CVE-2023-52352

Summary: CVE-2023-52352 concerns the Network Adapter Service where a missing permission check could allow local denial of service without extra execution privileges. The connected documents link this vulnerability to UNISOC chipsets and multiple trackers (Red Hat, NVD, CVE list, PT Security, CNNV...

CVE-2024-20048

A security vulnerability exists in the flashc module of MediaTek chips due to an uncaught exception . This flaw could lead to local information disclosure , requiring System execution privileges for exploitation. No user interaction is required. While a patch ID (ALPS08541769 ) is referenced, spe...

CVE-2025-20652

A security vulnerability exists in MediaTek Chipsets (specifically identified as V5 DA ) due to a missing bounds check that allows for an out of bounds read . This flaw can lead to local information disclosure if an attacker has physical access to the device. Exploitation requires user interactio...

CVE-2025-48647

A memory overwrite vulnerability exists in the cpm_fwtp_msg_handler function within the cpm/google/lib/tracepoint/cpm_fwtp_ipc.c file. The root cause is improper input validation , which could allow an attacker to achieve local escalation of privilege without requiring additional execution privil...

CVE-2026-0031

Google Android is impacted by an elevation of privilege vulnerability caused by an out-of-bounds write resulting from an integer overflow in multiple functions within mem_protect.c . An attacker can exploit this flaw to gain elevated privileges on the system without needing additional execution p...

CVE-2026-0087

A logic error in the approvalLevelForDomainInternal method within the DomainVerificationService.java class of the Android operating system framework allows for the hijacking of arbitrary app links. This vulnerability can lead to a local escalation of privilege without requiring additional executi...

CVE-2009-2656

The CVE-2009-2656 entry concerns an unspecified vulnerability in the com.android.phone process on Android 1.0/1.1/1.5 that allows remote attackers to cause a denial of service (network disconnection) by sending a crafted SMS. The issue was demonstrated by Collin Mulliner and Charlie Miller at Bla...

CVE-2014-3100

The CVE-2014-3100 issue is a stack-based buffer overflow in Android 4.3’s KeyStore service (encode_key in /system/bin/keystore) that allows arbitrary code execution and may leak sensitive key information or bypass cryptographic operation restrictions when handling an overly long key name. The vul...

CVE-2014-7916

CVE-2014-7916 affects Android’s libstagefright SampleTable.cpp; an integer overflow in SampleTable.cpp in Android before 5.0.0 has unspecified impact. Connected sources confirm the affected component and root cause; no explicit remediation or patch version is provided in the supplied documents.

CVE-2015-1539

The CVE-2015-1539 issue is a remote-code-execution vulnerability in Android’s libstagefright, caused by integer underflows in ESDS::parseESDescriptor during MP4 atom processing. It affects Android releases prior to 5.1.1 LMY48I; the Android bulletins (e.g., Nexus/Android security bulletin) note t...

CVE-2015-6619

CVE-2015-6619 affects the Android kernel: elevation of privilege via a crafted app in the Linux-based kernel prior to Android 5.1.1 LMY48Z and 6.0 prior to 2015-12-01. The root cause is an internal bug (23520714) that could allow local attackers to execute arbitrary code with device root privileg...

CVE-2015-7716

CVE-2015-7716 affects Android 5.x before 5.1.1 LMY48T, where the libstagefright media pipeline is vulnerable to memory corruption when processing a crafted media file. This can allow remote attackers to execute arbitrary code or cause a denial of service. The entry maps to internal bug 20721050 a...

CVE-2015-7717

Technical details (affected products, root cause, CVSS, fixes) are not publicly available in the provided documents. Monitor for updates.

CVE-2016-10281

CVE-2016-10281 is an elevation-of-privilege vulnerability in the MediaTek thermal driver on Android that could allow a local malicious application to execute code in the kernel context. The issue is exploitable locally and requires a privileged process to be compromised first; no exploit details ...

CVE-2016-10385

CVE-2016-10385 is a high-severity use-after-free in IMS RCS across Qualcomm Android CAF builds using the Linux kernel. Public docs note a remote-exploitable condition with critical impact ( CVSSv3 9.8 ). The vulnerability affects Qualcomm firmware in CAF Android releases; Android security bulleti...

CVE-2016-2484

CVE-2016-2484 affects libstagefright in mediaserver across Android 4.x up to 4.4.4, 5.x up to 5.0.2/5.1.1, and 6.x prior to 2016-06-01. The issue is that OMX buffer sizes for GSM and G711 codecs are not validated, enabling a crafted app to escalate privileges to Signature or SignatureOrSystem. Pr...

CVE-2016-8488

CVE-2016-8488 is an elevation-of-privilege vulnerability in Qualcomm closed-source components within Android, affecting the Android kernel. The issue is described as an elevation of privilege in Qualcomm components used by Android devices; the CVSSv3 metrics indicate a CRITICAL impact with networ...

CVE-2017-0340

CVE-2017-0340 is an elevation of privilege in the NVIDIA Libnvparser component for Android, caused by a memcpy into a fixed-size buffer with user-controlled size that can lead to memory corruption and possible remote code execution. The entry is rated HIGH (CVSSv3 7.8, CVSSv2 9.3) and has no expl...

CVE-2017-0391

CVE-2017-0391 is a DoS vulnerability in Mediaserver’s libhevc decoder (decoder/ihevcd_decode.c). A remote attacker could exploit a specially crafted Media file to trigger a device hang or reboot. The Android bulletin/summary specifies this issue under the Media/Mediaserver entry with a High impac...

CVE-2017-0415

CVE-2017-0415 is an elevation of privilege in Android’s Mediaserver. A local attacker could exploit this to run arbitrary code with privileged process rights. Affected versions: Android 6.0, 6.0.1, 7.0, 7.1.1 (Mediaserver). The provided connected documents identify the issue but do not specify a ...

CVE-2017-0435

CVE-2017-0435 is an elevation-of-privilege in the Qualcomm sound driver affecting Android kernels (Kernel-3.10 and Kernel-3.18). The vulnerability could let a local malicious app execute arbitrary code in the kernel context after compromising a privileged process. The CVE is documented with Qualc...

CVE-2017-0492

The CVE-2017-0492 entry describes a local elevation-of-privilege issue in Android's System UI that allows a malicious local app to create a UI overlay covering the entire screen. Affected product/version: Android System UI on Android 7.1.1. Root cause: bypass of user interaction requirements enab...

CVE-2017-0565

CVE-2017-0565 is a local elevation-of-privilege vulnerability in the MediaTek thermal driver on Android. A local malicious application can execute arbitrary code in the kernel context by exploiting the thermal driver. The issue is classified as High severity; exploitation requires compromising a ...

CVE-2017-0566

CVE-2017-0566 describes an elevation of privilege in the MediaTek camera driver for Android, enabling a local malicious application to execute arbitrary code in the kernel context. The issue affects the MediaTek camera driver within Android’s stack and is categorized as High due to requiring comp...

CVE-2017-0640

CVE-2017-0640 corresponds to a remote DoS in Android’s Media framework/Mediaserver. A specially crafted media file can cause a device hang or reboot. Affected: Android 6.0–7.1.1. Root cause: DoS in media processing within Mediaserver. Exploitation status not detailed in the provided documents. Re...

CVE-2017-0664

CVE-2017-0664 affects Android’s Framework with an elevation of privilege vulnerability. Affected: Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 (Android ID A-36491278). Description in connected Nessus entry confirms the issue is an EoP in the Framework and notes there is no vendor-...

CVE-2017-0670

CVE-2017-0670 describes a denial‑of‑service in the Android framework affecting Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID: A-36104177). The vulnerability is listed under the Android Framework component as a DoS issue; no detailed root cause or exploit information...

CVE-2017-0733

The CVE-2017-0733 entry describes a denial-of-service vulnerability in Android’s media framework (libmediaplayerservice). Affected products/versions include Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The initial description does not specify the exact root cause beyond the DoS label;...

CVE-2017-0740

CVE-2017-0740 is a remote code execution vulnerability in the Broadcom networking driver for Android, affecting the Android kernel. The connected sources describe the issue as a Broadcom Networking driver RCE in Android 7.1.2 and earlier, with Android Bug ID A-37168488 and reference B-RB#116402. ...

CVE-2017-0773

CVE-2017-0773 is a DoS vulnerability in Android’s media framework (libhevc) affecting Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0. The issue is classified with LOCAL attack vector and HIGH availability impact per the NVD entry, with user interaction required for exploita...

CVE-2017-0791

CVE-2017-0791 is an elevation-of-privilege vulnerability affecting the Broadcom Wi‑Fi driver in Android (kernel). The entry states the issue enables privilege escalation but does not provide exploitation details, affected versions, or remediation steps within the supplied documents.

CVE-2017-0803

CVE-2017-0803 is an elevation-of-privilege vulnerability in the MediaTek accessory detector driver used by Android. The issue affects the Android kernel via the Accessory detector driver component, enabling local privilege escalation in affected devices. The NVD entry lists a base CVSS v2 of 6.8 ...

CVE-2017-0804

CVE-2017-0804 is an Elevation of Privilege vulnerability in the MediaTek MMC driver within the Android kernel. It affects the MMC driver component and is documented as a local privilege escalation (attack vector local, low attack complexity) with a high impact on confidentiality, integrity, and a...

CVE-2017-0815

CVE-2017-0815 is a information-disclosure issue in Android’s media framework (libeffects) affecting Android 4.4.4 through 8.0. The root cause is an information disclosure vulnerability in the media framework; impact is partial confidentiality, with no indicated exploitation details in the provide...

CVE-2017-0877

CVE-2017-0877 describes a remote code execution vulnerability in the Android media framework (libavc) affecting Android 6.0. The issue is triggered via a specially crafted file, allowing an attacker to execute code in the context of a privileged process. The vulnerability is categorized as Media ...

CVE-2017-11052

CVE-2017-11052 affects Android components built on CAF Linux kernel, specifically when processing a crafted QCA_NL80211_VENDOR_SUBCMD_NDP vendor command in Android for MSM, Firefox OS for MSM, and QRD Android. The vulnerability is a buffer over-read in the cfg80211 vendor command handler, leading...

CVE-2017-11061

CVE-2017-11061 describes a buffer over-read in the Qualcomm WLAN stack used by Android for MSM, Firefox OS for MSM, and QRD Android, across CAF Linux kernel-based Android releases. The issue occurs while processing the cfg80211 vendor sub-command QCA_NL80211_VENDOR_SUBCMD_ROAM, potentially allowi...

CVE-2017-13148

CVE-2017-13148 is a DoS in Android's media framework (libmpeg2). Affected Android versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. The issue is described as a denial-of-service vulnerability in the media decoding path. The Android bulletin indicates patches exist in the 2017-12-01 and 2017-12-05 lev...

CVE-2017-13197

CVE-2017-13197 affects Android’s Media Framework (family of code using ihevcd_parse_slice.c). The vulnerability arises because slave threads are not joined when an error occurs, leading to a remote denial of service of a critical system process without extra privileges or user interaction. Affect...

CVE-2017-13248

CVE-2017-13248 affects Android Media framework; the vulnerability is an out-of-bounds write in impeg2_idct_recon_sse42_intr.c (impeg2_idct_recon_sse42_intr) that could allow remote code execution with user interaction. Affected Android versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. The issue ...

CVE-2017-13267

CVE-2017-13267 affects Android's avrc_pars_vendor_cmd in avrc_pars_tg.cc, with a stack corruption risk due to a missing bounds check. The vulnerability enables remote escalation of privilege with no user interaction, as described in the NVD entry (CVE-2017-13267) and reflected in the Android Secu...

CVE-2017-13287

CVE-2017-13287 is an Elevation of Privilege vulnerability in Android’s VerifyCredentialResponse.java. In createFromParcel, there is a possible invalid parcel read caused by insufficient input validation. If mPayload in writeToParcel is null, this could allow a local attacker to escalate privilege...

CVE-2017-14891

CVE-2017-14891 affects the KGSL driver function _gpuobj_map_useraddr() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-12. The issue is an uninitialized variable that can leak stack contents, causing information disclosure. The vulnerability is tied to the kernel/driver sta...

CVE-2017-18643

CVE-2017-18643 concerns information disclosure on Samsung mobile devices running M(6.x) and N(7.x) software, specifically exposure of the kbase_context address of a GPU memory node. The connected documents confirm the affected device family and the memory-context disclosure issue but do not provi...

CVE-2017-6275

CVE-2017-6275 affects NVIDIA Tegra kernel CORE DVFS Thermal driver. The vulnerability arises from missing bounds checking in the thermal driver, enabling reading/writing of memory beyond buffer boundaries, potentially causing denial of service or privilege escalation. Public details in connected ...

CVE-2018-9338

CVE-2018-9338 is an Android Framework vulnerability described in multiple sources as an out-of-bounds write in ResStringPool::setTo (ResourceTypes.cpp) caused by a missing bounds check. The issue can lead to local escalation of privilege with no user interaction required. Affected component is wi...

CVE-2018-9399

The Google Pixel smartphone is affected by a vulnerability in the /proc/driver/wmt_dbg driver. Multiple out-of-bounds writes within this driver could allow an attacker to achieve local escalation of privilege to System execution privileges. Exploitation does not require user interaction, though h...

CVE-2018-9400

A security vulnerability exists in the Goodix Touchscreen Driver (MediaTek components) due to a missing bounds check in the gt1x_debug_write_proc and gt1x_tool_write functions within gt1x_generic.c and gt1x_tools.c. This oversight can result in an out-of-bounds write , potentially leading to a lo...

CVE-2018-9413

CVE-2018-9413 affects Google Pixel devices (and Android components) via an out-of-bounds write in the function handling Bluetooth notifications: btif_rc.cc handle_notification_response. The issue enables remote code execution with no extra privileges, requiring user interaction for exploitation. ...

CVE-2018-9502

CVE-2018-9502 affects Android devices via the Bluetooth stack. The entry describes an out-of-bounds read in the Bluetooth component, triggered in the function/area rfc_process_mx_message of rfc_ts_frames.cc , caused by a missing bounds check. This leads to possible remote information disclosure i...