8153 matches found
CVE-2017-0504
CVE-2017-0504 is an elevation-of-privilege vulnerability in MediaTek components used by Android, including the M4U, sound, touchscreen, GPU, and Command Queue drivers. The flaw could let a local malicious app execute arbitrary code within the kernel, potentially leading to a permanent device comp...
CVE-2017-0542
CVE-2017-0542 is a remote code execution vulnerability in libavc within Android’s Mediaserver. According to connected documents, it affects Android 6.0, 6.0.1, 7.0, and 7.1.1, with the root cause described as memory corruption during media file and data processing when handling specially crafted ...
CVE-2017-0551
CVE-2017-0551 is a remote denial-of-service vulnerability in Android’s Mediaserver Libavc implementation. It affects Android 6.0, 6.0.1, 7.0, and 7.1.1, where processing a specially crafted file could cause a device hang or reboot. Public details in the provided documents describe the issue and a...
CVE-2017-0558
CVE-2017-0558 is an information-disclosure vulnerability in the Android Mediaserver. A local malicious application could access data outside its permission levels on affected Android versions (4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1). The CVSS scores in the initial description indicate a conf...
CVE-2017-0685
CVE-2017-0685 is a DoS in the Android media framework affecting Android 6.0/6.0.1/7.0/7.1.1/7.1.2. The connected CNVD entry notes a DoS via the media framework with an infinite loop attack vector; no root-cause or patch details are provided in the supplied documents.
CVE-2017-0688
CVE-2017-0688 is a denial-of-service vulnerability in the Android media framework. Affected product: Android. Affected versions (per initial doc): 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. The connected documents corroborate a DoS risk in the media framework, with no explicit exploit details provided. The A...
CVE-2017-0692
CVE-2017-0692 is a DoS vulnerability in the Android media framework affecting Android 4.4.4–7.1.2. The CNVD entry describes a remote attacker who can trigger a denial of service via a crafted input, specifically noting a denial via a null pointer backreference. The NVD entry for CVE-2017-0692 cor...
CVE-2017-0694
CVE-2017-0694 is a denial-of-service vulnerability in the Android media framework. Affected products: Android devices running versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. The vulnerability is classified as DoS (no details on exploit vectors provided in the initial documents). The ...
CVE-2017-0698
CVE-2017-0698 is an information disclosure vulnerability in the Android media framework affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID A-35467458). The connected documents provide the same basic description but do not specify the root cause, exploit details, or a concrete remedia...
CVE-2017-0699
CVE-2017-0699 is a information-disclosure vulnerability in the Android media framework affecting Android 6.0–7.2 (6.0, 6.0.1, 7.0, 7.1.1, 7.1.2). Technical sources describe an out-of-bounds read in the media framework that could allow an attacker to obtain sensitive information. The issue is mapp...
CVE-2017-0715
CVE-2017-0715 is a remote code execution vulnerability in Android’s media framework (libavc). Affected products/versions per the provided documents include Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The issue is described as RCE within the media framework libavc and is listed under the Android Se...
CVE-2017-0744
CVE-2017-0744 is detailed in connected documents as an Elevation of Privilege (EoP) affecting Google device sound drivers, with a Low severity patch in the August 2017 OTA. The vulnerability is tied to NVIDIA firmware processing per the NVD entry for Android kernel, while Android bulletin section...
CVE-2017-0749
Technical details about CVE-2017-0749 are not publicly provided in the connected documents. The sources present only high-level descriptions (elevation of privilege in Android/Linux kernel). Monitor for updates from the vendors and security advisories.
CVE-2017-0772
CVE-2017-0772 is a DoS in Android's media framework libavc affecting Android 6.0–8.0. The NVD entry lists: vulnerable component libavc in Android; affected versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0; impact is Denial of Service with a CVSS v3.0 vector of AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H (base...
CVE-2017-0792
CVE-2017-0792 is an information disclosure vulnerability in the Broadcom Wi‑Fi driver affecting Android devices (kernel level). The vulnerability is described as information disclosure with partial confidentiality impact (per CVSS) and does not indicate remote code execution or other impacts. Con...
CVE-2017-0802
CVE-2017-0802 is described in connected sources as a local elevation-of-privilege vulnerability in the MediaTek kernel used by Android. The MTK component table lists CVE-2017-0802 with type EoP and impact in the Kernel, indicating a privilege escalation path, but the documents do not provide conc...
CVE-2017-0803
CVE-2017-0803 is an elevation-of-privilege vulnerability in the MediaTek accessory detector driver used by Android. The issue affects the Android kernel via the Accessory detector driver component, enabling local privilege escalation in affected devices. The NVD entry lists a base CVSS v2 of 6.8 ...
CVE-2017-0822
CVE-2017-0822 is an Android camera elevation-of-privilege vulnerability affecting Android versions 6.0.1, 7.0, 7.1.1, 7.1.2 and 8.0. The connected documents confirm the vulnerability but do not provide concrete exploit details, affected component specifics beyond the camera subsystem, or remediat...
CVE-2017-0840
CVE-2017-0840 is an information-disclosure vulnerability in Android’s media framework (libstagefright). Affected products/versions include Android 5.0.2–8.0 (5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0). The issue is classified as Information Disclosure (Media framework) with High impact per...
CVE-2017-0872
CVE-2017-0872 is a remote code execution in Android's media framework (libskia). Affected products/versions per the Android bulletin and NVD: Android 7.0, 7.1.1, 7.1.2, 8.0. The root cause is a vulnerability in the media framework codecs (libskia, libmpeg2, libhevc, libavc) that could allow a cra...
CVE-2017-11013
CVE-2017-11013 is a Qualcomm WLAN/Android kernel vulnerability where countOffset in UnpackCore increments per loop without bounds checking pIe->arraybound. Documented as a Remote Code Execution in the Qualcomm WLAN driver affecting CAF Android kernel builds; exploitation could occur via crafte...
CVE-2017-11015
CVE-2017-11015 affects Android MSM, Firefox OS for MSM, and QRD Android builds (CAF Linux kernel). The issue is that SIR_MAC_AUTH_CHALLENGE_LENGTH is set to 128, while the frame parser allows challenge text up to 253 bytes, and the driver cannot handle >128 bytes. This mismatch can lead to a b...
CVE-2017-11042
CVE-2017-11042 affects Android for MSM, Firefox OS for MSM, and QRD Android builds with CAF Linux kernel, where ImsService and IQtiImsExt AIDL APIs lack access control. Root cause: insufficient access restrictions on these ImsService interfaces. Exploitation would be local (CVSS2/3 reflect LOCAL,...
CVE-2017-11060
CVE-2017-11060 is a buffer overread vulnerability affecting Android for MSM, Firefox OS for MSM, and QRD Android builds that use CAF Linux kernels. The issue occurs during processing of ACA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_PASSPOINT_LIST and QCA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_LIST ven...
CVE-2017-11087
CVE-2017-11087 affects libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android. The issue arises when the mediaserver path copies the output buffer to an application using the “filled length,” which can exceed the output buffer’s actual size, causing an information disclosure. Publicly...
CVE-2017-13251
CVE-2017-13251 affects Android's Media framework, with the issue located in impeg2d_dec_pic_data_thread() inside impeg2d_dec_hdr.c. The root cause is a missing bounds check that enables an out-of-bounds write. The documented impact is local elevation of privilege when running multi-threaded, with...
CVE-2017-13267
CVE-2017-13267 affects Android's avrc_pars_vendor_cmd in avrc_pars_tg.cc, with a stack corruption risk due to a missing bounds check. The vulnerability enables remote escalation of privilege with no user interaction, as described in the NVD entry (CVE-2017-13267) and reflected in the Android Secu...
CVE-2017-13318
CVE-2017-13318 affects HeifDataSource::readAt in HeifDecoderImpl.cpp, where an integer overflow can cause an out-of-bounds read leading to information disclosure. Exploitation requires user interaction and the attacker must be able to trigger the affected code path (AV: Adjacent, UI: Required). R...
CVE-2017-14907
CVE-2017-14907 describes a cryptographic weakness in Android for MSM, Firefox OS for MSM, and QRD Android builds aligned with CAF Linux kernel, caused by a flaw in deriving the disk encryption key that reduces cryptographic strength. Publicly documented as a critical encryption bug affecting Qual...
CVE-2017-15851
CVE-2017-15851 affects Qualcomm Camerav2 in Android for MSM (Linux kernel CAF-based) due to a lack of copy_from_user and an information leak in msm_ois_subdev_do_ioctl, causing a camera crash across Android releases. The issue is documented in the Pixel/Nexus bulletin under Camerav2 (CVE-2017-158...
CVE-2017-8236
CVE-2017-8236 is a buffer overflow vulnerability in an IPA driver present in CAF Android builds using the Linux kernel. Affected component: IPA driver; Root cause: buffer overflow. Potential impact per CVSS3 metrics is HIGH for confidentiality, integrity, and availability, with LOCAL exploitabili...
CVE-2017-8266
CVE-2017-8266 describes a race condition in the Qualcomm video driver used in CAF Android/Linux kernel variants, potentially leading to a use-after-free. Affected component: video driver within Qualcomm/CAF/Linux kernel stack. Impact details in the CVE notes indicate a partial impact on confident...
CVE-2018-21054
CVE-2018-21054 describes an integer underflow causing a buffer overflow in eCryptFS on Samsung mobile devices running M(6.0), N(7.x), and O(8.x) (with some model/version exclusions). Affected component is eCryptFS; root cause is underflow leading to overflow, with potential impact across confiden...
CVE-2018-5865
CVE-2018-5865 affects Qualcomm fwlog in Android CAF/Linux kernel builds prior to the 2018-07-05 patch level. The issue is described as an integer underflow and/or buffer over-read in processing a debug log event, leading to information disclosure (high impact on confidentiality per CVSS3, local, ...
CVE-2018-6241
The CVE-2018-6241 issue affects the NVIDIA Tegra Gralloc module in the driver, where missing input validation in the registerbuffer API could allow arbitrary code execution, denial of service, or privilege escalation. The NVIDIA SHIELD TV security bulletin lists this CVE as high severity (base sc...
CVE-2018-9371
CVE-2018-9371 affects the Mediatek Preloader/bootloader. It describes out-of-bounds reads/writes via an exposed interface that permits arbitrary peripheral memory mapping due to insufficient blacklisting/whitelisting. Under the described conditions, this can enable local elevation of privilege wi...
CVE-2018-9419
CVE-2018-9419 describes an information-disclosure flaw: an out-of-bounds read in the BLE path (l2cble_process_sig_cmd in l2c_ble.cc) that can leak remote data without extra privileges or user interaction. Public documents consistently state the impact as information disclosure with no exploitatio...
CVE-2018-9423
CVE-2018-9423 affects the Media framework component (ihevcd_parse_slice_header.c) where a missing bounds check allows an out-of-bounds read, leading to DoS. Exploitation requires user interaction. Several connected sources (NVD/Red Hat/Android bulletin) confirm the issue and cite the root cause. ...
CVE-2018-9426
CVE-2018-9426 summary (concrete details from connected docs) Root cause: In RSAKeyPairGenerator.getNumberOfIterations (RSAKeyPairGenerator.java), an incorrect implementation can produce weak RSA key pairs. Impact: Crypto vulnerability with no additional execution privileges; no user interaction r...
CVE-2018-9430
CVE-2018-9430 is an out-of-bounds write in btif_storage.cc (prop2cfg) that can lead to remote code execution without user interaction. Affected: Android Pixel/Nexus devices; root cause described as incorrect bounds check triggering a write beyond limits. Impact: high (RCE), network attack vector ...
CVE-2018-9441
CVE-2018-9441 affects the Android Pixel/Nexus stack, caused by an out-of-bounds read in sdp_copy_raw_data within sdp_discovery.cc due to an incorrect bounds check. This vulnerability enables local information disclosure without extra execution privileges; exploitation requires user interaction. M...
CVE-2018-9456
CVE-2018-9456 affects Google Android components, specifically the SDP utility: sdpu_extract_attr_seq in sdp_utils.cc. The issue is a possible out-of-bounds read due to an incorrect bounds check, enabling remote denial-of-service without extra privileges or user interaction. Connected sources (Red...
CVE-2019-11516
CVE-2019-11516 affects the Bluetooth stack in Cypress/Broadcom Wireless IoT. The issue arises from improper handling of Extended Inquiry Responses (EIRs): RFU bits are not discarded in eir_handleRx(), causing EIR length overflow beyond 240 bytes and a heap-based overflow in eir_getReceivedEIR() i...
CVE-2019-1993
CVE-2019-1993 affects Android 8.0–9, with a memory corruption/integer overflow in the btif_hd.cc register_app function. The issue can enable local escalation of privilege with no additional execution privileges and does not require user interaction. Root cause: integer overflow leading to memory ...
CVE-2019-20546
Samsung mobile devices running Android N (7.x), O (8.x), and P (9.0) with Broadcom Wi‑Fi chipsets are affected by a denial‑of‑service risk via a shared interface with Broadcom Bluetooth. The issue, tracked as SVE‑2019‑15350, is documented across CVE‑2019‑20546 and related feeds. No exploitation d...
CVE-2019-20557
CVE-2019-20557 affects Samsung mobile devices running N(7.x), O(8.x), and P(9.0). The vulnerability allows attackers to bypass Factory Reset Protection (FRP) by manipulating a SIM card to block the PUK code. The issue is a device-side bypass of FRP, with the described impact being the inability t...
CVE-2019-2150
CVE-2019-2150 affects the libxaac library used in Android 10. The issue is an out-of-bounds read caused by a missing bounds check, leading to information disclosure. Exploitation requires user interaction. Multiple connected sources (Red Hat, CNVD, CVE listings) describe the same root cause in li...
CVE-2019-9321
CVE-2019-9321 affects the Android 10 stack via the libavc library, where a missing variable initialization in libavc could allow information disclosure. The vulnerability reportedly requires user interaction to be exploited and would impact confidentiality (partial). The connected Red Hat entry a...
CVE-2019-9330
CVE-2019-9330 affects Android 10 in Bluetooth, where an out-of-bounds read due to a missing bounds check could enable remote information disclosure without user interaction. The issue is cataloged across multiple sources (NVD, Red Hat, CVE listing) with CVSSv3.1 base score 7.5 (HIGH) and CVSSv2 5...