CVE-2026-0051

CVE-2026-0051 describes a vulnerability in multiple functions of ubsan_throwing_runtime.cpp that can trigger a system crash via improper input validation, leading to remote denial of service with no extra privileges and no user interaction required. The CVE is documented across NVD entries and re...

CVE-2025-36893

CVE-2025-36893 describes a local information-disclosure vulnerability due to uninitialized data in ReadTachyonCommands within gxp_main_actor.cc. The issue can leak information with no additional execution privileges and no user interaction required. Affected component: the gxp main actor’s ReadTa...

CVE-2025-48562

CVE-2025-48562 is an Android information-disclosure flaw caused by a logic error in the writeContent function of RemotePrintDocument.java. The issue can lead to local information disclosure without additional execution privileges, and exploitation requires user interaction. Multiple connected sou...

CVE-2025-48573

The CVE-2025-48573 entry describes a local elevation-of-privilege in Android's MediaSessionRecord.java via a path in sendCommand that could allow launching a foreground service while the app is backgrounded (FGS while-in-use abuse). The issue enables privilege escalation without extra execution p...

CVE-2026-0025

CVE-2026-0025 is a vulnerability in Android’s Notification.java hasImage path where a permissions bypass can leak information across users, enabling local privilege escalation with no extra execution privileges and no user interaction. Exploitation is local and no exploit details are provided in ...

CVE-2026-0085

CVE-2026-0085 relates to a vulnerability in the DataRowHandler.java function applySimpleFieldMaxSize , where improper input validation could allow inserting an unusually large contact name. The result is a local Denial of Service with no extra privileges and no user interaction required. Document...

CVE-2015-9038

CVE-2015-9038 affects Qualcomm closed‑source components in Android CAF builds using the Linux kernel. Description: a NULL pointer may be dereferenced in the front end, caused by NULL pointer usage in the vulnerable path. Root cause: NULL pointer dereference. Impact: potential crash or denial of s...

CVE-2016-10234

CVE-2016-10234 describes an information-disclosure vulnerability in the Qualcomm IPA driver within the Android kernel. The issue could allow a local attacker to access data outside of normal permissions. The CVE is listed under the Android security bulletin with affected devices (Nexus 5X, Nexus ...

CVE-2016-10236

CVE-2016-10236 describes an information-disclosure vulnerability in the Qualcomm USB driver affecting Android devices with affected Android kernel components. The NVD entry characterizes the issue as a local information exposure in the Qualcomm USB driver, with Pixel and Pixel XL listed among aff...

CVE-2016-11035

CVE-2016-11035 affects Samsung mobile devices with Exynos AP chipsets; a local user can trigger a kernel crash via the fb0(DECON) frame buffer interface. Connected sources reiterate this description, but no further technical details (affected versions, root cause specifics, exploit information, o...

CVE-2016-3795

CVE-2016-3795 affects the MediaTek power driver in Android on Android One devices prior to 2016-07-05. Root cause: privilege escalation via the MediaTek power driver when processing a crafted application, enabling local attackers to gain elevated privileges. Affected component is the MediaTek pow...

CVE-2016-3803

CVE-2016-3803 affects the Android kernel file system. The vulnerability is an elevation of privilege in the kernel file system on Nexus 5X and Nexus 6P, caused by a flaw in the kernel file system implementation that allows a locally installed malicious app to gain higher privileges. Connected doc...

CVE-2016-3818

CVE-2016-3818 affects libc in Android 4.x prior to 4.4.4. A crafted file can trigger a denial of service, causing a device hang or reboot. Root cause: vulnerability in libc used by Android devices. Impact is limited to DoS (no remote code execution indicated in the provided data). Public remediat...

CVE-2016-3837

CVE-2016-3837 affects the Wi‑Fi stack in Android, specifically service/jni/com_android_server_wifi_WifiNative.cpp, allowing information disclosure via a crafted app that provides a MAC address with too few characters. Impacted Android versions include 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6...

CVE-2016-3869

CVE-2016-3869 pertains to the Broadcom Wi‑Fi driver in Android prior to 2016-09-05 on Nexus devices (Nexus 5/6/6P/9/Nexus Player/Pixel C). The vulnerability enables elevation of privilege via a crafted application, exploiting Android internal bug 29009982 and Broadcom internal bug RB#96070. Impac...

CVE-2016-5862

CVE-2016-5862 affects Qualcomm-based Android for MSM codecs; the vulnerability arises when a codec control issued from userspace is cast to the container structure rather than the codec’s own structure. This type confusion can lead to a kernel crash and a subsequent device restart on affected Qua...

CVE-2017-6424

CVE-2017-6424 is an elevation of privilege in the Qualcomm Wi‑Fi driver affecting Android kernel. Connected sources confirm a local exploit path in the Qualcomm Wi‑Fi stack and list affected devices as Nexus 5X, Nexus 6P, Nexus 9, Pixel C, Nexus Player with updates released for the 2017-04-01 pat...

CVE-2017-9708

The CVE-2017-9708 issue affects Android for MSM (and related CAF builds) in the camera driver. The race condition stems from msm_ois_power_down being invoked without a mutex, causing a race in the *reg_ptr variable within msm_camera_config_single_vreg. Impact is described as a race condition with...

CVE-2018-11869

CVE-2018-11869 affects Android-family releases used on CAF/Linux kernels. The issue is a lack of length validation for a value received from firmware, which can cause a buffer overflow in the WMA handler . The vulnerability is described as local with potential complete impact on confidentiality, ...

CVE-2018-11914

Technical details for CVE-2018-11914 are not publicly available in the provided documents. Monitor for updates.

CVE-2018-3598

In CVE-2018-3598, the affected components are Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels prior to the 2018-04-05 patch level. The root cause is insufficient validation of parameters from userspace in the camera_v2 driver, leading to an information...

CVE-2018-5887

CVE-2018-5887 affects Android builds from CAF using the Linux kernel, where processing the USB StrSerialDescriptor array can trigger an array index out-of-bounds. The issue is tied to Android for MSM, Firefox OS for MSM, and QRD Android releases prior to the 2018-06-05 security patch level. The C...

CVE-2018-5889

CVE-2018-5889 affects Qualcomm bootloader components. The connected records classify it as a Local Elevation of Privilege (EoP) vulnerability in the bootloader, with a moderate severity. The issue is described as a buffer overflow occurring in Android releases from CAF when processing a compresse...

CVE-2018-6246

The CVE-2018-6246 issue affects NVIDIA Widevine Trustlet inside Widevine TA on Android prior to the 2018-05-05 patch level, where the software may read data past the end or before the beginning of the intended buffer, enabling Information Disclosure. The NVIDIA SHIELD TV bulletin lists this CVE u...

CVE-2018-9347

The CVE-2018-9347 entry affects Android devices and is caused by incorrect input validation in SMF_ParseMetaEvent within eas_smf.c, which can trigger an infinite loop and enable a remote temporary DoS. Affected products/versions listed include Android 7.x (7.0, 7.1.1, 7.1.2), Android 8.x (8.0, 8....

CVE-2018-9533

CVE-2018-9533 affects Android 9 and is described as an out-of-bounds read/write in ixheaacd_dec_data_init (ixheaacd_create.c) that could enable remote code execution with no extra privileges; exploitation reportedly requires user interaction. The issue is documented in the Android 2018-11 securit...

CVE-2018-9580

CVE-2018-9580 is an Elevation of Privilege in the HTC bootloader affecting Android kernel components. The issue is categorized as EoP with high risk (CVSS v3.0 base score 9.8) and high impact on confidentiality, integrity, and availability; exploitation details or vectors are not disclosed in the...

CVE-2019-2076

CVE-2019-2076 affects libxaac on Android 10. It is an out-of-bounds write due to a missing bounds check, enabling remote code execution with no additional privileges; user interaction is required for exploitation. The issue is cited across multiple sources (NVD, Red Hat, CNVD) and is referenced i...

CVE-2019-2148

CVE-2019-2148 affects the libxaac library in Android 10, where an out-of-bounds read due to a missing bounds check can lead to information disclosure. The vulnerability requires user interaction to exploit and is described across multiple sources (NVD, Red Hat). Practical impact is information di...

CVE-2019-2151

CVE-2019-2151 is an information-disclosure flaw in libxaac on Android 10 caused by an out-of-bounds read due to a missing bounds check. The Red Hat and CNVD references confirm the same description and indicate Android-10 as affected. There is no explicit indication of an available patch/version i...

CVE-2019-9251

CVE-2019-9251 describes an out-of-bounds read in the Android NFC stack due to a missing bounds check, enabling local information disclosure. Exploitation requires user interaction. Affected product/version is Android 10. The vulnerability is documented in the Android 10 Security Release Notes, wh...

CVE-2019-9263

CVE-2019-9263 affects Android 10 telephony and describes a bypass of user interaction requirements due to missing permission checks. This can enable local elevation of privilege with no additional execution privileges needed, and exploitation does not require user interaction. The issue is charac...

CVE-2019-9264

CVE-2019-9264 affects Android 10 where the libxaac library contains a missing-bounds-check flaw that enables an information-disclosure via an out-of-bounds read. This issue requires user interaction for exploitation and could disclose partial data without executing code. The root cause is an out-...

CVE-2019-9317

CVE-2019-9317 affects Android 10’s libstagefright, where a missing variable initialization could allow remote information disclosure. Root cause is an uninitialized variable in libstagefright, enabling information leakage without additional privileges; exploitation requires user interaction per t...

CVE-2019-9327

CVE-2019-9327 affects the Android 10 Bluetooth stack. Root cause: missing bounds check causing an out-of-bounds read, enabling remote information disclosure with no privileges and no user interaction over a network. Exploitation status is not detailed in the provided documents. Remediation accord...

CVE-2019-9342

CVE-2019-9342 affects Android 10 Bluetooth stack. The issue is an out-of-bounds read caused by a missing bounds check, enabling remote information disclosure without user interaction over a network. CVSS highlights: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (base 7.5). Remediation: apply Android 10 sec...

CVE-2019-9435

CVE-2019-9435 affects Android 10 Bluetooth stack, with an out-of-bounds read due to a missing bounds check in the Bluetooth component. This enables local information disclosure without execution privileges and without user interaction. The Android 10 security release notes indicate these issues a...

CVE-2019-9473

CVE-2019-9473 affects the Android 10 Bluetooth stack. The issue is an out-of-bounds read caused by a missing bounds check in Bluetooth code, leading to remote information disclosure without extra execution privileges. Exploitation does not require user interaction and can be achieved over the net...

CVE-2020-0061

CVE-2020-0061 pertains to Pixel Recorder on Android, where a permissions bypass can allow arbitrary apps to record audio, leading to local information disclosure without extra execution privileges. The vulnerability affects the Android System component as listed in the Pixel Update Bulletin (Syst...

CVE-2020-0285

CVE-2020-0285 affects Android 11 Telephony. The issue is a missing permission check that enables a local information disclosure without requiring additional execution privileges, and does not require user interaction for exploitation. The vulnerability is described consistently across multiple co...

CVE-2020-0316

CVE-2020-0316 affects Android 11, with a missing permission check in Telephony that could allow local disclosure of radio data without extra privileges or user interaction. The issue targets the Telephony component and is described across multiple sources as an information disclosure vulnerabilit...

CVE-2020-0341

CVE-2020-0341 affects Android 11; a missing permission check in DisplayManager may allow local escalation of privilege without user interaction. The issue is categorized as Elevation of Privilege (EoP). No exploit details are provided in the sources. Remediation: Android 11 security release notes...

CVE-2020-0351

CVE-2020-0351 affects Android 11 via the libstagefright component, where improper input validation can cause CPU exhaustion leading to remote denial of service. Impact is a DoS with no additional execution privileges required; exploitation is noted as requiring user interaction, but explicit expl...

CVE-2020-0352

CVE-2020-0352 affects Android 11 MediaProvider. The vulnerability is a SQL injection in MediaProvider that can bypass permissions, enabling local information disclosure without extra privileges or user interaction. Impact is limited to partial confidentiality loss on affected devices. Remediation...

CVE-2020-0370

CVE-2020-0370 affects the Android 11 platform, with a vulnerability in the libAACdec component where a missing bounds check can cause an out-of-bounds read. This may enable remote information disclosure and, per the CVE description, requires user interaction to exploit. Affected software is Andro...

CVE-2020-0387

CVE-2020-0387 affects the SmartSpace package: in its manifest files there is a tapjacking vector caused by a missing permission check. The issue enables local elevation of privilege and possible account hijacking, with exploitation requiring user interaction. The vulnerability is categorized as a...

CVE-2020-0492

CVE-2020-0492 affects Android 11 Media framework (BitstreamFillCache in bitstream.cpp). Root cause: out-of-bounds read caused by a heap buffer overflow leading to potential remote information disclosure. Impact: requires no privileges but may require user interaction for exploitation; exposed dat...

CVE-2020-0494

CVE-2020-0494 corresponds to a heap buffer overflow in ih264d_parse_ave (ih264d_sei.c) that can cause an out-of-bounds read and remote information disclosure on Android 11 devices. The vulnerability affects Android 11 Pixel/Android components in the media stack and is described as requiring user ...

CVE-2020-25047

CVE-2020-25047 affects Samsung mobile devices on Android P/Q where the S Secure app does not enforce the intended password requirement for a locked application. Root cause: insufficient password enforcement in S Secure. Impact is partial confidentiality and potential access to a locked app; CVE s...

CVE-2020-25049

CVE-2020-25049 affects Samsung mobile devices running P (9.0) and Q (10.0) software, where the StatusBarService has insufficient DEX access control. The vulnerability is documented by NVD as having a high base score (CVSS v3.1: 9.8, NETWORK, NONE user interaction, HIGH confidentiality/integrity/a...