CVE-2023-32859

CVE-2023-32859 describes a classic buffer overflow in the Meta module (appearing in MediaTek chip context) caused by a missing bounds check. This could enable local escalation to SYSTEM privileges without user interaction. Exploitation details are not provided in the documents. A patch is identif...

CVE-2023-32865

The CVE-2023-32865 issue is in the display drm component (reported across MediaTek-related advisories and Red Hat advisories). It stems from an incorrect bounds check that enables an out-of-bounds write, potentially allowing local escalation of privilege with SYSTEM execution privileges. Exploita...

CVE-2023-32870

CVE-2023-32870 affects the display drm module (MediaTek context from multiple sources). The vulnerability is caused by a missing bounds check, leading to an out-of-bounds read. Implications are local escalation of privilege with SYSTEM-level execution required; exploitation does not require user ...

CVE-2023-33893

The CVE-2023-33893 entry concerns a privilege-check bypass in the fastDial service that can enable local information disclosure without additional execution privileges. Public sources consistently describe the issue as a missing permission check leading to exposure of data, with an overall CVSSv3...

CVE-2023-33895

CVE-2023-33895 affects the fastDial service. The root cause is a missing permission check which can cause local information disclosure without requiring additional execution privileges. Multiple sources (NVD, Red Hat, CVE lists) describe the impact as local information disclosure; exploitation st...

CVE-2023-33899

The CVE-2023-33899 issue affects the telephony service (notably on UNISOC chipsets per connected records). The root cause is a missing permission check that could allow a local attacker to disclose information without any additional execution privileges. Multiple sources confirm the description a...

CVE-2023-38465

CVE-2023-38465 affects the ims service, with a missing permission check that could lead to local information disclosure. The CVSSv3.1 base score is 5.5 (Privileges Required: Low, Attack Vector: Local, Confidentiality Impact: High, no impact on integrity/availability). Connected sources confirm th...

CVE-2023-38553

CVE-2023-38553 affects the gnss service on Unisoc chipsets, where a missing bounds check can trigger an out-of-bounds write. This could allow local escalation of privilege with System execution privileges needed (local, high privileges, no user interaction). The provided documents do not specify ...

CVE-2023-42692

CVE-2023-42692 concerns the wifi service on UNISOC chipsets, where a missing permission check can allow local escalation of privilege with no extra privileges. The CVSS 3.1 base vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) reflects a high impact to confidentiality, integrity, and availability. Pu...

CVE-2023-42751

CVE-2023-42751 affects the gnss service. The vulnerability is described as a missing bounds check that can cause an out-of-bounds write, leading to local denial of service with System execution privileges. The available connected documents confirm the issue and provide no explicit patch/version f...

CVE-2023-44129

Summary: CVE-2023-44129 affects LG-patched Android Messaging (com.android.mms) via the exported activity com.android.mms.ui.QClipIntentReceiverActivity. An attacker can trigger the activity, broadcast the action com.lge.message.action.QCLIP, and send their own data with Intent.FLAG_GRANT_*; the p...

CVE-2023-48357

CVE-2023-48357 affects the Unisoc vsp driver. The root cause is a missing bounds check that enables an out-of-bounds write, leading to local denial of service with system execution privileges required. Based on connected docs, affected component is the vsp driver; exploitation status is not detai...

CVE-2025-36893

CVE-2025-36893 describes a local information-disclosure vulnerability due to uninitialized data in ReadTachyonCommands within gxp_main_actor.cc. The issue can leak information with no additional execution privileges and no user interaction required. Affected component: the gxp main actor’s ReadTa...

CVE-2026-0016

CVE-2026-0016 affects CredentialManagerService.java (updateProvidersWhenServiceRemoved). The vulnerability arises from a permissions bypass that could allow overriding settings across users, causing local information disclosure with no extra execution privileges required. Exploitation status is n...

CVE-2026-0147

CVE-2026-0147 affects the mfc_core_nal_q_get_dec_metadata_sei_nal function in mfc_core_nal_q.c. The issue is an out-of-bounds write caused by a missing bounds check, which the documents state could enable remote code execution with no extra privileges and no user interaction. The vulnerability is...

CVE-2014-9947

Technical details about CVE-2014-9947 are not provided in the connected documents. The initial description indicates a TrustZone information exposure in CAF Android builds, but there are no product, version, impact, or fix specifics to act on. Monitor for updates.

CVE-2015-9043

CVE-2015-9043 is described in connected sources as a NULL pointer dereference vulnerability affecting Qualcomm components in Android CAF builds using the Linux kernel. The root cause, as stated, is a NULL pointer dereference on timer expiry, with impact described as high/critical in CVSS terms. T...

CVE-2016-11035

CVE-2016-11035 affects Samsung mobile devices with Exynos AP chipsets; a local user can trigger a kernel crash via the fb0(DECON) frame buffer interface. Connected sources reiterate this description, but no further technical details (affected versions, root cause specifics, exploit information, o...

CVE-2016-3795

CVE-2016-3795 affects the MediaTek power driver in Android on Android One devices prior to 2016-07-05. Root cause: privilege escalation via the MediaTek power driver when processing a crafted application, enabling local attackers to gain elevated privileges. Affected component is the MediaTek pow...

CVE-2016-3803

CVE-2016-3803 affects the Android kernel file system. The vulnerability is an elevation of privilege in the kernel file system on Nexus 5X and Nexus 6P, caused by a flaw in the kernel file system implementation that allows a locally installed malicious app to gain higher privileges. Connected doc...

CVE-2016-5862

CVE-2016-5862 affects Qualcomm-based Android for MSM codecs; the vulnerability arises when a codec control issued from userspace is cast to the container structure rather than the codec’s own structure. This type confusion can lead to a kernel crash and a subsequent device restart on affected Qua...

CVE-2016-6695

CVЕ-2016-6695 : Affects the Qualcomm QDSP6v2 driver (sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c) in Android before 2016-10-05. An attacker could cause a denial of service or other unspecified impact via crafted visualizer data length. This entry is part of Qualcomm component vulnerabilities in th...

CVE-2016-6714

CVE-2016-6714 describes a remote denial-of-service condition in Android’s Mediaserver. The issue affects Mediaserver in Android 6.x (before 2016-11-01) and 7.0 (before 2016-11-01); a attacker could trigger a device hang or reboot by crafting a file processed by Mediaserver. The vulnerability is c...

CVE-2017-9708

The CVE-2017-9708 issue affects Android for MSM (and related CAF builds) in the camera driver. The race condition stems from msm_ois_power_down being invoked without a mutex, causing a race in the *reg_ptr variable within msm_camera_config_single_vreg. Impact is described as a race condition with...

CVE-2018-11827

CVE-2018-11827 affects CAF/Android builds (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux kernel. The issue: improper validation of an array index in the WMA roam synchronization handler can cause an out-of-bounds write. This is tied to Qualcomm WLAN/driver components in the af...

CVE-2018-11908

Technical details (affected products, components, root cause, exploits, or fixes) are not publicly provided in the connected documents; monitor for updates.

CVE-2018-11914

Technical details for CVE-2018-11914 are not publicly available in the provided documents. Monitor for updates.

CVE-2018-11995

CVE-2018-11995 affects Android builds using CAF components with the Linux kernel. The vulnerability arises from a partition name-check variable that is not reset for every iteration, which can cause improper termination in the META image. The root cause is the variable’s retention across iteratio...

CVE-2018-3598

In CVE-2018-3598, the affected components are Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels prior to the 2018-04-05 patch level. The root cause is insufficient validation of parameters from userspace in the camera_v2 driver, leading to an information...

CVE-2018-5823

CVE-2018-5823 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android on CAF Android kernels prior to the 2018-04-05 patch level. The vulnerability is due to improper buffer length validation in the extscan hotlist event, leading to a potential buffer overflow. The NVD/NVD-affiliate...

CVE-2018-5844

CVE-2018-5844 describes a use-after-free in the Qualcomm video driver’s set_output_buffers() where binfo can be accessed after it is freed in a failure path across CAF Android for MSM, Firefox OS for MSM, and QRD Android (Linux kernel). The vulnerability affects the video driver component and has...

CVE-2018-5887

CVE-2018-5887 affects Android builds from CAF using the Linux kernel, where processing the USB StrSerialDescriptor array can trigger an array index out-of-bounds. The issue is tied to Android for MSM, Firefox OS for MSM, and QRD Android releases prior to the 2018-06-05 security patch level. The C...

CVE-2018-6246

The CVE-2018-6246 issue affects NVIDIA Widevine Trustlet inside Widevine TA on Android prior to the 2018-05-05 patch level, where the software may read data past the end or before the beginning of the intended buffer, enabling Information Disclosure. The NVIDIA SHIELD TV bulletin lists this CVE u...

CVE-2018-9534

CVE-2018-9534: A out-of-bounds write in ixheaacd_mps_getstridemap (ixheaacd_mps_parse.c) on Android 9 can lead to remote code execution. Root cause: missing bounds check in ixheaacd_mps_getstridemap. Impact per sources: potential RCE with network vector; user interaction required for exploitation...

CVE-2018-9574

CVE-2018-9574 affects Android 9 via an out-of-bounds write in impd_parse_split_drc_characteristic (impd_drc_static_payload.c), caused by missing bounds checks. This could lead to remote code execution with user interaction required; no exploitation details are provided in the connected documents ...

CVE-2018-9580

CVE-2018-9580 is an Elevation of Privilege in the HTC bootloader affecting Android kernel components. The issue is categorized as EoP with high risk (CVSS v3.0 base score 9.8) and high impact on confidentiality, integrity, and availability; exploitation details or vectors are not disclosed in the...

CVE-2019-2064

In Android 10, CVE-2019-2064 is a vulnerability in the libxaac library where a missing bounds check enables an out-of-bounds write, potentially enabling remote code execution. The issue affects Android-10 devices using libxaac and is documented across multiple sources (NVD entry; Red Hat and CNVD...

CVE-2019-2076

CVE-2019-2076 affects libxaac on Android 10. It is an out-of-bounds write due to a missing bounds check, enabling remote code execution with no additional privileges; user interaction is required for exploitation. The issue is cited across multiple sources (NVD, Red Hat, CNVD) and is referenced i...

CVE-2019-2077

CVE-2019-2077 affects Android 10’s libxaac, where a missing bounds check enables an out-of-bounds write, potentially allowing remote code execution. Evidence across sources (NVD/Red Hat/CNVD) confirms the vulnerability involves libxaac and Android 10, with exploitation requiring user interaction ...

CVE-2019-2155

CVE-2019-2155 affects the Android 10 libxaac library. The vulnerability is an out-of-bounds read due to a missing bounds check in libxaac, enabling information disclosure. Exploitation requires user interaction, and there is no indication of remote code execution in the provided documents. Impact...

CVE-2019-9246

CVE-2019-9246 describes an out-of-bounds read in the Android NFC stack due to a missing bounds check. This could allow local information disclosure on affected devices and requires user interaction for exploitation. The vulnerability is associated with Android 10 (Android-10). According to the An...

CVE-2019-9251

CVE-2019-9251 describes an out-of-bounds read in the Android NFC stack due to a missing bounds check, enabling local information disclosure. Exploitation requires user interaction. Affected product/version is Android 10. The vulnerability is documented in the Android 10 Security Release Notes, wh...

CVE-2019-9286

CVE-2019-9286 affects Android 10 components via Bluetooth, describing an out-of-bounds read caused by a missing bounds check that could enable remote information disclosure without user interaction. The NVD notes CVSSv3.1 base score 7.5 (HIGH) with network attack vector, no privileges, UI: NONE, ...

CVE-2019-9318

CVE-2019-9318: A missing variable initialization in libhevc on Android-10 (Android 10) can cause information disclosure. Exploitation requires user interaction; no remote code execution is stated. Affected component: libhevc in Android 10, with CVE details echoed across NVD/Red Hat/CVEs. Mitigati...

CVE-2019-9327

CVE-2019-9327 affects the Android 10 Bluetooth stack. Root cause: missing bounds check causing an out-of-bounds read, enabling remote information disclosure with no privileges and no user interaction over a network. Exploitation status is not detailed in the provided documents. Remediation accord...

CVE-2019-9435

CVE-2019-9435 affects Android 10 Bluetooth stack, with an out-of-bounds read due to a missing bounds check in the Bluetooth component. This enables local information disclosure without execution privileges and without user interaction. The Android 10 security release notes indicate these issues a...

CVE-2020-0197

CVE-2020-0197 affects Android 10, caused by an out-of-bounds read in InitDataParser::parsePssh, enabling local information disclosure without user interaction. Official sources (NVD/Red Hat/NCSC and Pixel bulletin) confirm this Android Media Framework issue and list Android-10 as affected. The vu...

CVE-2020-0314

CVE-2020-0314 affects Android 11 AudioService, where missing permission checks could enable local disclosure of audio configuration without extra execution privileges. The root cause is insufficient permission validation in AudioService, with exploitation not requiring user interaction. Documente...

CVE-2020-0326

CVE-2020-0326 affects Android 11 via an NFC-related out-of-bounds write caused by uninitialized data, enabling local privilege escalation with System-level privileges and no user interaction required. Multiple connected sources confirm the issue in Android 11’s NFC handling; remediation is addres...

CVE-2020-0340

CVE-2020-0340 affects Android 11 via the libcodec2_soft_mp3dec component, where uninitialized data can cause information disclosure. The issue allows remote information disclosure with no execution privileges and requires user interaction to exploit. The provided connected documents confirm the v...