CVE-2015-6627

CVE-2015-6627 affects the Android Audio component prior to 5.1.1 LMY48Z and 6.0 before 2015-12-01. A crafted audio file could disclose sensitive information, demonstrated by gaining Signature or SignatureOrSystem access via the mediaserver/media framework path. The issue is categorized as an info...

CVE-2015-6632

CVE-2015-6632 affects libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01, allowing remote attackers to obtain sensitive information and potentially bypass a protection mechanism by obtaining Signature or SignatureOrSystem access via unknown vectors. The issue is documented in...

CVE-2015-6633

The CVE-2015-6633 entry describes a memory corruption vulnerability in Android display drivers that can enable remote code execution or a denial of service when processing specially crafted media files. Affected products are Android versions prior to 5.1.1 LMY48Z and Android 6.0 prior to 2015-12-...

CVE-2015-6645

CVE-2015-6645 affects Android’s SyncManager prior to 5.1.1 LMY49F and 6.0 prior to 2016-01-01. A crafted application can cause a denial of service by triggering a reboot loop on the device. The issue is documented in Android’s security bulletin as a Denial of Service vulnerability in SyncManager,...

CVE-2015-7717

Technical details (affected products, root cause, CVSS, fixes) are not publicly available in the provided documents. Monitor for updates.

CVE-2015-8506

The CVE-2015-8506 entry concerns Android mediaserver memory corruption via a crafted media file, allowing remote code execution or denial of service. Affected software: Android mediaserver prior to 5.1.1 LMY48Z and 6.0 prior to 2015-12-01. Root cause: memory corruption triggered by crafted media ...

CVE-2015-8593

CVE-2015-8593 describes a buffer overflow in the 1x call processing of Qualcomm components used in Android CAF releases running the Linux kernel. The entry indicates a high-severity issue (CVSSv3: 9.8, CRITICAL) with network access, no user interaction, and no privileges required, potentially imp...

CVE-2016-0806

The CVE-2016-0806 issue affects the Qualcomm Wi‑Fi driver in the Android kernel, enabling local privilege escalation via a crafted application. Affected platforms include Android 4.x up to 4.4.4, 5.x up to 5.1.1 LMY49G, and 6.x prior to 2016-02-01. The root cause is the Qualcomm Wi‑Fi driver’s ha...

CVE-2016-0841

CVE-2016-0841 affects media/libmedia/mediametadataretriever.cpp in Android mediaserver across 4.x–6.x releases, where cleared service binders are mishandled. The vulnerability allows remote attackers to execute arbitrary code or cause memory corruption by feeding a crafted media file, as describe...

CVE-2016-2442

Technical details for CVE-2016-2442 are not publicly provided in the supplied documents; monitor for updates.

CVE-2016-2463

CVE-2016-2463 affects Android Mediaserver’s libstagefright h264dec, where multiple integer overflows in the media parsing path can trigger memory corruption. The issue permits remote code execution or denial of service when processing crafted video files. Vulnerable Android versions include 4.x u...

CVE-2016-3742

The CVE-2016-3742 entry affects Android 6.x Mediaserver (decoder/ih264d_process_intra_mb.c). A flaw in intra mode handling in Mediaserver could allow a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) via a specially crafted media file. The issue is docum...

CVE-2016-6740

CVE-2016-6740 is an elevation-of-privilege vulnerability in the Qualcomm camera driver on Android, allowing a local malicious application to execute arbitrary code in the kernel context after bypassing a privileged process. The issue is triggered locally and requires interaction with a privileged...

CVE-2016-6784

CVE-2016-6784 is an elevation of privilege vulnerability in the MediaTek driver affecting Android. The MediaTek driver could allow a local malicious application to execute arbitrary code in the kernel context. The issue is classified as High because exploitation requires compromising a privileged...

CVE-2017-0331

CVE-2017-0331 (NVIDIA Tegra kernel driver, NVMAP): An elevation-of-privilege/DoS issue where untrusted data can change between validation and use, potentially allowing a local attacker to escalate privileges or cause kernel-state impact. Affected context references Android on kernel 3.10 and the ...

CVE-2017-0405

CVE-2017-0405 is a remote code execution vulnerability in Android’s SurfaceFlinger. The issue allows an attacker to trigger memory corruption by processing a specially crafted media file, within the SurfaceFlinger context. Affected products/versions stated in the documents are Android 7.0 and 7.1...

CVE-2017-0408

CVE-2017-0408 describes a remote code execution vulnerability in libgdx used by Android 7.1.1, where a specially crafted file could cause arbitrary code execution in an unprivileged process. The issue is documented as high-severity (CVSS 3.0 base score 7.8) and is associated with the Android plat...

CVE-2017-0417

Technical details about CVE-2017-0417 are not provided in the supplied documents. No specific affected versions, exploit information, or fixes are disclosed here; monitor for updates from vendors and security bulletins.

CVE-2017-0437

CVE-2017-0437 is an elevation-of-privilege vulnerability in the Qualcomm Wi‑Fi driver on Android. The issue could allow a local malicious app to execute arbitrary code in the kernel context by exploiting the Qualcomm Wi‑Fi driver, with the Android kernel versions cited as Kernel-3.10 and Kernel-3...

CVE-2017-0492

The CVE-2017-0492 entry describes a local elevation-of-privilege issue in Android's System UI that allows a malicious local app to create a UI overlay covering the entire screen. Affected product/version: Android System UI on Android 7.1.1. Root cause: bypass of user interaction requirements enab...

CVE-2017-0506

CVE-2017-0506 describes an elevation of privilege in MediaTek components (M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver) that could allow a local malicious app to execute arbitrary code in the kernel context. The vulnerability is rated as Critical due to the r...

CVE-2017-0517

CVE-2017-0517 is an elevation-of-privilege flaw in the MediaTek hardware sensor driver on Android. A local, privileged process or application could cause the kernel to execute arbitrary code. Affected component: MediaTek hardware sensor driver (Android). Impact: kernel context compromise; high se...

CVE-2017-0643

CVE-2017-0643 describes a remote denial-of-service vulnerability in Android’s Media framework (Mediaserver). The issue could be triggered by processing a specially crafted media file, leading to a device hang or reboot. Affected products/versions include Android 5.0.2, 5.1.1, 6.0/6.0.1, 7.0, and ...

CVE-2017-0666

CVE-2017-0666 is an elevation-of-privilege issue in the Android framework affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 (Android ID: A-37285689). The connected Nessus entry UNPATCHED_CVE_2017_0666.NASL confirms the vulnerability exists in Linux/Unix-hosted packages...

CVE-2017-0677

CVE-2017-0677 is a remote code execution vulnerability in the Android media framework affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The CVE is listed with Android as the affected product and Android ID A-36035074. Public disclosures in connected sources confirm the issue as a media framewo...

CVE-2017-0683

CVE-2017-0683 is a high-severity remote code execution in Android’s media framework affecting Android 7.0, 7.1.1, and 7.1.2. The issue presents as a local-exploitable vulnerability requiring user interaction (UI: Required) and local attack vector, with a CVSS v3 base score of 7.8 (HIGH). The root...

CVE-2017-0687

CVE-2017-0687 is a denial-of-service vulnerability in Android's media framework (libavc) affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The issue targets the media framework component (libavc) and is characterized as DoS; the connected sources confirm affected versions and classify it as Do...

CVE-2017-0695

Technical details about CVE-2017-0695 are not publicly provided in the supplied documents; monitor for updates.

CVE-2017-0725

CVE-2017-0725 is a Denial of Service in the Android media framework (libskia) affecting Android versions 7.0, 7.1.1, and 7.1.2. The vulnerability is tied to the libskia component used for graphics decoding in the Media framework. Exploit details are not provided in the documents beyond the DoS de...

CVE-2017-0734

CVE-2017-0734 is a DoS in the Android media framework libavc affecting Android 6.0–7.1.x. The vulnerability is described as a denial of service vulnerability in the media framework, but the provided documents do not specify root cause details, affected subcomponents beyond libavc, exploit vectors...

CVE-2017-0738

CVE-2017-0738 is an information-disclosure vulnerability in Android’s media framework audioserver affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The connected documents identify the issue as a flaw in audioserver that can lead to leakage of sensitive informatio...

CVE-2017-0757

CVE-2017-0757 is a remote code execution vulnerability in Android’s media framework (libavc) affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The issue is categorized as RCE with high impact to confidentiality, integrity, and availability. The linked sources indicate the vulnerability exists ...

CVE-2017-0762

CVE-2017-0762 is a remote code execution vulnerability in Android’s media framework (libhevc). Affected versions include Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The issue is triggered by processing a specially crafted media file, allowing an attacker to run arbitrary code with th...

CVE-2017-0765

CVE-2017-0765 is a remote code execution vulnerability in Android’s media framework (libstagefright) affecting Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 and 8.0. The underlying issue is within the media framework’s handling of certain media files, as detailed by the NVD entry and multiple co...

CVE-2017-0787

CVE-2017-0787 is an Elevation of Privilege vulnerability in the Broadcom Wi‑Fi driver used by the Android kernel. The issue affects the Broadcom Wi‑Fi component and could permit a privileged action if exploited. The provided documents do not include explicit exploit details or affected device ver...

CVE-2017-0791

CVE-2017-0791 is an elevation-of-privilege vulnerability affecting the Broadcom Wi‑Fi driver in Android (kernel). The entry states the issue enables privilege escalation but does not provide exploitation details, affected versions, or remediation steps within the supplied documents.

CVE-2017-0830

CVE-2017-0830 is an Elevation of Privilege vulnerability in the Android framework (device policy client) affecting Android 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0. The NVD entry lists a high-severity impact with LOCAL attack vector, requiring user interaction, and a base CVSSv3 score of 7.8. The a...

CVE-2017-0839

CVE-2017-0839 is an information-disclosure in the Android media framework (libeffects) affecting Android 5.0.2–8.0. The issue is a information leak vulnerability in the Media Framework, with no exploited vectors detailed in the provided documents. The Android Security Bulletin lists this CVE unde...

CVE-2017-0877

CVE-2017-0877 describes a remote code execution vulnerability in the Android media framework (libavc) affecting Android 6.0. The issue is triggered via a specially crafted file, allowing an attacker to execute code in the context of a privileged process. The vulnerability is categorized as Media ...

CVE-2017-11001

CVE-2017-11001 affects Qualcomm components: Wi-Fi driver in Android CAF/Linux kernel. The root cause is an unchecked MAC address length, which may cause an out-of-bounds read. This can lead to a potential information disclosure (confidentiality impact Partial). CVSS details in the provided record...

CVE-2017-11061

CVE-2017-11061 describes a buffer over-read in the Qualcomm WLAN stack used by Android for MSM, Firefox OS for MSM, and QRD Android, across CAF Linux kernel-based Android releases. The issue occurs while processing the cfg80211 vendor sub-command QCA_NL80211_VENDOR_SUBCMD_ROAM, potentially allowi...

CVE-2017-13148

CVE-2017-13148 is a DoS in Android's media framework (libmpeg2). Affected Android versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. The issue is described as a denial-of-service vulnerability in the media decoding path. The Android bulletin indicates patches exist in the 2017-12-01 and 2017-12-05 lev...

CVE-2017-13164

The CVE-2017-13164 entry is an information disclosure vulnerability in the Android kernel Binder driver. Affected component: Android kernel (Binder). Root cause and details are limited in the provided documents, but the NVD entry assigns a Confidentiality impact of PARTIAL (CVSSv2) and HIGH (CVSS...

CVE-2017-13180

CVE-2017-13180 affects the Android Media Framework (SoftAVCDec) where a bad header can cause a loop, enabling a use-after-free that leads to an out-of-bounds write. This can result in local privilege elevation with code execution in a privileged process, without user interaction. The vulnerabilit...

CVE-2017-13250

CVE-2017-13250 affects Android and targets the media decoding path in ih264d_utils.c, specifically ih264d_fmt_conv_420sp_to_420p. The root cause is an out-of-bounds write caused by a multiplication error, enabling remote code execution with user interaction required on affected builds. Affected v...

CVE-2017-13276

CVE-2017-13276 concerns a stack buffer overflow in the Android tpdec_asc.cpp module, specifically in the function CProgramConfig_ReadHeightExt, caused by a missing bounds check. This vulnerability could enable remote code execution with the attacker having no special privileges beyond a user on t...

CVE-2017-13309

CVE-2017-13309 affects ConscryptEngine.java in Android's Conscrypt implementation. In readEncryptedData, there is a plaintext leak due to improper crypto usage, enabling local information disclosure without extra privileges or user interaction. The Android security bulletin (2018-05-01) associate...

CVE-2017-13310

The CVE-2017-13310 issue is described as a read/write serialization bug in ViewPager.java.createFromParcel, causing a permissions bypass and enabling local escalation of privilege (an app could start an activity with system privileges without extra execution privileges). The vulnerability affects...

CVE-2017-14881

CVE-2017-14881 describes a use-after-free in the IPA IOCTL handler (IPA_IOC_ADD_HDR_PROC_CTX) on Android for MSM/Firefox OS for MSM/QRD Android prior to 2017-10-13. The vulnerability is in the ipa driver (Qualcomm) and is categorized in the Android Pixel bulletin as an Elevation of Privilege issu...

CVE-2017-6248

CVE-2017-6248 affects NVIDIA Tegra kernel audio driver (Audio DSP). The issue arises when an invalid user parameter is copied, potentially allowing a local attacker to cause a denial of service or escalate privileges by executing code in the kernel context. Affected platforms include NVIDIA Jetso...