CVE-2023-38465

CVE-2023-38465 affects the ims service, with a missing permission check that could lead to local information disclosure. The CVSSv3.1 base score is 5.5 (Privileges Required: Low, Attack Vector: Local, Confidentiality Impact: High, no impact on integrity/availability). Connected sources confirm th...

CVE-2023-42693

CVE-2023-42693 : The issue is a missing permission check in the wifi service of UNISOC chipsets, enabling local escalation of privilege with no extra execution privileges required. Connected sources confirm the affected component as the wifi service and describe the impact as local privilege elev...

CVE-2023-42722

CVE-2023-42722 concerns a use-after-free in the camera service that enables local privilege escalation to System level due to a logic error. Documented across multiple sources (e.g., UNISOC-related entries and Red Hat/NVD/CVE records) indicate it affects camera service; attack is local, with no u...

CVE-2023-44129

Summary: CVE-2023-44129 affects LG-patched Android Messaging (com.android.mms) via the exported activity com.android.mms.ui.QClipIntentReceiverActivity. An attacker can trigger the activity, broadcast the action com.lge.message.action.QCLIP, and send their own data with Intent.FLAG_GRANT_*; the p...

CVE-2023-48357

CVE-2023-48357 affects the Unisoc vsp driver. The root cause is a missing bounds check that enables an out-of-bounds write, leading to local denial of service with system execution privileges required. Based on connected docs, affected component is the vsp driver; exploitation status is not detai...

CVE-2025-48540

CVE-2025-48540 describes a local elevation-of-privilege vulnerability in the Android stack caused by a logic error in processTransactInternal of RpcState.cpp, which can trigger a local out-of-memory write. Exploitation requires local access; no user interaction is needed. Public references in And...

CVE-2026-0010

CVE-2026-0010 involves the IDrmManagerService.cpp onTransact function, where a missing bounds check allows an out-of-bounds write that could enable local escalation of privileges without user interaction. The vulnerability is reported across multiple feeds (Android-related CVE entry, Red Hat, CIR...

CVE-2026-0027

The CVE-2026-0027 issue affects the arm-smmu-v3.c function smmu_detach_dev, where a use-after-free can cause an out-of-bounds write. This vulnerability enables local privilege escalation with System execution privileges required; exploitation does not require user interaction. The available conne...

CVE-2026-0048

Technical details for CVE-2026-0048 are not publicly provided in the supplied documents. The description notes a tapjacking/overlay issue with local privilege escalation, but no concrete affected products, versions, or fixes are disclosed. Monitor for updates.

CVE-2026-0086

CVE-2026-0086 affects the Android component DisableSupervisionActivity.kt, where in onCreate a missing null check can permit deletion of supervision data. This enables local escalation of privilege without extra execution privileges and without user interaction. CVSSv3.1 vector (L, L, N, U) yield...

CVE-2014-7919

CVE-2014-7919 affects Android in b/libs/gui/ISurfaceComposer.cpp, where a null pointer dereference can cause denial of service (process crash). Connected CNVD/NVD entries confirm the Android component and impact. No specific patch/version details or exploitation data are provided in the documents...

CVE-2014-9947

Technical details about CVE-2014-9947 are not provided in the connected documents. The initial description indicates a TrustZone information exposure in CAF Android builds, but there are no product, version, impact, or fix specifics to act on. Monitor for updates.

CVE-2014-9956

CVE-2014-9956 technical details are not publicly provided in the supplied documents; no concrete affected component/version/root cause/fix is disclosed here. Monitor for updates.

CVE-2015-9049

CVE-2015-9049 is corroborated by connected sources describing an input-validation vulnerability in Qualcomm’s closed‑source components (USIM handling) within Android CAF Linux environments. CNVD-2017-26834 outlines an unauthorized-operations flaw in the Qualcomm Android component causing remote e...

CVE-2015-9060

CVE-2015-9060 affects Qualcomm products with CAF Android builds using the Linux kernel. The issue is a pointer validation flaw in a QTEE system call, as described in the CVE description. The connected documents confirm the root cause (improper pointer validation) and the affected context (Qualcom...

CVE-2016-3801

CVE-2016-3801 affects MediaTek GPS driver on Android One devices prior to 2016-07-05. Root cause: elevation of privilege via a crafted application exploiting MediaTek internal bug ALPS02688853. Impact: local privilege escalation to system could occur; vendor-specific patch not publicly detailed, ...

CVE-2016-3807

CVE-2016-3807 describes a privilege-escalation flaw in the serial peripheral interface (SPI) driver on Android devices: specifically affecting Nexus 5X and Nexus 6P, where a crafted application could gain elevated privileges due to a bug in the SPI driver. The issue is categorized as a local elev...

CVE-2016-3811

CVE-2016-3811 concerns an elevation-of-privilege vulnerability in the Android kernel video driver on Nexus 9 devices, prior to the 2016-07-05 patch level. The issue allows a local attacker with a crafted application to gain kernel privileges due to a bug in the kernel video driver (internal bug 2...

CVE-2016-3895

CVE-2016-3895 is an information-disclosure vulnerability in Android Mediaserver. The issue arises from an integer overflow in Region::unflatten (libs/ui/Region.cpp) which could allow a crafted file to cause memory corruption and expose sensitive data. Affected products are Android 6.x and 7.0 pri...

CVE-2016-3907

CVE-2016-3907 is an information-disclosure vulnerability in Qualcomm components (GPU driver, power driver, SMSM Point-to-Point driver, and sound driver) used in Android. A local malicious app could access data outside its permission levels after compromising a privileged process. The issue is doc...

CVE-2016-5345

CVE-2016-5345: Buffer overflow in the Qualcomm radio driver on Android One devices allows a local unprivileged user to gain privileges via a crafted app (Android internal bug 32639452; Qualcomm internal bug CR1079713). Affected software is Android with Qualcomm radio driver; vulnerability details...

CVE-2016-6679

CVE-2016-6679 affects Qualcomm Wi‑Fi driver in Android on Nexus 5X and Android One devices, targeting CORE/HDD/src/wlan_hdd_hostapd.c. A crafted app calling setwpaie ioctl can disclose sensitive information. Affected OS versions are Android before 2016-10-05. The vulnerability is documented in th...

CVE-2016-6693

CVE-2016-6693 describes a vulnerability in the Qualcomm QDSP6v2 driver (msm-ds2-dap-config.c) used on Android. An invalid data length in this driver could allow a remote attacker to trigger a denial of service or cause unspecified impact. The issue affects Android builds prior to 2016-10-05. Publ...

CVE-2016-6695

CVЕ-2016-6695 : Affects the Qualcomm QDSP6v2 driver (sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c) in Android before 2016-10-05. An attacker could cause a denial of service or other unspecified impact via crafted visualizer data length. This entry is part of Qualcomm component vulnerabilities in th...

CVE-2016-6696

CVE-2016-6696 affects sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in the Qualcomm QDSP6v2 driver used by Android. The issue allows denial of service (and potentially unspecified impact) when a large negative value is used for the data length, described as Qualcomm internal bug CR 1041130. Connecte...

CVE-2016-8472

CVE-2016-8472 describes an information-disclosure vulnerability in the MediaTek driver on Android. The issue could allow a local malicious application to access data outside its permission levels by exploiting the MediaTek driver after compromising a privileged process. Affected product class is ...

CVE-2016-8486

The CVE-2016-8486 entry describes an information-disclosure vulnerability in Qualcomm closed-source components within Android kernel. Affected product/area: Android kernel with Qualcomm components. Root cause: information disclosure; impact: leakage of data to an attacker with local/proximate acc...

CVE-2017-14869

CVE-2017-14869 affects Android for MSM, Firefox OS for MSM, QRD Android with CAF Linux kernel in the FOTA update path. The issue is that during FOTA partition updates, uninitialized data can be pushed to storage, potentially leaking information. The provided sources confirm affected platforms and...

CVE-2017-14889

CVE-2017-14889 affects Android for MSM, Firefox OS for MSM, and QRD Android builds derived from CAF Linux kernels. The root cause is a missing range check on the array index into the WMI descriptor pool, which could allow arbitrary address execution in the process mgmt completion handler. Reporte...

CVE-2017-15830

CVE-2017-15830 affects the Qualcomm SME driver in Android on MSM (CAF Linux kernel lineage). The root cause is improper initialization of the ch_list array index in function sme_set_plm_request(), which can lead to a buffer overflow. The vulnerability is categorized as EoP (elevation of privilege...

CVE-2017-18695

Samsung mobile devices running KK (4.4), L (5.0/5.1), M (6.0), and N (7.0) are affected. An attacker who controls a subdomain can discover a user’s credentials during an email account login via an EAS Autodiscover packet. The initial sources reference a Samsung security update, but no remediation...

CVE-2018-11270

CVE-2018-11270 affects CAF builds for Android on MSM where a kernel path using devm_kzalloc can fail during probe, leading to automatic memory release by the kernel and potential data corruption. The description documents the root cause (memory management in the kernel) and the potential impact (...

CVE-2018-11904

CVE-2018-11904 is a null pointer dereference vulnerability in the Android WLAN stack (CAF/Linux kernel) where asynchronous callbacks may dereference a caller’s local pointer if the caller times out. This enables a local attacker to cause a denial of service. Public connected documents corroborate...

CVE-2018-11906

CVE-2018-11906 affects Android releases (Android for MSM, Firefox OS for MSM, QRD Android) built from CAF Linux kernel. The vulnerability is due to default privileged access to ADB and debug-fs, enabling local attackers with low complexity to achieve high-impact confidentiality, integrity, and av...

CVE-2018-11907

CVE-2018-11907 : Affects CAF Android builds using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The issue is improper access control that can allow device nodes and executables to be run from /firmware/. The available documents reiterate the impact as a potential issue but ...

CVE-2018-11995

CVE-2018-11995 affects Android builds using CAF components with the Linux kernel. The vulnerability arises from a partition name-check variable that is not reset for every iteration, which can cause improper termination in the META image. The root cause is the variable’s retention across iteratio...

CVE-2018-3564

CVE-2018-3564 affects the FastRPC driver in CAF Android builds using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The issue is a Use-After-Free when mapping on the remote processor fails, potentially impacting components such as DSP_Services. The description notes that thi...

CVE-2018-5823

CVE-2018-5823 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android on CAF Android kernels prior to the 2018-04-05 patch level. The vulnerability is due to improper buffer length validation in the extscan hotlist event, leading to a potential buffer overflow. The NVD/NVD-affiliate...

CVE-2018-5843

The connected CNVD entry CNVD-2018-22555 ties CVE-2018-5843 to the Qualcomm Modem driver in Android on Pixel/Nexus, describing a vulnerability in wma_pdev_div_info_evt_handler() where there is no upper bound check on event->num_chains_valid from firmware, allowing a buffer overwrite of the fix...

CVE-2018-5844

CVE-2018-5844 describes a use-after-free in the Qualcomm video driver’s set_output_buffers() where binfo can be accessed after it is freed in a failure path across CAF Android for MSM, Firefox OS for MSM, and QRD Android (Linux kernel). The vulnerability affects the video driver component and has...

CVE-2018-5864

CVE-2018-5864 maps to a Qualcomm WMA information-disclosure vulnerability affecting Android devices (Pixel/Nexus) prior to the 2018-07-05 patch level. The issue arises during processing of WMI_APFIND events in CAF/Linux kernel-based Android builds, causing a potential buffer over-read and informa...

CVE-2018-9531

The CVE-2018-9531 issue is in Android 9 (Media framework) within AudioSpecificConfig_Parse in tpdec_asc.cpp. It describes a possible out-of-bounds write due to a missing bounds check, enabling remote code execution with no extra privileges, with exploitation requiring user interaction. No exploit...

CVE-2018-9544

CVE-2018-9544 : In Android 9, the Bluetooth BTIF path btif_hd.cc: register_app allows an out-of-bounds read due to a missing bounds check. This can lead to local information disclosure in the Bluetooth service without extra privileges or user interaction. Affected: Android 9. Root cause: insuffic...

CVE-2018-9576

CVE-2018-9576 affects Android 9 and is due to an out-of-bounds write in impd_parse_parametric_drc_instructions (impd_drc_static_payload.c) with missing bounds checks. Exploitation could lead to remote code execution and requires user interaction. The vulnerability is tied to the Android 9 stack; ...

CVE-2018-9578

CVE-2018-9578 describes an out-of-bounds write in ixheaacd_adts_crc_start_reg (ixheaacd_adts_crc_check.c) on Android 9, caused by a missing bounds check. This could enable remote escalation of privilege without user interaction. Connected CNVD notes specify Android 9 exposure and indicate the iss...

CVE-2019-2077

CVE-2019-2077 affects Android 10’s libxaac, where a missing bounds check enables an out-of-bounds write, potentially allowing remote code execution. Evidence across sources (NVD/Red Hat/CNVD) confirms the vulnerability involves libxaac and Android 10, with exploitation requiring user interaction ...

CVE-2019-2141

The CVE-2019-2141 issue affects Android 10, specifically the libxaac library. The root cause is an out-of-bounds write due to a missing bounds check in libxaac, which could enable remote code execution. The vulnerability is described as requiring user interaction for exploitation and having poten...

CVE-2019-2154

CVE-2019-2154 affects the Android 10 libxaac library, where an out-of-bounds read due to a missing bounds check could disclose information. The vulnerability allows information disclosure without executing code, with user interaction required for exploitation. The connected Red Hat advisory reite...

CVE-2019-2155

CVE-2019-2155 affects the Android 10 libxaac library. The vulnerability is an out-of-bounds read due to a missing bounds check in libxaac, enabling information disclosure. Exploitation requires user interaction, and there is no indication of remote code execution in the provided documents. Impact...

CVE-2019-9246

CVE-2019-9246 describes an out-of-bounds read in the Android NFC stack due to a missing bounds check. This could allow local information disclosure on affected devices and requires user interaction for exploitation. The vulnerability is associated with Android 10 (Android-10). According to the An...