CVE-2017-0498

CVE-2017-0498 describes a denial-of-service condition in Android Setup Wizard that could let a local attacker force a Google account sign-in after a factory reset. Affected versions include Android 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The vulnerability is local in scope, with no exploitation detail...

CVE-2017-0566

CVE-2017-0566 describes an elevation of privilege in the MediaTek camera driver for Android, enabling a local malicious application to execute arbitrary code in the kernel context. The issue affects the MediaTek camera driver within Android’s stack and is categorized as High due to requiring comp...

CVE-2017-0592

CVE-2017-0592 describes a remote code execution vulnerability in Mediaserver’s FLACExtractor.cpp (libstagefright) on Android. The issue allows memory corruption when processing specially crafted media files, potentially enabling code execution within the Mediaserver process. Affected Android vers...

CVE-2017-0595

Mode C: CVE-2017-0595 affects Android Mediaserver (libstagefright) and is an elevation-of-privilege flaw that could let a local malicious app execute code in the context of a privileged process. Affected products/versions include Android 4.4.4–7.1.1. Root cause is described as memory/process hand...

CVE-2017-0616

CVE-2017-0616 describes an elevation of privilege in the MediaTek system management interrupt driver that could allow a local malicious Android app to execute arbitrary code in the kernel context. Affected product: Android. Impact is rated High, because exploitation requires first compromising a ...

CVE-2017-0640

CVE-2017-0640 corresponds to a remote DoS in Android’s Media framework/Mediaserver. A specially crafted media file can cause a device hang or reboot. Affected: Android 6.0–7.1.1. Root cause: DoS in media processing within Mediaserver. Exploitation status not detailed in the provided documents. Re...

CVE-2017-0670

CVE-2017-0670 describes a denial‑of‑service in the Android framework affecting Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID: A-36104177). The vulnerability is listed under the Android Framework component as a DoS issue; no detailed root cause or exploit information...

CVE-2017-0673

CVE-2017-0673 is a remote code execution vulnerability in Android’s media framework. The issue affects Android 6.0, 6.0.1, 7.0, 7.1.1 and 7.1.2, and (per the connected sources) arises from the media framework handling of crafted media content, enabling code execution in a privileged process. The ...

CVE-2017-0721

CVE-2017-0721 describes a remote code execution vulnerability in the Android media framework component libmpeg2. The issue affects Android platforms listed as versions 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID A-37561455). The connected sources corroborate that this is a media-framework RCE i...

CVE-2017-0727

CVE-2017-0727 is a documented elevation-of-privilege vulnerability in the Android media framework, specifically the libgui component. Public CNVD details describe the issue as affecting Android versions 7.0, 7.1.1, and 7.1.2 , enabling a remote attacker to execute arbitrary code with elevated pri...

CVE-2017-0758

CVE-2017-0758 is a remote code execution vulnerability in Android’s media framework (libhevc) affecting Android 5.0.2–7.1.2. The media decoding library is the vulnerable surface; exploitation would require user interaction, with a valid crafted file likely enabling code execution in a privileged ...

CVE-2017-0773

CVE-2017-0773 is a DoS vulnerability in Android’s media framework (libhevc) affecting Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0. The issue is classified with LOCAL attack vector and HIGH availability impact per the NVD entry, with user interaction required for exploita...

CVE-2017-0780

CVE-2017-0780 is a DoS in Android's runtime (FrameSequenceDrawable) triggered when processing GIF-based frames in MMS. The root cause is a Null Pointer Exception path: acquireAndValidateBitmap can accept a null or invalid Bitmap from a custom FrameSequenceDrawable.BitmapProvider, leading to an NP...

CVE-2017-0794

CVE-2017-0794 is an elevation of privilege vulnerability affecting the Upstream kernel SCSI driver in the Android kernel. The issue is a local vulnerability (CVSSv3: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) that could allow a local attacker to escalate privileges, requiring user interaction for explo...

CVE-2017-0800

CVE-2017-0800 is an elevation of privilege (EoP) vulnerability in MediaTek teei (TEE) within Android kernel, classified as High severity. The affected component is MediaTek teei (TEEI) and the vulnerability is documented under CVE-2017-0800 with MediaTek reference M-ALPS03302988. The Connected do...

CVE-2017-11052

CVE-2017-11052 affects Android components built on CAF Linux kernel, specifically when processing a crafted QCA_NL80211_VENDOR_SUBCMD_NDP vendor command in Android for MSM, Firefox OS for MSM, and QRD Android. The vulnerability is a buffer over-read in the cfg80211 vendor command handler, leading...

CVE-2017-11062

CVE-2017-11062 describes a potential buffer overread in WLAN handling on Android/CAF/Linux kernel builds due to unvalidated attributes in __wlan_hdd_cfg80211_do_acs. Affected products include Android for MSM, Firefox OS for MSM, QRD Android, and CAF Linux kernel releases across Android versions. ...

CVE-2017-13178

CVE-2017-13178 affects Android Media Framework (SoftAVCDec). In initDecoder, a use-after-free can cause an out-of-bounds write to mCodecCtx when buffer allocation fails, enabling remote code execution in a privileged process without user interaction. Affected Android versions: 6.0.1, 7.0, 7.1.1, ...

CVE-2017-13218

The CVE-2017-13218 entry documents a side-channel information-disclosure vulnerability caused by access to CNTVCT_EL0 in various ARM-based devices (e.g., Small Cell SoC, Snapdragon lines). Affected components include listed CPUs/SoCs (FSM9055, IPQ4019, IPQ8064, MDM9xxx, SD series, etc.) and relat...

CVE-2017-13254

CVE-2017-13254 is a DoS vulnerability in the Android media framework (AACExtractor). Affected products/versions include Android 6.0–8.1 (Android 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1). The issue is documented under the Media Framework category in the March 2018 Pixel/Nexus bulletin with a high ...

CVE-2017-13282

CVE-2017-13282 affects Android where in the function avrc_ctrl_pars_vendor_rsp (file avrc_pars_ct.cc) a missing bounds check can cause a stack buffer overflow. The flaw could allow remote code execution with no privileges or user interaction required, affecting Android versions 7.0, 7.1.1, 7.1.2,...

CVE-2017-13314

CVE-2017-13314 affects Android by with a missing permission check in NetworkManagementService.setAllowOnlyVpnForUids, enabling local escalation of privilege to access non-VPN networks when VPN-only access is intended. The issue is described as a security settings bypass in NetworkManagementServic...

CVE-2017-14891

CVE-2017-14891 affects the KGSL driver function _gpuobj_map_useraddr() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-12. The issue is an uninitialized variable that can leak stack contents, causing information disclosure. The vulnerability is tied to the kernel/driver sta...

CVE-2017-18643

CVE-2017-18643 concerns information disclosure on Samsung mobile devices running M(6.x) and N(7.x) software, specifically exposure of the kbase_context address of a GPU memory node. The connected documents confirm the affected device family and the memory-context disclosure issue but do not provi...

CVE-2017-3748

CVE-2017-3748 concerns Lenovo VIBE phones with improper access controls in the nac_server component. The issue, described as enabling privilege escalation to root when used in conjunction with CVE-2017-3749 and CVE-2017-3750, affects Android devices running affected Lenovo software. The connected...

CVE-2017-8235

CVE-2017-8235 is listed in Qualcomm component notes as an Elevation of Privilege affecting the Camera driver. The description from the initial document states that in CAF Android releases, a memory structure in a camera driver is not properly protected. The connected Android bulletin entries conf...

CVE-2017-8246

CVE-2017-8246 concerns the Android CAF ALSA PCM Playback Kernel Module. In msm_pcm_playback_close(), prtd is assigned from substream->runtime->private_data and later freed, but not sanitized to NULL; this creates a dangling pointer. Other code paths (e.g., msm_pcm_volume_ctl_put()) check fo...

CVE-2018-21070

CVE-2018-21070 affects Samsung mobile devices running N(7.x) or O(8.0) on MSM8998/SDM845 chipsets. The issue is a missing Bootloader integrity check that allows bypassing Secure Boot and gaining root access. The description from multiple sources attributes the vulnerability to a bootloader integr...

CVE-2018-5841

CVE-2018-5841 affects Qualcomm DCC (display/graphics driver) within Android CAF releases. The root cause is that dcc_curr_list is initialized to a default invalid value, which is intended to be programmed via a sysfs node; this could allow an elevation of privilege (EoP) when the value is imprope...

CVE-2018-9338

CVE-2018-9338 is an Android Framework vulnerability described in multiple sources as an out-of-bounds write in ResStringPool::setTo (ResourceTypes.cpp) caused by a missing bounds check. The issue can lead to local escalation of privilege with no user interaction required. Affected component is wi...

CVE-2018-9366

CVE-2018-9366 affects Google/Android devices with the MediaTek IMSA component. In IMSA_Recv_Thread and VT_IMCB_Thread (IMSAClient.cpp and VideoTelephony.c), an out-of-bounds write due to an integer overflow is described, leading to local escalation of privilege with no user interaction required. ...

CVE-2018-9392

CVE-2018-9392 affects the Mediatek GPS HAL: in get_binary() of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c there is a possible out-of-bounds write due to a missing bounds check. This could enable local elevation of privilege with System execution privileges, and...

CVE-2018-9399

CVE-2018-9399 affects the /proc/driver/wmt_dbg driver. The issue is multiple possible out-of-bounds writes in this driver, enabling local escalation of privilege with SYSTEM privileges and no user interaction required. Reported impact is local (attack vector: LOCAL) with the potential for total c...

CVE-2018-9413

CVE-2018-9413 affects Google Pixel devices (and Android components) via an out-of-bounds write in the function handling Bluetooth notifications: btif_rc.cc handle_notification_response. The issue enables remote code execution with no extra privileges, requiring user interaction for exploitation. ...

CVE-2018-9479

CVE-2018-9479 concerns an out-of-bounds write in the Bluetooth SDP server logic (sdp_server.cc) within functions process_service_attr_req and process_service_search_attr_req. The issue, observed across sources including Red Hat and NVD descriptions, could enable remote code execution without addi...

CVE-2018-9502

CVE-2018-9502 affects Android devices via the Bluetooth stack. The entry describes an out-of-bounds read in the Bluetooth component, triggered in the function/area rfc_process_mx_message of rfc_ts_frames.cc , caused by a missing bounds check. This leads to possible remote information disclosure i...

CVE-2019-2051

CVE-2019-2051 is a vulnerability described in the Android ecosystem: it is a remote-read out-of-bounds issue in the Android system spaces.h encountered while processing a PAC file, allowing potential information disclosure without user interaction. Affected products are Android versions 7.0, 7.1....

CVE-2019-20535

The CVE-2019-20535 entry concerns Samsung mobile devices running O(8.x) and P(9.0). The issue allows establishing a connection to a new Bluetooth device from the lock screen, implying a Bluetooth-based modality to trigger access without unlocking. The Samsung ID is SVE-2019-15533. The provided re...

CVE-2019-20602

CVE-2019-20602 affects Samsung mobile devices running N(7.x), O(8.0), and P(9.0) on Qualcomm chipsets. The issue is a NULL pointer dereference in the Authnr Trustlet, identified by Samsung as SVE-2019-13949 (May 2019). Connected sources confirm the affected components and root cause but do not pr...

CVE-2019-2080

CVE-2019-2080 concerns a possible out-of-bounds write in libxaac on Android 10, caused by a missing bounds check. The issue could enable remote code execution with no privileges and requires user interaction to exploit. Connected sources (including NVD and Red Hat) confirm libxaac as the vulnerab...

CVE-2019-2105

CVE-2019-2105 affects Android’s library component: in FileInputStream::Read of file_input_stream.cc, a memory corruption due to uninitialized data could enable remote code execution in an unprivileged process. Exploitation requires user interaction. Affected Android versions include 7.0, 7.1.1, 7...

CVE-2019-2112

CVE-2019-2112 : In Android, memory corruption via a use-after-free in alarm.cc could enable local code execution with no authentication and no user interaction. Affected: Android 8.0, 8.1, and 9.0. Root cause: use-after-free in alarm.cc. Impact: local privilege escalation with high severity per C...

CVE-2019-9277

CVE-2019-9277 involves an information disclosure in the Linux proc filesystem on Android 10. The vulnerability allows local disclosure of app and browser activity without user interaction, with exploitation requiring local access and possible user privileges. Root cause is log information disclos...

CVE-2019-9344

CVE-2019-9344 affects Android 10 NFC server and involves an out-of-bounds read due to a missing bounds check, enabling local information disclosure. The vulnerability targets NFC server components and can be exploited with user interaction; no remote access is indicated. While NVD lists CVSS scor...

CVE-2019-9358

CVE-2019-9358 is an Android NFC vulnerability described as an out-of-bounds write caused by a missing bounds check, enabling local elevation of privilege with user interaction required. Affected product: Android 10 devices. The issue is documented in multiple sources (NVD entry and Android 10 Sec...

CVE-2019-9359

CVE-2019-9359 involves an information-disclosure issue in Android 10’s libavc component. The vulnerability arises from uninitialized data in the library, enabling remote information disclosure with the Android 10 device at risk. Exploitation details beyond the description are not provided in the ...

CVE-2019-9420

CVE-2019-9420 describes an out-of-bounds read in the Android media stack (libhevc) caused by an integer overflow. This can lead to a remote denial-of-service on Android 10 devices, with exploitation requiring user interaction. The available connected documents confirm the issue location (libhevc)...

CVE-2020-0102

In CVE-2020-0102, the issue is an out-of-bounds write in GattServer::SendResponse due to an incorrect bounds check. Affects Android 8.0–10; exploitation could enable local elevation of privilege with user execution privileges required and no user interaction needed. The risk is described as a loc...

CVE-2020-0114

CVE-2020-0114 describes an Elevation of Privilege in Android where a flawed PendingIntent in KeyguardSliceProvider.java can enable local escalation to act with System UI privileges. Affected software is Android 10 (System/Framework components detailed in the June 2020 Android Security Bulletin). ...

CVE-2020-0116

CVE-2020-0116 is a local information-disclosure issue in Android 10’s System area stemming from a permissions bypass in LocationAccessPolicy.checkSystemLocationAccess, which could bypass user profile isolation and disclose data without extra execution privileges. Affected product: Android (Androi...