CVE-2015-3834

Technical details about CVE-2015-3834 are not publicly available in the provided connected documents. The initial entry describes the vulnerability but lacks corroborating specifics in the connected sources. Monitor for updates and new disclosures.

CVE-2015-3839

CVE-2015-3839 affects Android 5.1.1 and earlier. The vulnerability lies in the updateMessageStatus function, where a local user can trigger a NULL pointer dereference, causing a denial of service (process crash). The issue is documented across sources as a local-exploit scenario with no remote ac...

CVE-2016-0834

CVE-2016-0834 affects Android 6.x mediaserver with an unspecified media codec vulnerability that allows remote code execution or memory corruption via a crafted media file (internal bug 26220548). The NVD entry notes a CVSSv3 base score of 8.4 (HIGH) with local attack vector, no privileges, and n...

CVE-2016-1621

CVE-2016-1621 affects libvpx in mediaserver on Android (4.x before 4.4.4; 5.x before 5.1.1; 6.0 before 2016-03-01). Root cause: memory corruption in mediaserver triggered by processing crafted media files, linked to libwebm/mkvparser.cpp. Impact: remote code execution or denial of service within ...

CVE-2016-2484

CVE-2016-2484 affects libstagefright in mediaserver across Android 4.x up to 4.4.4, 5.x up to 5.0.2/5.1.1, and 6.x prior to 2016-06-01. The issue is that OMX buffer sizes for GSM and G711 codecs are not validated, enabling a crafted app to escalate privileges to Signature or SignatureOrSystem. Pr...

CVE-2016-2504

CVE-2016-2504 concerns the Qualcomm KGSL GPU driver in Android prior to 2016-08-05 on Nexus devices (5, 5X, 6, 6P, 7 (2013)). The issue is a local privilege-escalation vulnerability due to a use-after-free flaw in the KGSL driver (kgsl_mem_entry) that can be triggered by a crafted app, allowing a...

CVE-2017-0384

CVE-2017-0384 describes an elevation-of-privilege flaw in Android’s Audioserver, specifically in libeffects/src/lvm/wrapper/Bundle/EffectBundle.cpp, which could allow a local malicious app to run arbitrary code inside a privileged process. Affected products/versions include Android 4.4.4, 5.0.2, ...

CVE-2017-0449

CVE-2017-0449 describes an elevation-of-privilege in the Broadcom Wi‑Fi driver for Android devices using the 3.10 kernel (e.g., Nexus 6P/Nexus 6). A local, privileged process could be exploited by a malicious user/application to execute arbitrary code in the kernel context. The CNVD entry corrobo...

CVE-2017-0465

CVE-2017-0465 describes an elevation of privilege vulnerability in the Qualcomm ADSPRPC driver that could allow a local attacker to execute arbitrary code in the kernel context on Android devices. Affected components/versions in the public records include the Android kernel (Kernel-3.10, Kernel-3...

CVE-2017-0493

CVE-2017-0493 is an information-disclosure vulnerability in Android’s File-Based Encryption that could allow a local attacker to bypass lock-screen protections. Affected products/versions (from sources): Android 7.0 and 7.1.1. Root cause: information disclosure within File-Based Encryption (no fu...

CVE-2017-0635

CVE-2017-0635 describes a remote denial-of-service in Android’s Mediaserver, via HevcUtils.cpp in libstagefright. An attacker can craft a file that causes a device hang or reboot. Affected products/versions (per the provided doc): Android 7.0, 7.1.1, and 7.1.2. The vulnerability arises from proce...

CVE-2017-0664

CVE-2017-0664 affects Android’s Framework with an elevation of privilege vulnerability. Affected: Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 (Android ID A-36491278). Description in connected Nessus entry confirms the issue is an EoP in the Framework and notes there is no vendor-...

CVE-2017-0732

CVE-2017-0732 is referenced in EulerOS security advisories as a vulnerability in OpenSSL/OpenSSL-based TLS key exchange. The connected Nessus/NASL entries describe that during TLS key exchange with a DH(E) cipher suite a server may send a very large prime, causing the client to hang while generat...

CVE-2017-0733

The CVE-2017-0733 entry describes a denial-of-service vulnerability in Android’s media framework (libmediaplayerservice). Affected products/versions include Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The initial description does not specify the exact root cause beyond the DoS label;...

CVE-2017-0740

CVE-2017-0740 is a remote code execution vulnerability in the Broadcom networking driver for Android, affecting the Android kernel. The connected sources describe the issue as a Broadcom Networking driver RCE in Android 7.1.2 and earlier, with Android Bug ID A-37168488 and reference B-RB#116402. ...

CVE-2017-0763

CVE-2017-0763 is a remote code execution vulnerability in Android’s media framework libhevc. Affected products include Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0. The root cause is a flaw in the media framework’s HEVC decoding path that could allow an attacker to run ar...

CVE-2017-0770

CVE-2017-0770 is an elevation of privilege in Android's media framework (libmediaplayerservice) affecting Android versions 4.4.4–8.0. The entry provides the vulnerable component and affected versions, plus CVSS scores (high severity). No exploit status is listed in the provided documents; the And...

CVE-2017-13160

CVE-2017-13160 is a remote code execution in Android’s Bluetooth subsystem affecting Android 7.0, 7.1.1, 7.1.2 and 8.0 (Android ID A-37160362). The vulnerability is classified as RCE and received a Critical/High-severity rating in the Android bulletin, with impact described as arbitrary code exec...

CVE-2017-13197

CVE-2017-13197 affects Android’s Media Framework (family of code using ihevcd_parse_slice.c). The vulnerability arises because slave threads are not joined when an error occurs, leading to a remote denial of service of a critical system process without extra privileges or user interaction. Affect...

CVE-2017-13248

CVE-2017-13248 affects Android Media framework; the vulnerability is an out-of-bounds write in impeg2_idct_recon_sse42_intr.c (impeg2_idct_recon_sse42_intr) that could allow remote code execution with user interaction. Affected Android versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. The issue ...

CVE-2017-13287

CVE-2017-13287 is an Elevation of Privilege vulnerability in Android’s VerifyCredentialResponse.java. In createFromParcel, there is a possible invalid parcel read caused by insufficient input validation. If mPayload in writeToParcel is null, this could allow a local attacker to escalate privilege...

CVE-2017-13319

CVE-2017-13319 is a buffer overread in the Android Media framework (pvmp3_get_main_data_size) that can lead to remote information disclosure without user interaction. The Android Pixel/Nexus bulletin lists CVE-2017-13319 under Media framework with updated AOSP versions 7.0, 7.1.1, 7.1.2, 8.0, 8.1...

CVE-2017-8255

CVE-2017-8255 affects Qualcomm bootloader components in Android CAF builds that use the Linux kernel. The issue is described as an integer overflow in the bootloader, leading to elevation of privilege (EoP) within the kernel context. Public sources in the provided documents identify the vulnerabi...

CVE-2018-9348

CVE-2018-9348 : The Red Hat/NVD entries describe an integer overflow in SMF_ParseMetaEvent within eas_smf.c that can cause remote Denial of Service via resource exhaustion. Exploitation requires user interaction, and the public details emphasize DoS impact with no explicit remote code execution. ...

CVE-2018-9365

CVE-2018-9365 describes a potential out-of-bounds read in the SMP L2C data path (smp_data_received in smp_l2c.cc) that could lead to remote code execution. Exploitation requires user interaction. Multiple connected sources (RH, NVD, CVE lists, Android bulletin) confirm the issue and its remote-co...

CVE-2018-9391

CVE-2018-9391 describes a security issue in the Mediatek GPS HAL: in gpshal_worker.c, update_gps_sv and output_vzw_debug, there is a possible out-of-bounds write due to a missing bounds check. This can lead to local escalation of privilege with System execution privileges required; exploitation i...

CVE-2018-9397

The CVE-2018-9397 entry describes an OOB write in MTK WMT device driver, triggered in WMT_unlocked_ioctl due to a missing bounds check. The consequence is local privilege escalation to SYSTEM with no user interaction required. Documents consistently identify the affected component as the Mediatek...

CVE-2018-9403

CVE-2018-9403 describes a stack buffer overflow in the MTK FLP MSG HAL DIAG REPORT DATA NTF handler within the flp2hal_interface.c component. The underlying issue is a missing bounds check which can allow a local attacker with System privileges to escalate to higher privileges. Exploitation is lo...

CVE-2018-9408

The CVE-2018-9408 issue affects the GPS subsystem, specifically the m3326_gps_write and m3326_gps_read handlers in gps.s. The vulnerability is described as an out-of-bounds read caused by a missing bounds check, enabling local information disclosure with system execution privileges required. Expl...

CVE-2018-9409

The CVE-2018-9409 entry affects Android’s Media framework, specifically the HWC (Hardware Composer) path: HWCSession::SetColorModeById in hwc_session.cpp. The root cause is a missing bounds check, leading to a possible out-of-bounds write. This could enable local elevation of privilege with no ad...

CVE-2018-9471

The CVE-2018-9471 vulnerability concerns the Android Framework (NanoAppFilter.java) where the deserialization constructor can trigger data loss due to type confusion. This can lead to local escalation of privilege in the system server without additional execution privileges or user interaction. P...

CVE-2018-9509

CVE-2018-9509 affects Android devices with Bluetooth stack exposure. The issue is an out-of-bounds read in smp_proc_master_id of smp_act.cc due to a missing bounds check, which could allow remote information disclosure without extra privileges and without user interaction. Affected products/versi...

CVE-2018-9558

CVE-2018-9558 describes an out-of-bounds write in the NFC kernel due to a missing bounds check in rw_t2t_handle_tlv_detect (rw_t2t_ndef.cc). This could enable local elevation of privilege on Android devices without requiring prior privileges, with user interaction not strictly required for exploi...

CVE-2019-1991

CVE-2019-1991 affects Google Android; vulnerable component is btif_dm_data_copy in btif_core.cc. The issue is an out-of-bounds write caused by a buffer overflow, enabling remote code execution with network access and requiring user interaction for exploitation. Affected Android versions include 7...

CVE-2019-20605

CVE-2019-20605 affects Samsung mobile devices running N(7.x), O(8.x), and P(9.0) on Exynos chipsets. The issue is a heap overflow in the Shannon baseband modem, as described in multiple sources (Samsung ID SVE-2019-14071). CVSS metrics from NVD indicate a high/critical risk: Network attack vector...

CVE-2019-2066

CVE-2019-2066 is an out-of-bounds write in libxaac on Android 10 that can lead to remote code execution. The vulnerability arises from a missing bounds check in libxaac, with exploitation requiring user interaction. Affected components: libxaac within Android 10. Reported impact includes remote c...

CVE-2019-20785

CVE-2019-20785 affects LG mobile devices running Android 8.0/8.1 for the DTAG carrier. The issue is in RILD (radio interface layer) where an uninitialized variable is used, per the Red Hat and NVD entries. LG’s internal ID is LVE-SMP-180013 (January 2019). Public details are limited in the provid...

CVE-2019-9261

CVE-2019-9261 affects Android 10 via the libxaac library. The issue is an out-of-bounds read caused by a missing bounds check within libxaac, leading to information disclosure. Exploitation requires user interaction, with network exposure possible per CVSS data. The vulnerability is documented ac...

CVE-2019-9269

CVE-2019-9269 is an Android 10 elevation-of-privilege issue described as a local permissions bypass in System Settings caused by a cached Linux user ID. The vulnerability could allow a local attacker to bypass permissions with no additional execution privileges required; exploitation reportedly r...

CVE-2019-9287

CVE-2019-9287 is a Bluetooth-related information disclosure in Android 10 caused by a missing bounds check that enables a local out-of-bounds read. The vulnerability allows local disclosure without user interaction and with only local access; no remote code execution is described. The issue is la...

CVE-2019-9310

CVE-2019-9310 affects Android 10 in the libFDK component, where an out-of-bounds write caused by an integer overflow could lead to remote code execution with no privileges. Exploitation requires user interaction. See Android 10 security notes; the vulnerability is listed under the Media Framework...

CVE-2020-0023

CVE-2020-0023 affects Android 10 and is described as a local information disclosure in which a Bluetooth-enabled app could access user contacts due to a missing permission check in AdapterService.java. The vulnerability occurs in setPhonebookAccessPermission and could allow a malicious app to dis...

CVE-2020-0033

CVE-2020-0033 involves an out-of-bounds write in CryptoPlugin::decrypt (CryptoPlugin.cpp) causing local elevation of privilege on Android. The issue arises from a stale pointer in the CryptoPlugin decryption path, requiring LOCAL access with LOW attack complexity and no user interaction (per CVSS...

CVE-2020-0313

In CVE-2020-0313, the issue is in Android’s NotificationManagerService where an unsafe PendingIntent can bypass permissions, enabling local information disclosure with low requirements (local access, no user interaction). The vulnerability affects Android 11 and is characterized by a LOCAL attack...

CVE-2020-0334

CVE-2020-0334 is described as an NFC out-of-bounds write on Android 11 that enables local privilege escalation without user interaction. Affected component: NFC handling in Android 11; root cause: missing bounds check leading to out-of-bounds write. Impact is listed as local elevation of privileg...

CVE-2020-10831

The provided documents identify CVE-2020-10831 as affecting Samsung mobile devices running O(8.x), P(9.0), and Q(10.0) software, where attackers can trigger an update to arbitrary touch‑screen firmware. The root cause and exact vulnerable component are not elaborated in the supplied sources, and ...

CVE-2020-11605

CVE-2020-11605 affects Samsung mobile devices running O(8.x), P(9.0), and Q(10.0). The issue is a sensitive information exposure from dumpstate in NFC logs. Root cause details are not explicitly provided in the connected documents beyond the exposure description. What is vulnerable: the NFC-relat...

CVE-2020-26603

CVE-2020-26603 affects Samsung mobile devices running O(8.x), P(9.0), and Q(10.0). The issue is in Sticker Center, allowing a directory traversal by an unprivileged process to read arbitrary files. Samsung ID SVE-2020-18433 (October 2020) is referenced. Connected documents confirm the vulnerabili...

CVE-2020-28340

Samsung CVE-2020-28340 affects mobile devices running O(8.x) to R(11.0) and describes a vulnerability that allows bypassing Factory Reset Protection via Secure Folder (Samsung ID SVE-2020-18546). NVD reports CVSSv3.1 base score 9.8 (CRITICAL) and CVSSv2 base score 7.5 (HIGH); attack vector NETWOR...

CVE-2020-28345

CVE-2020-28345 affects LG mobile devices running Android 10. The issue is in the Wi‑Fi subsystem, where a missing NULL parameter check can cause a crash. This is described in multiple sources (e.g., NVD/Red Hat entries) with no public details on a fix in the provided documents. Impact is indicate...