead to a Use-After-Free. The vulnerability is localized and impacts components related to Qualcomm/Camera in affected Android builds; CVSS scores indicat...

CVE-2017-13205

CVE-2017-13205 is described as an information disclosure vulnerability in Android’s media framework (libmpeg2) affecting Android 7.0–8.1. The initial description provides affected versions and an Android ID but no exploitation details. Connected records (Pixel/Nexus bulletin) reference this CVE w...

CVE-2017-13219

CVE-2017-13219 affects the Android kernel Synaptics touchscreen controller. Connected sources identify a denial-of-service flaw in the Upstream kernel’s Synaptics touchscreen component, exploitable on Android devices (e.g., Pixel/Nexus context). The vulnerability is a DoS with potential impact on...

CVE-2017-14875

CVE-2017-14875 describes a heap overread in the ioctl handler VIDIOC_MSM_ISP_DUAL_HW_LPM_MODE used by Android for MSM, Firefox OS for MSM, and QRD Android prior to 2017-05-23. The provided documents name the affected environments and the general vulnerability class but do not provide further root...

CVE-2017-14894

CVE-2017-14894 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF with the Linux kernel prior to the 2018-04-05 patch level. In wma_vdev_start_resp_handler(), the vdev_id received from firmware can exceed the maximum BSSID stored in wma_handle->interfaces, l...

CVE-2017-14901

CVE-2017-14901 describes a buffer overrun in the Qualcomm WLAN driver within Android for MSM/CAF Linux kernel when handling QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE with a TXPOWER_SCALE attribute of fewer than 1 byte. Affected components include Android devices using CAF/Linux kernel implement...

CVE-2017-14914

CVE-2017-14914 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel. The issue arises when handles in the global client structure can become stale, per the NVD description. CVSS: 3.0/3.0 vector indicates Network attack, no user interaction, with High/CRITICAL...

CVE-2017-15818

CVE-2017-15818 describes an integer overflow in CAF-built Android stacks (Android for MSM, Firefox OS for MSM, QRD Android) when loading a user application in qseecom. The vulnerability arises in the Linux kernel path used by CAF and can occur if the application partition size rounds up to page_s...

CVE-2017-15845

CVE-2017-15845 affects Android/CAF Qualcomm WLAN stack (Android for MSM, Firefox OS for MSM, QRD Android) with the Linux kernel, where an invalid (negative) user-space firmware size input during WLAN cal data store can cause memory leak or a buffer overflow. The root cause is a negative firmware ...

CVE-2017-15859

CVE-2017-15859 is a buffer overrun in the Qualcomm Atheros WLAN stack (qcacld-2.0), triggered when QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB carries fewer than 1 byte in the TXPOWER_SCALE_DECR_DB attribute. Affected: Android for MSM, Firefox OS for MSM, and QRD Android devices prior to ...

CVE-2017-18051

CVE-2017-18051 affects Android for MSM, Firefox OS for MSM, and QRD Android builds based on CAF Linux kernel. The root cause is improper input validation of event->vdev_id in wma_rcpi_event_handler() (received from firmware), which can lead to an out-of-bounds memory read. This vulnerability i...

CVE-2017-18064

CVE-2017-18064 affects Android for MSM, Firefox OS for MSM, and CAF Android builds that use the Linux kernel. The issue is caused by improper input validation for p2p_noa_info in wma_send_bcn_buf_ll() which is obtained from firmware, leading to a potential buffer overflow. The vulnerability is as...

CVE-2017-6423

CVE-2017-6423 is an elevation-of-privilege flaw in the Qualcomm Kyro L2 driver within the Android kernel. The vulnerability could allow a local attacker to execute arbitrary code with kernel privileges on affected devices (Pixel and Pixel XL are listed in the Android bulletin). The root cause is ...

CVE-2018-11270

CVE-2018-11270 affects CAF builds for Android on MSM where a kernel path using devm_kzalloc can fail during probe, leading to automatic memory release by the kernel and potential data corruption. The description documents the root cause (memory management in the kernel) and the potential impact (...

CVE-2018-11836

CVE-2018-11836 affects Qualcomm WLAN HOST components in CAF Linux kernel builds for Android (Android for MSM, etc.). The issue is an improper length check that can cause out-of-bounds access in WLAN, enabling local, low-privilege exploitation with no user interaction. Documented impact is high (C...

CVE-2018-11902

CVE-2018-11902 affects Qualcomm WLAN host components in Android CAF builds; root cause is lack of length validation for a value received from firmware, leading to out-of-bounds access in WLAN HOST. The CVE is listed with High severity (per Qualcomm’s 2019-10-05 bulletin grouping for WLAN host). N...

CVE-2018-11903

CVE-2018-11903 affects CAF Android builds (Android for MSM, Firefox OS for MSM, QRD Android) that use the Linux kernel. The vulnerability arises from a lack of length validation for a value received from a caller function that is used as an index into WMA interfaces, enabling an out-of-bounds wri...

CVE-2018-15482

CVE-2018-15482 affects LG devices running Android 6.0–8.1, with an incorrect access-control flaw in the MLT application intents. This allows a remote attacker to bypass security restrictions and access the MLT app by sending a crafted request. Impact is described as high/critical in CVSS metrics ...