CVE-2025-20660

A security vulnerability exists in the PlayReady TA microprogramming software component of MediaTek chipsets. The root cause is a missing bounds check , which can lead to an out-of-bounds read in memory. A malicious actor who has already obtained System privilege could exploit this to achieve loc...

CVE-2025-31711

The CVE-2025-31711 entry concerns the cplog service, where a null pointer dereference can cause a system crash leading to local denial of service (no extra privileges required). Connections across sources (e.g., Red Hat advisory, UNISOC-related postings) reiterate the same impact and local exploi...

CVE-2026-0142

CVE-2026-0142 is an out-of-bounds read in the iavb_parse_key_data function of avb_rsa.c, caused by improper input validation. According to the June 2026 Pixel Update Bulletin , it affects the Android Bootloader subcomponent on Google Pixel devices and is rated High severity with Information Discl...

CVE-2013-6272

The CVE-2013-6272 issue affects Google Android 4.1.1–4.4.2, involving the NotificationBroadcastReceiver in the com.android.phone process. The underlying flaw lets a crafted app bypass access restrictions to initiate calls, dial USSD/MMI codes, or hang up calls. Reported exploitation shows potenti...

CVE-2014-9931

CVE-2014-9931 is a buffer overflow in CAF Linux kernel used by Android; triggered when an OEM customizes app region size due to a hard-coded value. Exploitation is local with user interaction; impact is high on confidentiality, integrity, and availability. No remediation details provided in the s...

CVE-2015-3842

The CVE-2015-3842 entry describes multiple heap-based overflows in mediaserver’s AudioPolicyService (libeffects) on Android before 5.1.1 LMY48I. The underlying issue is heap corruption due to unchecked/buffer handling in the mediaserver component, enabling arbitrary code execution with remote/ cr...

CVE-2015-6620

Android libstagefright vulnerabilities in mediaserver allow local privilege escalation to Signature or SignatureOrSystem for devices running before 5.1.1 LMY48Z and before 2015-12-01 for 6.0. Root cause: flaws in libstagefright enabling memory/logic errors during crafted media processing. Impact ...

CVE-2016-0806

The CVE-2016-0806 issue affects the Qualcomm Wi‑Fi driver in the Android kernel, enabling local privilege escalation via a crafted application. Affected platforms include Android 4.x up to 4.4.4, 5.x up to 5.1.1 LMY49G, and 6.x prior to 2016-02-01. The root cause is the Qualcomm Wi‑Fi driver’s ha...

CVE-2016-0810

CVE-2016-0810 affects Android mediaserver’s mediaserver component, specifically the MediaLib SoundPool handling in media/libmedia/SoundPool.cpp. The root cause is mishandled locking requirements, which can allow a crafted application to escalate privileges to obtain Signature or SignatureOrSystem...

CVE-2016-11041

The CVE-2016-11041 issue affects Samsung mobile devices on KK (Android 4.4). Affected component: the lockscreen handling; root cause: attackers can bypass the lockscreen by sending an AT command over USB. This vulnerability is documented across multiple sources (Red Hat, NVD, CVE List) with consi...

CVE-2016-2474

The CVE-2016-2474 issue is an Elevation of Privilege in the Qualcomm Wi‑Fi driver on Android devices (notably Nexus 5X) prior to the 2016-06-01 patch. A crafted application could exploit the vulnerable Qualcomm Wi‑Fi kernel/driver code to gain elevated privileges on the device. The Android securi...

CVE-2016-3741

CVE-2016-3741 affects the H.264 decoder in mediaserver on Android 6.x (prior to 2016-07-01). The issue arises because certain slice data is not initialized, enabling remote attackers to execute arbitrary code or cause a memory corruption leading to a denial of service. The vulnerability impact is...

CVE-2016-3755

CVE-2016-3755 affects the Android Mediaserver component, specifically decoder/ih264d_parse_pslice.c, where Mediaserver on Android 6.x before 2016-07-01 does not properly select concealment frames. This can allow a remote attacker to cause a denial of service (device hang or reboot) via a crafted ...

CVE-2016-3915

The CVE-2016-3915 issue affects Android’s Camera service (camera_metadata.c) across multiple Android versions, enabling a local attacker to escalate privileges via a crafted app. Root cause: privilege escalation in the Camera service. Impact: attacker gains high-level privileges. Mitigation/Remed...

CVE-2016-6712

The CVE-2016-6712 entry describes a remote denial-of-service flaw in libvpx used by Mediaserver on Android. A specially crafted file can cause a device to hang or reboot. Affected Android platforms include 4.x (pre-4.4.4), 5.0.x (pre-5.0.2), 5.1.x (pre-5.1.1), and 6.x (pre-2016-11-01). The availa...

CVE-2016-6740

CVE-2016-6740 is an elevation-of-privilege vulnerability in the Qualcomm camera driver on Android, allowing a local malicious application to execute arbitrary code in the kernel context after bypassing a privileged process. The issue is triggered locally and requires interaction with a privileged...

CVE-2016-8462

CVE-2016-8462 is an information-disclosure vulnerability in the Android bootloader that could allow a local attacker to access data outside the attacker’s permission level. Connected sources confirm affected devices include Pixel and Pixel XL, with patch guidance in the Android security bulletin ...

CVE-2016-8487

CVE-2016-8487 describes an elevation of privilege vulnerability in Qualcomm closed source components used by the Android kernel. Affected software: Android kernel on devices with Qualcomm components. Root cause: privilege escalation within Qualcomm’s closed-source code. Impact: as per CVSS, allow...

CVE-2017-0331

CVE-2017-0331 (NVIDIA Tegra kernel driver, NVMAP): An elevation-of-privilege/DoS issue where untrusted data can change between validation and use, potentially allowing a local attacker to escalate privileges or cause kernel-state impact. Affected context references Android on kernel 3.10 and the ...

CVE-2017-0382

CVE-2017-0382 corresponds to a remote code execution vulnerability in the Framesequence library used by Android. A specially crafted file could allow an attacker to execute arbitrary code in the context of an unprivileged process. Technical details in connected documents show affected product sco...

CVE-2017-0387

CVE-2017-0387 affects Android MediaServer: elevation of privilege allowing a local malicious app to execute code in a privileged process. Affected: Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1 (Android ID A-32660278). Description in connected sources reiterates that MediaServer is the vuln...

CVE-2017-0419

The CVE-2017-0419 entry concerns Android Audioserver. A local elevation-of-privilege flaw could allow a malicious local app to execute arbitrary code within the context of a privileged process. Affected products include Android versions 4.4.4 through 7.1.1. The issue’s root cause is described as ...

CVE-2017-0447

CVE-2017-0447 describes an elevation-of-privilege flaw in the HTC touchscreen driver that could allow a local malicious application to execute arbitrary code in the kernel context on Android devices. The vulnerability is tied to the Android kernel (Kernel-3.18) and affects Android devices leverag...

CVE-2017-0473

CVE-2017-0473 detail (Android/Mediaserver) : A remote code execution vulnerability exists in Mediaserver where a attacker can exploit a memory corruption during media file and data processing by sending a specially crafted file. Affected products/versions: Android 6.0, 6.0.1, 7.0, 7.1.1. CVSSv3 b...

CVE-2017-0482

CVE-2017-0482 is a denial-of-service vulnerability in Android’s Mediaserver. A specially crafted file could cause a device to hang or reboot. Affected products/versions per the provided sources include Android 6.0, 6.0.1, 7.0, and 7.1.1 (Android ID A-33090864). The DoS arises from issues within M...

CVE-2017-0592

CVE-2017-0592 describes a remote code execution vulnerability in Mediaserver’s FLACExtractor.cpp (libstagefright) on Android. The issue allows memory corruption when processing specially crafted media files, potentially enabling code execution within the Mediaserver process. Affected Android vers...

CVE-2017-0616

CVE-2017-0616 describes an elevation of privilege in the MediaTek system management interrupt driver that could allow a local malicious Android app to execute arbitrary code in the kernel context. Affected product: Android. Impact is rated High, because exploitation requires first compromising a ...

CVE-2017-0673

CVE-2017-0673 is a remote code execution vulnerability in Android’s media framework. The issue affects Android 6.0, 6.0.1, 7.0, 7.1.1 and 7.1.2, and (per the connected sources) arises from the media framework handling of crafted media content, enabling code execution in a privileged process. The ...

CVE-2017-0688

CVE-2017-0688 is a denial-of-service vulnerability in the Android media framework. Affected product: Android. Affected versions (per initial doc): 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. The connected documents corroborate a DoS risk in the media framework, with no explicit exploit details provided. The A...

CVE-2017-0698

CVE-2017-0698 is an information disclosure vulnerability in the Android media framework affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID A-35467458). The connected documents provide the same basic description but do not specify the root cause, exploit details, or a concrete remedia...

CVE-2017-0758

CVE-2017-0758 is a remote code execution vulnerability in Android’s media framework (libhevc) affecting Android 5.0.2–7.1.2. The media decoding library is the vulnerable surface; exploitation would require user interaction, with a valid crafted file likely enabling code execution in a privileged ...

CVE-2017-0765

CVE-2017-0765 is a remote code execution vulnerability in Android’s media framework (libstagefright) affecting Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 and 8.0. The underlying issue is within the media framework’s handling of certain media files, as detailed by the NVD entry and multiple co...

CVE-2017-0800

CVE-2017-0800 is an elevation of privilege (EoP) vulnerability in MediaTek teei (TEE) within Android kernel, classified as High severity. The affected component is MediaTek teei (TEEI) and the vulnerability is documented under CVE-2017-0800 with MediaTek reference M-ALPS03302988. The Connected do...

CVE-2017-0802

CVE-2017-0802 is described in connected sources as a local elevation-of-privilege vulnerability in the MediaTek kernel used by Android. The MTK component table lists CVE-2017-0802 with type EoP and impact in the Kernel, indicating a privilege escalation path, but the documents do not provide conc...

CVE-2017-11015

CVE-2017-11015 affects Android MSM, Firefox OS for MSM, and QRD Android builds (CAF Linux kernel). The issue is that SIR_MAC_AUTH_CHALLENGE_LENGTH is set to 128, while the frame parser allows challenge text up to 253 bytes, and the driver cannot handle >128 bytes. This mismatch can lead to a b...

CVE-2017-11060

CVE-2017-11060 is a buffer overread vulnerability affecting Android for MSM, Firefox OS for MSM, and QRD Android builds that use CAF Linux kernels. The issue occurs during processing of ACA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_PASSPOINT_LIST and QCA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_LIST ven...

CVE-2017-11062

CVE-2017-11062 describes a potential buffer overread in WLAN handling on Android/CAF/Linux kernel builds due to unvalidated attributes in __wlan_hdd_cfg80211_do_acs. Affected products include Android for MSM, Firefox OS for MSM, QRD Android, and CAF Linux kernel releases across Android versions. ...

CVE-2017-13254

CVE-2017-13254 is a DoS vulnerability in the Android media framework (AACExtractor). Affected products/versions include Android 6.0–8.1 (Android 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1). The issue is documented under the Media Framework category in the March 2018 Pixel/Nexus bulletin with a high ...

CVE-2017-13286

CVE-2017-13286 affects Android 8.0 and 8.1, where in OutputConfiguration.java’s writeToParcel/readFromParcel a mismatched serialization permits a local permission bypass, enabling a user to start an activity with system privileges without extra execution privileges. No exploit details are provide...

CVE-2017-13310

The CVE-2017-13310 issue is described as a read/write serialization bug in ViewPager.java.createFromParcel, causing a permissions bypass and enabling local escalation of privilege (an app could start an activity with system privileges without extra execution privileges). The vulnerability affects...

CVE-2017-13319

CVE-2017-13319 is a buffer overread in the Android Media framework (pvmp3_get_main_data_size) that can lead to remote information disclosure without user interaction. The Android Pixel/Nexus bulletin lists CVE-2017-13319 under Media framework with updated AOSP versions 7.0, 7.1.1, 7.1.2, 8.0, 8.1...

CVE-2017-14906

CVE-2017-14906 affects Android on Qualcomm Snapdragon IoT devices (including Snapdragon Mobile MDM9206/MDM9607/MSM8909W, SD 210/212/205, SD 410/12) where PKCS7 padding is not supported by the crypto storage APIs. According to NVD, the issue is rated CVSS v3.0/9.8 (CRITICAL) with network attack ve...

CVE-2018-9373

A possible out-of-bounds write exists in the TdlsexRxFrameHandle function of the MTK WLAN driver due to a missing bounds check. This vulnerability could allow an attacker to achieve remote escalation of privilege without requiring additional execution privileges or user interaction. Affected soft...

CVE-2018-9381

CVE-2018-9381 affects the gatt_sr.c component, specifically the gatts_process_read_by_type_req path, where uninitialized data can cause information disclosure. The issue enables remote information disclosure without additional execution privileges and requires no user interaction. Publicly disclo...

CVE-2018-9392

A security vulnerability exists in the GPS HAL component of Google Pixel and Nexus devices. The issue is caused by a missing bounds check in the get_binary function within vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c, which leads to a possible out-of-bounds write...

CVE-2018-9394

A vulnerability exists in the MTK P2P driver component of the Linux Kernel (specifically within drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c). The issue is caused by improper input validation in the mtk_p2p_wext_set_key function, which can lead to an out-of-bounds (OOB) write . ...

CVE-2018-9404

A security vulnerability exists in Google Pixel smartphones caused by an integer overflow within the oemCallback function of ril.cpp. This flaw can result in an out-of-bounds write , potentially leading to a local escalation of privilege . Exploitation requires System execution privileges and doe...

CVE-2018-9420

CVE-2018-9420 affects Android’s BnCameraService::onTransact in CameraService.cpp, enabling information disclosure via uninitialized data with local access and no user interaction. The issue is categorized as an Information Disclosure (ID) in the Android 2018-07-01/2018-07-05 patch-level bulletin,...

CVE-2018-9448

CVE-2018-9448 affects Android 8.0 and 8.1, with a vulnerability in avct_bcb_msg_ind (avct_bcb_act.cc) caused by a missing bounds check that could enable remote information disclosure without user interaction or additional privileges. The issue is categorized as an information-disclosure risk (no ...

CVE-2018-9472

The CVE-2018-9472 entry concerns a flaw in xmlMemStrdupLoc within xmlmemory.c, causing an out-of-bounds write due to an integer overflow. This could enable remote code execution in an unprivileged process with no extra privileges, and requires user interaction to exploit. Red Hat and CVE sources ...