CVE-2018-11902

CVE-2018-11902 affects Qualcomm WLAN host components in Android CAF builds; root cause is lack of length validation for a value received from firmware, leading to out-of-bounds access in WLAN HOST. The CVE is listed with High severity (per Qualcomm’s 2019-10-05 bulletin grouping for WLAN host). N...

CVE-2018-11903

CVE-2018-11903 affects CAF Android builds (Android for MSM, Firefox OS for MSM, QRD Android) that use the Linux kernel. The vulnerability arises from a lack of length validation for a value received from a caller function that is used as an index into WMA interfaces, enabling an out-of-bounds wri...

CVE-2018-15482

CVE-2018-15482 affects LG devices running Android 6.0–8.1, with an incorrect access-control flaw in the MLT application intents. This allows a remote attacker to bypass security restrictions and access the MLT app by sending a crafted request. Impact is described as high/critical in CVSS metrics ...

CVE-2018-21067

No concrete technical details (affected product/component, root cause, versions, or fix) are provided across the connected documents for CVE-2018-21067. The sources only repeat the generic Samsung Trustlet information disclosure description. Monitor for updates.

CVE-2018-21068

The CVE-2018-21068 entry describes a vulnerability affecting Samsung mobile devices running Android O (8.0). In Secure Folder mode, an application can be executed without entering a password through a split-screen scenario. Root cause/details are not fully disclosed in the provided documents; no ...

CVE-2018-3561

CVE-2018-3561 is a Qualcomm Diagchar-related issue affecting Android on MSM devices. The root cause is a race condition in diag_ioctl_lsm_deinit() that leads to a Use-After-Free condition. The vulnerability is characterized as Elevation of Privilege (EoP) with local access requirements and high i...

CVE-2018-5830

CVE-2018-5830 describes a potential buffer overflow in the Android CAF/Linux kernel stack when processing the HTT_T2H_MSG_TYPE_MGMT_TX_COMPL_IND message, affecting Android for MSM, Firefox OS for MSM, and QRD Android builds prior to the 2018-06-05 patch level. Root cause is a buffer overflow in t...

CVE-2018-5886

CVE-2018-5886 describes a vulnerability where a pointer in an ADSPRPC command is not properly validated in CAF Android builds using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The root cause is improper validation of a pointer in the ADSPRPC path, which can allow access t...

CVE-2018-5887

CVE-2018-5887 affects Android builds from CAF using the Linux kernel, where processing the USB StrSerialDescriptor array can trigger an array index out-of-bounds. The issue is tied to Android for MSM, Firefox OS for MSM, and QRD Android releases prior to the 2018-06-05 security patch level. The C...

CVE-2018-9535

CVE-2018-9535 is a vulnerability in Android 9 where ixheaacd_reset_acelp_data_fix in ixheaacd_lpc.c can write out of bounds due to a missing bounds check, enabling remote code execution with network attack vector and user interaction required. The issue is documented in NVD for Android 9 and echo...

CVE-2018-9544

CVE-2018-9544 : In Android 9, the Bluetooth BTIF path btif_hd.cc: register_app allows an out-of-bounds read due to a missing bounds check. This can lead to local information disclosure in the Bluetooth service without extra privileges or user interaction. Affected: Android 9. Root cause: insuffic...

CVE-2018-9571

CVE-2018-9571 affects Android 9, where impd_parse_loud_eq_instructions in impd_drc_dynamic_payload.c allows an out-of-bounds write due to missing bounds checks. This could enable remote code execution with no extra privileges, and exploitation requires user interaction. The vulnerability is docum...

CVE-2018-9577

The CVE-2018-9577 issue affects Android 9 and is caused by a missing bounds check in impd_parametric_drc_parse_gain_set_params within impd_drc_static_payload.c, leading to a possible out-of-bounds write. This could enable remote code execution with user interaction required, as described in the N...

CVE-2019-20572

CVE-2019-20572 describes a buffer overflow in the load_kernel path on Samsung mobile devices with Exynos chips running O(8.1) and P(9.0). The issue is triggered by untrusted data and is documented across multiple feeds (NVD entry and Red Hat/CVE references) under the Samsung ID SVE-2019-14939. Th...

CVE-2019-20587

CVE-2019-20587 corresponds to a type-confusion vulnerability in Samsung mobile devices running O(8.1) and P(9.0) with TEEGRIS. The issue is in the MLDAP Trustlet, enabling arbitrary code execution due to a type confusion flaw. Samsung ID: SVE-2019-14867 (August 2019). Connected sources (Red Hat, ...

CVE-2019-20613

CVE-2019-20613 affects Samsung mobile devices running Android N (7.x) and O (8.x). A time-based SQL injection in the Contacts database is described, with Samsung’s internal ID SVE-2018-13452 (March 2019). Multiple connected sources corroborate a SQL injection vulnerability that can expose or mani...

CVE-2019-20618

The vulnerability CVE-2019-20618 affects Samsung mobile devices on Android P (9.0) where the Pin Window feature allows unauthenticated unpinning of an app. The connected Red Hat/EUVD/CNVD/etc. records mirror the same description and confirm the issue stems from Pin Window behavior; no explicit ro...

CVE-2019-2151

CVE-2019-2151 is an information-disclosure flaw in libxaac on Android 10 caused by an out-of-bounds read due to a missing bounds check. The Red Hat and CNVD references confirm the same description and indicate Android-10 as affected. There is no explicit indication of an available patch/version i...

CVE-2019-2188

CVE-2019-2188 affects the Android kernel’s Easel image driver. The issue is memory corruption caused by race conditions, enabling local escalation of privilege to System level without user interaction. Public patch details or fixed versions are not provided in the supplied documents. No exploitat...

CVE-2019-9251

CVE-2019-9251 describes an out-of-bounds read in the Android NFC stack due to a missing bounds check, enabling local information disclosure. Exploitation requires user interaction. Affected product/version is Android 10. The vulnerability is documented in the Android 10 Security Release Notes, wh...

CVE-2019-9266

CVE-2019-9266 involves an out-of-bounds write in Android’s sensorservice due to a missing bounds check, enabling local privilege escalation with System-level privileges and no user interaction required. Affected software is Android 10; the vulnerability is an Elevation of Privilege (EoP) within t...

CVE-2019-9284

The CVE-2019-9284 entry describes a Bluetooth out-of-bounds read in Android 10 that could lead to remote information disclosure without user interaction due to a missing bounds check. Connected sources confirm the vulnerability affects Android-10 Bluetooth components and is addressed in the Andro...

CVE-2019-9308

CVE-2019-9308 affects Android 10’s libAACdec. The root cause is an out-of-bounds write caused by an integer overflow, enabling remote code execution with no privileges and requiring user interaction to exploit. Remediation is via Android 10 security updates; devices with a patch level of 2019-09-...

CVE-2019-9312

The CVE-2019-9312 entry concerns Android 10 Bluetooth: an out-of-bounds read caused by a missing bounds check in Bluetooth could disclose local information without extra privileges and without user interaction. Affected component is Bluetooth stack on Android 10 (Android ID A-78288018). Reported ...

CVE-2019-9320

CVE-2019-9320 relates to the Android media stack (libavc) with a missing variable initialization. The issue affects Android 10 and can lead to remote information disclosure without extra privileges; exploitation requires user interaction. The published details describe Information Disclosure as t...

CVE-2019-9323

CVE-2019-9323 affects the Android Wallpaper Manager service. The issue is an information disclosure caused by a missing permission check, allowing any application to access the wallpaper image without extra privileges, with no user interaction required. The Android 10 release notes indicate this ...

CVE-2019-9329

CVE-2019-9329 affects Android 10, where a Bluetooth out-of-bounds read can occur due to uninitialized data, enabling remote information disclosure without privileges or user interaction. The affected component is Bluetooth in Android 10 devices; root cause is an out-of-bounds read from uninitiali...

CVE-2019-9342

CVE-2019-9342 affects Android 10 Bluetooth stack. The issue is an out-of-bounds read caused by a missing bounds check, enabling remote information disclosure without user interaction over a network. CVSS highlights: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (base 7.5). Remediation: apply Android 10 sec...

CVE-2019-9394

CVE-2019-9394 affects Android 10, with a Bluetooth vulnerability caused by a missing bounds check in a Bluetooth component that allows remote denial of service without user interaction. The issue is listed in multiple sources (Android 10 security release notes and Red Hat advisory) with the same ...

CVE-2019-9399

CVE-2019-9399 affects Android 10 Print Service. Root cause: improper use of cryptography enabling MITM and remote information disclosure without privileges or user interaction. Impact: partial confidentiality loss. Exploit status not detailed in provided docs. Remediation: apply Android 10 securi...

CVE-2019-9411

CVE-2019-9411 is reported to affect the Android 10 platform, tied to the libavc component. The vulnerability description indicates an information disclosure caused by uninitialized data in libavc, enabling remote information disclosure with no execution privileges required. Exploitation would req...

CVE-2019-9473

CVE-2019-9473 affects the Android 10 Bluetooth stack. The issue is an out-of-bounds read caused by a missing bounds check in Bluetooth code, leading to remote information disclosure without extra execution privileges. Exploitation does not require user interaction and can be achieved over the net...

CVE-2020-0044

CVE-2020-0044 affects the Android FPC Fingerprint TEE in the Android kernel. In set_nonce of fpc_ta_qc_auth.c, there is an out-of-bounds read due to a missing bounds check, enabling local information disclosure with system execution privileges required. Exploitation is local and does not require ...

CVE-2020-0058

The CVE-2020-0058 issue is a real Android vulnerability affecting the Bluetooth stack code path: in l2c_rcv_acl_data of l2c_main.cc there is an out-of-bounds read due to an incorrect bounds check, potentially enabling local information disclosure with system privileges. Exploitation context is no...

CVE-2020-0139

CVE-2020-0139 affects Android 10. The vulnerability is a flaw in NDEF_MsgValidate (ndef_utils.c) where an integer overflow can cause an out-of-bounds read, potentially enabling local information disclosure when a malformed NFC tag is processed by the firmware. Exploitation is described as requiri...

CVE-2020-0144

CVE-2020-0144 affects Android 10; issue is in btm_proc_sp_req_evt in btm_sec.cc where a missing bounds check allows an out-of-bounds read. This can lead to local information disclosure via compromised device firmware with System-level privileges required. User interaction is not needed for exploi...

CVE-2020-0165

CVE-2020-0165 affects Android 10. The issue is a potential out-of-bounds write in phNxpNciHal_NfcDep_cmd_ext (nfc driver code), caused by a missing bounds check, enabling local escalation of privilege with System execution privileges; no user interaction required. CVSSv3.1 base score 6.7 (Local, ...

CVE-2020-0170

CVE-2020-0170 affects Android 10, with the vulnerability located in IMY_Event within eas_imelody.c. The issue is a missing bounds check in a resource-management path that can cause resource exhaustion, leading to remote denial of service. Exploitation requires user interaction. The provided docum...

CVE-2020-0171

CVE-2020-0171 affects Android 10; in Parse_lart of eas_mdls.c, a missing bounds check can cause resource exhaustion leading to remote denial of service. Exploitation requires user interaction. Affected platform details are reflected in Google's Pixel bulletin (patch level 2020-06-05 or later) and...

CVE-2020-0178

CVE-2020-0178 affects Android 10, specifically the SettingsProvider.cpp getAllConfigFlags function. The root cause is a missing permission check that enables a possible illegal read, leading to local information disclosure of configuration flags without extra execution privileges. Exploitation de...

CVE-2020-0185

CVE-2020-0185 affects Android 10, with the vulnerability in avrc_pars_browsing_cmd of avrc_pars_tg.cc. The root cause is a missing bounds check that enables an out-of-bounds read, leading to local information disclosure without extra privileges or user interaction. The issue is listed across mult...

CVE-2020-0186

The CVE-2020-0186 entry concerns an elevation-of-privilege flaw in Android 10 implemented in hal_fd_init (hal_fd.cc), caused by an incorrect bounds check that enables an out-of-bounds write. This could permit local escalation to system privileges with no user interaction required. The vulnerabili...

CVE-2020-0206

CVE-2020-0206 affects Android 10, where the Settings app can crash due to improper input validation, causing a local denial of service with no user interaction required. The vulnerability is documented across multiple sources (NVD/Red Hat/CVE listings). Exploit details are not provided in the con...

CVE-2020-0207

CVE-2020-0207 affects Android 10 with an out-of-bounds read in next_marker() in jdmarker.c caused by improper input validation. This can lead to remote information disclosure; exploitation requires user interaction. The issue is documented across multiple sources (NVD, Red Hat, CVE lists) with a ...

CVE-2020-0214

CVE-2020-0214 affects Android 10 and is caused by an out-of-bounds read in the function responsible for processing the file command (ce_t4t_process_select_file_cmd in ce_t4t.cc) due to an incorrect bounds check. The vulnerability allows remote information disclosure without requiring user interac...

CVE-2020-0217

The CVE-2020-0217 entry corresponds to an Android 10 vulnerability in the RW_T4tPresenceCheck function of rw_t4t.cc, where a missing bounds check can cause an out-of-bounds write. This issue enables remote code execution with NETWORK access, no privileges required, and no user interaction as desc...

CVE-2020-0274

The CVE-2020-0274 issue affects the Android 11 OMX parser, where a returned raw pointer can cause local information disclosure without requiring user interaction. This is described across multiple sources (NVD/Red Hat/CNVD entries) as an information-disclosure vulnerability tied to the OMX parser...

CVE-2020-0287

The CVE-2020-0287 issue affects libmkvextractor in Android 11. The vulnerability is a resource exhaustion (Denial of Service) caused by a missing bounds check in a component handling MKV extraction. It can be exploited remotely with network access, but requires user interaction to trigger the fla...

CVE-2020-0301

CVE-2020-0301 affects Android 11 and is tied to libstagefright, where improper input validation can cause resource exhaustion and remote denial of service. The vulnerability supports a DoS condition without additional privileges; exploitation requires user interaction. The CVE is documented in NV...

CVE-2020-0307

CVE-2020-0307 affects Android 11, specifically a Settings component issue where an unsafe PendingIntent enables a local information disclosure without user interaction. Root cause is a permission bypass via PendingIntent; exploitation is local and does not require user interaction. The Android 11...