CVE-2018-5865

CVE-2018-5865 affects Qualcomm fwlog in Android CAF/Linux kernel builds prior to the 2018-07-05 patch level. The issue is described as an integer underflow and/or buffer over-read in processing a debug log event, leading to information disclosure (high impact on confidentiality per CVSS3, local, ...

CVE-2013-7373

CVE-2013-7373 affects Android versions before 4.4, where the OpenSSL PRNG seeding is inadequate. This weakens cryptographic protections because the PRNG may be reused across multiple applications, potentially reducing confidentiality, integrity, and availability. The vulnerability is documented a...

CVE-2015-3844

The CVE-2015-3844 entry concerns Android’s ActivityManagerService.getProcessRecordLocked() before 5.1.1 (LMY48I). The issue arises when the method does not verify that an application’s process name matches its package name, which can lead ActivityManager to load the wrong process for certain task...

CVE-2015-3849

CVE-2015-3849 affects Android before 5.1.1 LMY48M, where Region_createFromParcel in core/jni/android/graphics/Region.cpp does not check the return values of certain reads, enabling an attacker to execute arbitrary code by sending a crafted message to a service. The issue is described as an “eleva...

CVE-2015-6604

CVE-2015-6604 affects Android’s libstagefright before 5.1.1 LMY48T. A crafted media file could cause memory corruption in mediaserver, enabling remote code execution or a denial of service. Root cause is memory corruption in the media processing pipeline. The public description confirms the compo...

CVE-2015-6609

The CVE-2015-6609 issue concerns libutils in Android before 5.1.1 LMY48X and Android 6.0 before 2015-11-01. The root cause is memory corruption triggered by processing a crafted audio file, which could allow remote code execution or cause a denial of service. Affected products are described as An...

CVE-2015-6627

CVE-2015-6627 affects the Android Audio component prior to 5.1.1 LMY48Z and 6.0 before 2015-12-01. A crafted audio file could disclose sensitive information, demonstrated by gaining Signature or SignatureOrSystem access via the mediaserver/media framework path. The issue is categorized as an info...

CVE-2016-2419

CVE-2016-2419 affects mediaserver (Android 6.x) where media/libmedia/IDrm.cpp does not initialize a key-request data structure, enabling information disclosure from process memory and bypass of an unspecified protection mechanism via unspecified vectors, with the attack demonstrated by obtaining ...

CVE-2016-2442

Technical details for CVE-2016-2442 are not publicly provided in the supplied documents; monitor for updates.

CVE-2016-2454

The CVE-2016-2454 entry describes a denial-of-service vulnerability in the Qualcomm hardware video codec used by Android on Nexus 5 devices prior to 2016-05-01. A crafted media/file could trigger memory corruption in the mediaserver path and cause the device to reboot, allowing remote attackers t...

CVE-2016-2458

The CVE-2016-2458 issue affects AOSP Mail: the compose functionality in Android 5.0.x (pre-5.0.2), 5.1.x (pre-5.1.1), and 6.x (pre-2016-05-01) does not adequately restrict attachments, enabling information disclosure via a crafted app related to ComposeActivity.java and ComposeActivityEmail.java....

CVE-2016-2468

CVE-2016-2468 affects the Qualcomm GPU driver in Android prior to 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7. A local attacker could gain privileges by exploiting a vulnerability in the GPU driver via a crafted application (internal bug 27475454). The issue is categorized as Elevation of Privilege w...

CVE-2016-3759

The CVE-2016-3759 entry documents a vulnerability in Android Framework APIs where an attacker with a crafted priv-app can insert a backup transport to read backup data (internal bug 28406080). Affected are Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01. The impact is in...

CVE-2016-3815

CVE-2016-3815 concerns the NVIDIA camera driver in Android (notably on Nexus 9). The connected NVIDIA bulletin entry specifies a kernel camera driver issue described as a stack read of a user-controlled length, which can disclose sensitive information to a crafted app. The associated details plac...

CVE-2016-3889

CVE-2016-3889 describes a Factory Reset Protection (FRP) bypass in Android 6.x and 7.0 prior to September 1, 2016. Attackers with physical access could trigger the bypass during pre-setup by exploiting (1) an external tile from a system app, (2) the Help feature, or (3) the Settings app, associat...

CVE-2016-6701

CVE-2016-6701 refers to a remote code execution vulnerability in libskia used by Android 7.0 that can be triggered by processing specially crafted media/data files, causing memory corruption within the Gallery context. The issue is described as high severity with a CVSS v3 base score of 7.8 (LOCA...

CVE-2016-6773

CVE-2016-6773 describes an information-disclosure vulnerability in the ih264d decoder of Mediaserver on Android (versions 6.0, 6.0.1, 7.0). A local malicious app could access data outside its permission levels due to Mediaserver’s handling in the ih264d component. The issue is categorized as Mode...

CVE-2016-8481

CVE-2016-8481 describes an elevation of privilege vulnerability in the Qualcomm sound driver on Android. A local malicious application could potentially execute arbitrary code in the kernel context if it first compromises a privileged process. The issue affects Android devices with affected kerne...

CVE-2017-0410

CVE-2017-0410 is an elevation-of-privilege vulnerability in Android’s Framework APIs that could allow a local malicious app to execute code in a privileged process. Affected: Android devices/versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 (Android ID A-31929765). Root cause: framework API weakness ...

CVE-2017-0498

CVE-2017-0498 describes a denial-of-service condition in Android Setup Wizard that could let a local attacker force a Google account sign-in after a factory reset. Affected versions include Android 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The vulnerability is local in scope, with no exploitation detail...

CVE-2017-0591

CVE-2017-0591 is a remote code execution vulnerability in libavc used by Android Mediaserver. A specially crafted media file could trigger memory corruption during media file and data processing, allowing an attacker to run code in the Mediaserver context. Affected products/versions include Andro...

CVE-2017-0595

Mode C: CVE-2017-0595 affects Android Mediaserver (libstagefright) and is an elevation-of-privilege flaw that could let a local malicious app execute code in the context of a privileged process. Affected products/versions include Android 4.4.4–7.1.1. Root cause is described as memory/process hand...

CVE-2017-0666

CVE-2017-0666 is an elevation-of-privilege issue in the Android framework affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 (Android ID: A-37285689). The connected Nessus entry UNPATCHED_CVE_2017_0666.NASL confirms the vulnerability exists in Linux/Unix-hosted packages...

CVE-2017-0692

CVE-2017-0692 is a DoS vulnerability in the Android media framework affecting Android 4.4.4–7.1.2. The CNVD entry describes a remote attacker who can trigger a denial of service via a crafted input, specifically noting a denial via a null pointer backreference. The NVD entry for CVE-2017-0692 cor...

CVE-2017-0694

CVE-2017-0694 is a denial-of-service vulnerability in the Android media framework. Affected products: Android devices running versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. The vulnerability is classified as DoS (no details on exploit vectors provided in the initial documents). The ...

CVE-2017-0695

Technical details about CVE-2017-0695 are not publicly provided in the supplied documents; monitor for updates.

CVE-2017-0725

CVE-2017-0725 is a Denial of Service in the Android media framework (libskia) affecting Android versions 7.0, 7.1.1, and 7.1.2. The vulnerability is tied to the libskia component used for graphics decoding in the Media framework. Exploit details are not provided in the documents beyond the DoS de...

CVE-2017-0727

CVE-2017-0727 is a documented elevation-of-privilege vulnerability in the Android media framework, specifically the libgui component. Public CNVD details describe the issue as affecting Android versions 7.0, 7.1.1, and 7.1.2 , enabling a remote attacker to execute arbitrary code with elevated pri...

CVE-2017-0734

CVE-2017-0734 is a DoS in the Android media framework libavc affecting Android 6.0–7.1.x. The vulnerability is described as a denial of service vulnerability in the media framework, but the provided documents do not specify root cause details, affected subcomponents beyond libavc, exploit vectors...

CVE-2017-0757

CVE-2017-0757 is a remote code execution vulnerability in Android’s media framework (libavc) affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The issue is categorized as RCE with high impact to confidentiality, integrity, and availability. The linked sources indicate the vulnerability exists ...

CVE-2017-0871

CVE-2017-0871 is an elevation of privilege vulnerability in the Android framework (framework base) affecting Android 8.0. The issue is described as a local elevation of privilege in the framework base; no public exploit details are provided in the consulted documents. The Android Security Bulleti...

CVE-2017-11013

CVE-2017-11013 is a Qualcomm WLAN/Android kernel vulnerability where countOffset in UnpackCore increments per loop without bounds checking pIe->arraybound. Documented as a Remote Code Execution in the Qualcomm WLAN driver affecting CAF Android kernel builds; exploitation could occur via crafte...

CVE-2017-11035

CVE-2017-11035 affects Qualcomm WLAN in Android devices (notably Pixel/Nexus) with a buffer overflow/information leak caused by incorrect initialization of WEXT callbacks and missing buffer-size checks. The vulnerability enables EoP via the WLAN path and is tracked as a Qualcomm WLAN issue in the...

CVE-2017-11042

CVE-2017-11042 affects Android for MSM, Firefox OS for MSM, and QRD Android builds with CAF Linux kernel, where ImsService and IQtiImsExt AIDL APIs lack access control. Root cause: insufficient access restrictions on these ImsService interfaces. Exploitation would be local (CVSS2/3 reflect LOCAL,...

CVE-2017-11087

CVE-2017-11087 affects libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android. The issue arises when the mediaserver path copies the output buffer to an application using the “filled length,” which can exceed the output buffer’s actual size, causing an information disclosure. Publicly...

CVE-2017-13178

CVE-2017-13178 affects Android Media Framework (SoftAVCDec). In initDecoder, a use-after-free can cause an out-of-bounds write to mCodecCtx when buffer allocation fails, enabling remote code execution in a privileged process without user interaction. Affected Android versions: 6.0.1, 7.0, 7.1.1, ...

CVE-2017-13180

CVE-2017-13180 affects the Android Media Framework (SoftAVCDec) where a bad header can cause a loop, enabling a use-after-free that leads to an out-of-bounds write. This can result in local privilege elevation with code execution in a privileged process, without user interaction. The vulnerabilit...

CVE-2017-13250

CVE-2017-13250 affects Android and targets the media decoding path in ih264d_utils.c, specifically ih264d_fmt_conv_420sp_to_420p. The root cause is an out-of-bounds write caused by a multiplication error, enabling remote code execution with user interaction required on affected builds. Affected v...

CVE-2017-13251

CVE-2017-13251 affects Android's Media framework, with the issue located in impeg2d_dec_pic_data_thread() inside impeg2d_dec_hdr.c. The root cause is a missing bounds check that enables an out-of-bounds write. The documented impact is local elevation of privilege when running multi-threaded, with...

CVE-2017-13276

CVE-2017-13276 concerns a stack buffer overflow in the Android tpdec_asc.cpp module, specifically in the function CProgramConfig_ReadHeightExt, caused by a missing bounds check. This vulnerability could enable remote code execution with the attacker having no special privileges beyond a user on t...

CVE-2017-13309

CVE-2017-13309 affects ConscryptEngine.java in Android's Conscrypt implementation. In readEncryptedData, there is a plaintext leak due to improper crypto usage, enabling local information disclosure without extra privileges or user interaction. The Android security bulletin (2018-05-01) associate...

CVE-2017-13314

CVE-2017-13314 affects Android by with a missing permission check in NetworkManagementService.setAllowOnlyVpnForUids, enabling local escalation of privilege to access non-VPN networks when VPN-only access is intended. The issue is described as a security settings bypass in NetworkManagementServic...

CVE-2017-13317

The HeifDecoderImpl component in the Media framework of Google Pixel and Google Nexus devices is vulnerable to an out-of-bounds read due to improper input validation in HeifDecoderImpl::getScanline . This vulnerability can lead to remote information disclosure without additional execution privile...

CVE-2017-15851

CVE-2017-15851 affects Qualcomm Camerav2 in Android for MSM (Linux kernel CAF-based) due to a lack of copy_from_user and an information leak in msm_ois_subdev_do_ioctl, causing a camera crash across Android releases. The issue is documented in the Pixel/Nexus bulletin under Camerav2 (CVE-2017-158...

CVE-2017-6211

CVE-2017-6211: In Android for MSM, Firefox OS for MSM, QRD Android (CAF Linux kernel builds), a buffer overflow in the processing of a downlink supplementary services message is reported. The vulnerability is triggered remotely over the network and, according to the CVSS data, could lead to a com...

CVE-2017-6248

CVE-2017-6248 affects NVIDIA Tegra kernel audio driver (Audio DSP). The issue arises when an invalid user parameter is copied, potentially allowing a local attacker to cause a denial of service or escalate privileges by executing code in the kernel context. Affected platforms include NVIDIA Jetso...

CVE-2017-6276

CVE-2017-6276 affects NVIDIA mediaserver/OpenMax component (LIBNVMMLITE_VIDEO.SO). The issue is a use-after-free caused by referencing memory after it has been freed, leading to potential denial of service and possible elevation of privileges. NVIDIA’s NVIDIA SHIELD Tablet bulletin lists CVE-2017...

CVE-2017-8235

CVE-2017-8235 is listed in Qualcomm component notes as an Elevation of Privilege affecting the Camera driver. The description from the initial document states that in CAF Android releases, a memory structure in a camera driver is not properly protected. The connected Android bulletin entries conf...

CVE-2017-8246

CVE-2017-8246 concerns the Android CAF ALSA PCM Playback Kernel Module. In msm_pcm_playback_close(), prtd is assigned from substream->runtime->private_data and later freed, but not sanitized to NULL; this creates a dangling pointer. Other code paths (e.g., msm_pcm_volume_ctl_put()) check fo...

CVE-2018-21078

The CVE-2018-21078 entry relates to Samsung mobile devices running M(6.0), N(7.x), and O(8.0) where the Contacts app improperly secures Supplementary Service (SS) and USSD codes, enabling attackers to originate video calls. Public details in the provided documents note the Samsung ID SVE-2018-114...