CVE-2017-0685

CVE-2017-0685 is a DoS in the Android media framework affecting Android 6.0/6.0.1/7.0/7.1.1/7.1.2. The connected CNVD entry notes a DoS via the media framework with an infinite loop attack vector; no root-cause or patch details are provided in the supplied documents.

CVE-2016-2459

CVE-2016-2459 affects mediaserver in Android 4.x up to 4.4.3, 5.0.x up to 5.0.1/2, 5.1.x up to 5.1.0/1, and 6.x prior to 2016-05-01. The root cause is that certain data structures are not initialized, enabling an attacker to disclose sensitive information via a crafted application. The vulnerabil...

CVE-2016-2485

CVE-2016-2485 affects Android 4.x/5.x/6.x where libstagefright in mediaserver fails to validate OMX buffer sizes for GSM and G711 codecs, enabling privilege escalation via a crafted app (Signature or SignatureOrSystem). Affected Android versions include 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x...

CVE-2016-3758

CVE-2016-3758 affects Android’s DexClassLoader (libdex/OptInvocation.cpp). The issue is described as multiple buffer overflows that allow attackers to gain privileges via a crafted application providing a long filename. Affected are Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1...

CVE-2016-6675

This CVE (CVE-2016-6675) is a buffer/size difference (off-by-one) vulnerability in the Qualcomm Wi‑Fi driver’s CORE/HDD wlan_hdd_hostapd.c. Affected devices include Android on Nexus 5X and Android One, with exploitation via a crafted application that invokes the linkspeed ioctl, enabling local pr...

CVE-2016-6741

CVE-2016-6741 is an elevation-of-privilege in the Qualcomm camera driver on Android prior to 2016-11-05. A local malicious app could execute arbitrary code in the kernel context. Affected devices in the public tables include Nexus 5X, Nexus 6P, and related devices (Android One, Pixel family). The...

CVE-2016-8447

CVE-2016-8447 describes an elevation-of-privilege vulnerability in MediaTek components (thermal and video drivers) that could allow a locally running malicious app to execute arbitrary code in the kernel context on Android. The issue requires compromising a privileged process to exploit, and is r...

CVE-2017-0388

CVE-2017-0388 is an information-disclosure vulnerability in Android’s External Storage Provider. It could allow a local secondary user to read data from an external SD card inserted by the primary user. Affected products/versions: Android 6.0, 6.0.1, 7.0, 7.1.1. The issue is reported as a high-se...

CVE-2017-0408

CVE-2017-0408 describes a remote code execution vulnerability in libgdx used by Android 7.1.1, where a specially crafted file could cause arbitrary code execution in an unprivileged process. The issue is documented as high-severity (CVSS 3.0 base score 7.8) and is associated with the Android plat...

CVE-2017-0426

Summary: CVE-2017-0426 is a local information-disclosure vulnerability in the Android Filesystem affecting Android 7.0 and 7.1.1. The issue could allow a local malicious app to access data outside its permission levels. Root cause is described as an information-disclosure weakness in the Filesyst...

CVE-2017-0444

CVE-2017-0444 is a local elevation-of-privilege issue in the Realtek sound driver affecting Android devices (kernel 3.10). Connected sources (e.g., CNVD, NVD entries) describe exploitation that allows a locally executed, malicious application to run code in the kernel context via the Realtek driv...

CVE-2017-0476

CVE-2017-0476 : A remote code execution vulnerability in AOSP Messaging causing memory corruption during media/file processing via a specially crafted file. Affected: Android 6.0, 6.0.1, 7.0, 7.1.1 (Android ID A-33388925). Impact: remote code execution within an unprivileged context. Source notes...

CVE-2017-0496

Technical details about CVE-2017-0496 are not publicly provided in the supplied connected documents. The sources reiterate a denial-of-service impact for Android Setup Wizard but do not specify affected versions, vectors, or fixes. Monitor for updates from official advisories.

CVE-2017-0504

CVE-2017-0504 is an elevation-of-privilege vulnerability in MediaTek components used by Android, including the M4U, sound, touchscreen, GPU, and Command Queue drivers. The flaw could let a local malicious app execute arbitrary code within the kernel, potentially leading to a permanent device comp...

CVE-2017-0505

CVE-2017-0505 is an elevation-of-privilege issue in MediaTek components (M4U, sound, touchscreen, GPU, and Command Queue drivers) for Android. A local attacker could execute arbitrary code in the kernel context. The 2017-03 Android bulletin lists CVE-2017-0505 with Android ID A-31822282 and notes...

CVE-2017-0506

CVE-2017-0506 describes an elevation of privilege in MediaTek components (M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver) that could allow a local malicious app to execute arbitrary code in the kernel context. The vulnerability is rated as Critical due to the r...

CVE-2017-0538

CVE-2017-0538 is a remote code execution vulnerability in libavc used by Android Mediaserver. A specially crafted media file can trigger memory corruption during processing, allowing code execution within Mediaserver. Affected Android versions: 6.0, 6.0.1, 7.0, 7.1.1. Root cause: memory corruptio...

CVE-2017-0542

CVE-2017-0542 is a remote code execution vulnerability in libavc within Android’s Mediaserver. According to connected documents, it affects Android 6.0, 6.0.1, 7.0, and 7.1.1, with the root cause described as memory corruption during media file and data processing when handling specially crafted ...

CVE-2017-0596

CVE-2017-0596 is an Android Mediaserver (libstagefright) elevation-of-privilege vulnerability. The issue could allow a local malicious app to execute code with the privileges of Mediaserver. Affected products/versions listed in sources include Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1...

CVE-2017-0649

CVE-2017-0649 is a MediaTek sound driver Elevation of Privilege vulnerability in Android. A local malicious app could exploit a flaw in the kernel context via the sound driver to execute arbitrary code. The issue is classified as Moderate due to the need to compromise a privileged process and vul...

CVE-2017-0699

CVE-2017-0699 is a information-disclosure vulnerability in the Android media framework affecting Android 6.0–7.2 (6.0, 6.0.1, 7.0, 7.1.1, 7.1.2). Technical sources describe an out-of-bounds read in the media framework that could allow an attacker to obtain sensitive information. The issue is mapp...

CVE-2017-0715

CVE-2017-0715 is a remote code execution vulnerability in Android’s media framework (libavc). Affected products/versions per the provided documents include Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The issue is described as RCE within the media framework libavc and is listed under the Android Se...

CVE-2017-0729

CVE-2017-0729 is an Elevation of Privilege in Android’s media framework mediadrmserver. The vulnerability affects Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2, enabling a remote attacker to execute arbitrary code with elevated privileges within a privileged context via mediadr...

CVE-2017-0784

CVE-2017-0784 is an elevation of privilege in the Android NFC subsystem. Affected product: Android (versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2). The provided documents identify the issue as an Android NFC privilege escalation but do not specify the root cause, impacted component beyond ...

CVE-2017-0792

CVE-2017-0792 is an information disclosure vulnerability in the Broadcom Wi‑Fi driver affecting Android devices (kernel level). The vulnerability is described as information disclosure with partial confidentiality impact (per CVSS) and does not indicate remote code execution or other impacts. Con...

CVE-2017-0840

CVE-2017-0840 is an information-disclosure vulnerability in Android’s media framework (libstagefright). Affected products/versions include Android 5.0.2–8.0 (5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0). The issue is classified as Information Disclosure (Media framework) with High impact per...

CVE-2017-0848

CVE-2017-0848 is an information-disclosure vulnerability in the Android media framework, specifically within the libeffects component. The Pixel/Nexus security bulletin (and related records) attributes this issue to the Media framework with an impact category of Information Disclosure and lists a...

CVE-2017-0855

CVE-2017-0855 affects Android’s Media Framework in MPEG4Extractor.cpp, where several paths return early without cleaning up internal buffers, leading to memory leaks. The impact is remote denial of service of a privileged process without extra privileges or user interaction. Affected Android vers...

CVE-2017-0872

CVE-2017-0872 is a remote code execution in Android's media framework (libskia). Affected products/versions per the Android bulletin and NVD: Android 7.0, 7.1.1, 7.1.2, 8.0. The root cause is a vulnerability in the media framework codecs (libskia, libmpeg2, libhevc, libavc) that could allow a cra...

CVE-2017-13164

The CVE-2017-13164 entry is an information disclosure vulnerability in the Android kernel Binder driver. Affected component: Android kernel (Binder). Root cause and details are limited in the provided documents, but the NVD entry assigns a Confidentiality impact of PARTIAL (CVSSv2) and HIGH (CVSS...

CVE-2017-14907

CVE-2017-14907 describes a cryptographic weakness in Android for MSM, Firefox OS for MSM, and QRD Android builds aligned with CAF Linux kernel, caused by a flaw in deriving the disk encryption key that reduces cryptographic strength. Publicly documented as a critical encryption bug affecting Qual...

CVE-2017-18067

CVE-2017-18067 affects the Qualcomm Wireless network driver in Android Qualcomm components (CAF/Linux-based Android releases). The root cause is improper input validation when processing an encrypted authentication management frame (lim_send_auth_mgmt_frame()), leading to a buffer overflow. The d...

CVE-2017-18649

The CVE-2017-18649 issue affects Samsung mobile devices running N(7.x) software. The bootloader for the Qualcomm MSM8998 chipset lacks an integrity check of the system image, enabling an attacker to boot with root privileges (SamFAIL). The Samsung ID is SVE-2017-10465. No additional technical det...

CVE-2017-18694

CVE-2017-18694 affects Samsung mobile devices with Exynos5 software up to 2016-10-25. Root cause: an incorrect format specifier in the logging path allows reading kernel addresses from logs, enabling information disclosure. Impact per sources: kernel addresses disclosed; no exploitation details p...

CVE-2017-8245

CVE-2017-8245 affects Android releases from CAF using the Linux kernel. The issue occurs while processing a voice SVC request with a payload size that overflows its declared size, causing an out-of-bounds memory copy. The initial documents provide no vendor/version specifics beyond CAF Android an...

CVE-2017-8251

CVE-2017-8251 affects Qualcomm camera driver components in Android CAF builds on Linux kernels. The bug arises when msm_isp_check_stream_cfg_cmd and msm_isp_stats_update_cgc_override fail to validate stream_cfg_cmd->num_streams, allowing an overflow of stream_cfg_cmd->stream_handle. The CVE...

CVE-2017-8266

CVE-2017-8266 describes a race condition in the Qualcomm video driver used in CAF Android/Linux kernel variants, potentially leading to a use-after-free. Affected component: video driver within Qualcomm/CAF/Linux kernel stack. Impact details in the CVE notes indicate a partial impact on confident...

CVE-2018-11280

CVE-2018-11280 affects Android CAF builds (Linux kernel in Android for MSM, Firefox OS for MSM, QRD Android). The vulnerability arises from missing size validation for NAT entry input during user-space processing, which could allow memory exhaustion when input size exceeds the maximum. Impact is ...

CVE-2018-11843

CVE-2018-11843 affects Qualcomm WLAN host components; the issue is use-after-free caused by missing return-value checks in the WMA vdev start/response path. Documented as High severity with local attack vector in Qualcomm/Android bulletins; patches are available in the 2020-01 Android security bu...

CVE-2018-3565

CVE-2018-3565 affects Qualcomm WLAN/CAF Android devices where lim_send_sme_probe_req_ind() in the WLAN stack of the Linux kernel can overflow a buffer during probe request indication. The issue is documented across multiple sources as a buffer overflow in the Android CAF/Linux kernel path used fo...

CVE-2018-6241

The CVE-2018-6241 issue affects the NVIDIA Tegra Gralloc module in the driver, where missing input validation in the registerbuffer API could allow arbitrary code execution, denial of service, or privilege escalation. The NVIDIA SHIELD TV security bulletin lists this CVE as high severity (base sc...

CVE-2018-9419

CVE-2018-9419 describes an information-disclosure flaw: an out-of-bounds read in the BLE path (l2cble_process_sig_cmd in l2c_ble.cc) that can leak remote data without extra privileges or user interaction. Public documents consistently state the impact as information disclosure with no exploitatio...

CVE-2018-9421

CVE-2018-9421 is a local information-disclosure flaw in Android’s Media framework involving Parcel.cpp writeInplace and Binder; uninitialized data could leak across processes. Current documents confirm the issue and indicate it affects Android devices via local access with no user interaction. Th...

CVE-2018-9459

CVE-2018-9459 affects Android across 6.0–8.1. A path traversal flaw in Attachment.java (Attachment of EmlAttachmentProvider.java) enables Elevation of Privilege with remote execution potential. Impact is a remote privilege escalation with no extra credentials; exploitation does not require user i...

CVE-2019-1993

CVE-2019-1993 affects Android 8.0–9, with a memory corruption/integer overflow in the btif_hd.cc register_app function. The issue can enable local escalation of privilege with no additional execution privileges and does not require user interaction. Root cause: integer overflow leading to memory ...

CVE-2019-2027

CVE-2019-2027 affects Android’s Media framework. The vulnerability is a floor0_inverse1 out-of-bounds write in floor0.c caused by an incorrect bounds check, leading to remote code execution. Exploitation requires user interaction, and impact is rated high (RCE) across Android 7.0 through 9 in the...

CVE-2019-2036

CVE-2019-2036 affects Google Android where in HidHostService.java the function okToConnect contains an incorrect state check, enabling a possible permission bypass. This could allow remote escalation of privilege with no additional execution privileges or user interaction required. The vulnerabil...

CVE-2019-2045

CVE-2019-2045 is an Android RCE vulnerability in the JSCallTyper of typer.cc caused by an out-of-bounds write due to an incorrect bounds check. It affects Android 7.0 (7.0) through 9 (7.1.2, 8.1, 9) per the records. The issue could allow a remote attacker to execute code with the privileges of a ...

CVE-2019-20590

CVE-2019-20590 affects Samsung mobile devices running O(8.x) software on Qualcomm chipsets, with an integer underflow in the Secure Storage Trustlet (Samsung ID SVE-2019-13952). Connected sources (Red Hat, NVD, CVE listing) confirm the vulnerable component and root cause as an underflow in Secure...

CVE-2019-20612

The CVE-2019-20612 entry applies to Samsung mobile devices running N(7.x) and O(8.x) firmware that use Broadcom Wi‑Fi and SEC Wi‑Fi chipsets. The issue is a denial-of-service condition triggered by TCP SYN packets directed at the Wi‑Fi subsystem, with the vulnerability described as a problem in t...