CVE-2025-31712

CVE-2025-31712 affects the cplog service due to a missing bounds check that enables an out-of-bounds write. This leads to local denial of service with no additional execution privileges required. The public documents do not provide exploitation details, affected versions, or remediation/patch inf...

CVE-2025-48533

CVE-2025-48533 affects the Android Framework. A race condition in the lockscreen context menu can be exploited to perform local escalation of privilege by using apps linked from the context menu, without additional execution privileges or user interaction. The vulnerability is characterized as Eo...

CVE-2026-0034

CVE-2026-0034 affects Android, arising from improper input validation in setPackageOrComponentEnabled within ManagedServices.java, causing a possible notification policy desync and local privilege elevation with no extra execution privileges or user interaction required. The issue is described ac...

CVE-2011-3975

CVE-2011-3975 involves an HTC update for Android 2.3.4 (build GRJ22) used with Sense on HTC EVO 3D, EVO 4G, ThunderBolt, and other devices. The HtcLoggers.apk component is exposed via android.permission.INTERNET and can be leveraged by user-assisted remote attackers to extract sensitive data, inc...

CVE-2013-7373

CVE-2013-7373 affects Android versions before 4.4, where the OpenSSL PRNG seeding is inadequate. This weakens cryptographic protections because the PRNG may be reused across multiple applications, potentially reducing confidentiality, integrity, and availability. The vulnerability is documented a...

CVE-2014-9881

CVE-2014-9881 affects Qualcomm components in Android on Nexus 7 (2013) where drivers/media/radio/radio-iris.c uses an incorrect integer data type, enabling privilege escalation or denial of service (buffer overflow) via a crafted app. The issue is documented in CVE descriptions and mapped to Andr...

CVE-2014-9902

CVE-2014-9902 involves a buffer overflow in the Qualcomm Wi‑Fi driver’s file CORE/SYS/legacy/src/utils/src/dot11f.c on Nexus 7 (2013) devices. An attacker could trigger arbitrary code execution by sending a crafted Information Element in an 802.11 management frame, exploiting the vulnerability in...

CVE-2014-9930

CVE-2014-9930 concerns a Use-After-Free vulnerability in the WCDMA stack on CAF Android releases that use the Linux kernel. Affected component: WCDMA subsystem; root cause: use-after-free memory error as described in the CVE description. Potential impact as per CVSS v3 metrics is High for Confide...

CVE-2014-9981

CVE-2014-9981 is reported as a Qualcomm component issue. The connected data indicate a buffer/overflow concern in the USB interface during boot for Qualcomm components used in Android CAF builds running the Linux kernel. The root cause is described as an insufficient overflow check in the USB int...

CVE-2015-3835

The CVE-2015-3835 entry describes a buffer overflow in libstagefright’s OMXNodeInstance::emptyBuffer (omx/OMXNodeInstance.cpp) affecting Android prior to 5.1.1 LMY48I. The underlying issue is a memory corruption vulnerability in mediaserver-related code that could allow remote code execution via ...

CVE-2015-3844

The CVE-2015-3844 entry concerns Android’s ActivityManagerService.getProcessRecordLocked() before 5.1.1 (LMY48I). The issue arises when the method does not verify that an application’s process name matches its package name, which can lead ActivityManager to load the wrong process for certain task...

CVE-2015-3858

CVE-2015-3858 affects Android before 5.1.1 LMY48M. The issue is in the checkDestination function of internal/telephony/SMSDispatcher.java, which relies on an obsolete permission name for an authorization check, enabling a crafted app to bypass the user-confirmation requirement for SMS short-code ...

CVE-2015-3862

CVE-2015-3862 affects mediaserver in Android prior to 5.1.1 LMY48T, where processing of media data can crash the mediaserver, causing a denial of service. The primary description specifies an unspecified vector; the CVE entry is listed as a low-severity DoS in Mediaserver per Android bulletin det...

CVE-2015-3869

Affected software/impacted component: Android’s media processing stack, specifically libstagefright in versions prior to 5.1.1 LMY48T. Vulnerability: A crafted media file can trigger memory corruption in mediaserver, enabling remote code execution or a denial of service. Root cause as stated: mem...

CVE-2015-6618

CVE-2015-6618 is a Bluetooth remote-code-execution vulnerability in Android 4.4 and 5.x (before 5.1.1 LMY48Z). The issue permits user‑assisted remote attackers to execute arbitrary code by leveraging access to the local physical environment; exploitation details require the attacker to be paired ...

CVE-2015-6621

CVE-2015-6621 affects Android SystemUI on 5.x prior to 5.1.1 LMY48Z and 6.0 prior to 2015-12-01. A crafted app can escalate privileges to Signature/SignatureOrSystem due to the SystemUI bug 23909438. The vulnerability is documented across NVD/CVE lists and is addressed by the December 2015 Androi...

CVE-2015-6628

CVE-2015-6628 affects Android’s Media Framework. Versions before 5.1.1 LMY48Z and 6.0 before 2015-12-01 expose a vulnerability in mediaserver that could disclose sensitive information and bypass a protection mechanism, via unknown vectors demonstrated by obtaining Signature or SignatureOrSystem a...

CVE-2015-9002

This CVE concerns Google Android TrustZone, where a DRM routine in the TrustZone DRM path can suffer an out-of-range pointer offset (integer overflow) vulnerability. Connected CNVD entry explicitly states an integer overflow in the TrustZone DRM routine exists on Android, and that an attacker cou...

CVE-2015-9041

CVE-2015-9041 is a buffer overflow vulnerability in Qualcomm closed‑source components used in Android CAF builds based on the Linux kernel, triggered during WCDMA radio tuning. Public sources (NVD/CNVD) describe a buffer overflow in the Qualcomm component within Android, with potential for arbitr...

CVE-2016-11033

CVE-2016-11033 affects Samsung mobile devices running M(6.0). Affected component is tlc_server, with a heap-based buffer overflow as the root cause. Samsung IDs: SVE-2016-7220 and SVE-2016-7225. Impact and exploitability are described in the linked metrics (CVSS v2/base 7.5 HIGH; CVSS v3.1/base 9...

CVE-2016-2428

CVE-2016-2428 affects Android mediaserver: libAACdec/src/aacdec_drc.cpp in mediaserver allows a crafted media file to cause memory corruption via inadequate thread limiting, enabling remote code execution or a denial of service. Affected Android releases: 4.x before 4.4.4; 5.0.x before 5.0.2; 5.1...

CVE-2016-2451

CVE-2016-2451 affects Android Mediaserver (libstagefright) and its VPX handling in SoftVPX.cpp. The vulnerability arises from not validating VPX output buffer sizes, enabling local privilege escalation to Signature or SignatureOrSystem via a crafted application. Affected Android versions: 4.x bef...

CVE-2016-2459

CVE-2016-2459 affects mediaserver in Android 4.x up to 4.4.3, 5.0.x up to 5.0.1/2, 5.1.x up to 5.1.0/1, and 6.x prior to 2016-05-01. The root cause is that certain data structures are not initialized, enabling an attacker to disclose sensitive information via a crafted application. The vulnerabil...

CVE-2016-2480

CVE-2016-2480 affects the mm-video-v4l2 vidc component in Mediaserver (Android 4.x up to 4.4.4, 5.0.x up to 5.0.2, 5.1.x up to 5.1.1, and 6.x prior to 2016-06-01). The root cause is improper validation of certain OMX parameter data structures, enabling a local attacker to gain privileges via a cr...

CVE-2016-2485

CVE-2016-2485 affects Android 4.x/5.x/6.x where libstagefright in mediaserver fails to validate OMX buffer sizes for GSM and G711 codecs, enabling privilege escalation via a crafted app (Signature or SignatureOrSystem). Affected Android versions include 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x...

CVE-2016-2493

CVE-2016-2493 describes an elevation-of-privilege vulnerability in the Broadcom Wi‑Fi driver used by Android on Nexus devices (N5, N6, N6P, 7 (2013), Nexus Player, Pixel C) prior to 2016-06-01. A local attacker could exploit a crafted application to gain privileged access (internal bug 26571522)....

CVE-2016-2494

CVE-2016-2494 involves an off-by-one error in sdcard/sdcard.c on Android, enabling a local attacker to gain privileges via a crafted app. Affected: Android 4.x before 4.4.4; 5.0.x before 5.0.2; 5.1.x before 5.1.1; 6.x before 2016-06-01. Root cause: off-by-one in sdcard.c leading to Elevation of P...

CVE-2016-2499

Technical details (affected products, root cause, remediation) are not publicly provided in the supplied documents for CVE-2016-2499. Monitor for updates.

CVE-2016-3852

The CVE-2016-3852 entry describes an information-disclosure vulnerability in the MediaTek Wi‑Fi driver on Android One devices prior to the 2016-08-05 patch. The issue arises in the MediaTek Wi‑Fi driver (Android/Open Android bug 29141147; MediaTek ALPS02751738) and could allow a crafted applicati...

CVE-2016-3854

CVE-2016-3854 affects the Qualcomm MSMM driver path in Android: the file drivers/media/video/msm/msm_mctl_buf.c does not validate the image mode, enabling a crafted application to trigger a denial of service via out-of-bounds access, with potential unspecified additional impact. Reported as Qualc...

CVE-2016-3915

The CVE-2016-3915 issue affects Android’s Camera service (camera_metadata.c) across multiple Android versions, enabling a local attacker to escalate privileges via a crafted app. Root cause: privilege escalation in the Camera service. Impact: attacker gains high-level privileges. Mitigation/Remed...

CVE-2016-6706

CVE-2016-6706 is a local privilege-escalation vulnerability in Android’s Mediaserver, specifically within the libstagefright component. The issue allows a local malicious application to execute arbitrary code in the context of a privileged process due to a flaw in Mediaserver on Android 7.0 and e...

CVE-2016-6741

CVE-2016-6741 is an elevation-of-privilege in the Qualcomm camera driver on Android prior to 2016-11-05. A local malicious app could execute arbitrary code in the kernel context. Affected devices in the public tables include Nexus 5X, Nexus 6P, and related devices (Android One, Pixel family). The...

CVE-2016-6750

CVE-2016-6750 denotes an information-disclosure vulnerability in Qualcomm components used by Android—specifically the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver. The issue could allow a local malicious app to access data outside its permission levels, but only after co...

CVE-2016-6768

CVE-2016-6768: A remote code execution vulnerability in the Framesequence library could allow an attacker to run arbitrary code in an unprivileged process by reading a specially crafted file. Affected product/stack: Android, with Framesequence library present in versions 5.0.2, 5.1.1, 6.0, 6.0.1,...

CVE-2016-8422

CVE-2016-8422 is an elevation-of-privilege issue in the Qualcomm bootloader that could let a local malicious Android app execute code in the kernel context, potentially leading to permanent device compromise. The vulnerability is described as critical and is tied to the bootloader/Qualcomm stack;...

CVE-2016-8433

CVE-2016-8433 is an elevation-of-privilege flaw in the MediaTek driver that could allow a local malicious app to execute code in the kernel context on Android. The vulnerability is rated Critical with potential for permanent device compromise, possibly requiring OS reflashing. The cited documents...

CVE-2017-0388

CVE-2017-0388 is an information-disclosure vulnerability in Android’s External Storage Provider. It could allow a local secondary user to read data from an external SD card inserted by the primary user. Affected products/versions: Android 6.0, 6.0.1, 7.0, 7.1.1. The issue is reported as a high-se...

CVE-2017-0398

CVE-2017-0398 is an information-disclosure vulnerability in Android’s Audioserver. According to the sources, it could allow a local malicious application to access data outside of its permission levels. Affected products/versions are Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, with Andro...

CVE-2017-0423

CVE-2017-0423 is an elevation-of-privilege vulnerability in the Android Bluetooth stack. A proximate attacker could leverage a separate Bluetooth stack vulnerability to manage access to documents on Android devices. Affected products/versions include Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1...

CVE-2017-0438

CVE-2017-0438 is a local elevation-of-privilege issue in the Qualcomm Wi‑Fi driver for Android, enabling a local malicious app to run code in the kernel context. The vulnerability is tied to the Qualcomm Wi‑Fi stack and is listed under Android kernel versions 3.10 and 3.18 with Android IDs A-3240...

CVE-2017-0450

CVE-2017-0450 describes an elevation-of-privilege vulnerability in Android’s Audioserver that could allow a local malicious application to execute arbitrary code within the context of a privileged process. Root cause is a privilege escalation in Audioserver; impact is local code execution in a pr...

CVE-2017-0469

CVE-2017-0469 (Mediaserver, Android) : A remote code execution vulnerability arises from memory corruption during media file/data processing in Mediaserver. A crafted file can trigger the issue, potentially allowing code execution within the Mediaserver process. Affected product/versions: Android...

CVE-2017-0484

The CVE-2017-0484 entry concerns a denial-of-service in Mediaserver on Android. The issue allows a specially crafted file to cause a device hang or reboot. Affected products/versions are Android 6.0, 6.0.1, 7.0, and 7.1.1 (Android ID A-33298089). The vulnerability arises from how Mediaserver hand...

CVE-2017-0488

The CVE-2017-0488 issue is a denial-of-service vulnerability in Android's Mediaserver. A specially crafted media file could cause a device hang or reboot. Affected Android versions are 6.0, 6.0.1, 7.0, and 7.1.1 (Android ID A-34097213). The vulnerability is documented in public advisories and is ...

CVE-2017-0489

CVE-2017-0489 is an elevation-of-privilege vulnerability in Android’s Location Manager that could allow a local malicious app to bypass OS protections for location data. Affected products/versions are Android 4.4.4 through 7.1.1 (including 5.x, 6.x, 7.0, 7.1.1). The issue is described as Moderate...

CVE-2017-0500

CVE-2017-0500 is an elevation of privilege vulnerability in MediaTek components used in Android, affecting multiple kernel drivers (M4U, sound, touchscreen, GPU, Command Queue). The issue could let a local malicious app execute arbitrary code in the kernel context. Exploitation is local and requi...

CVE-2017-0532

CVE-2017-0532 describes an information-disclosure vulnerability in the MediaTek video codec driver that could allow a local malicious Android app to access data outside its permission levels. The issue is considered moderate because exploitation requires compromising a privileged process. The rec...

CVE-2017-0544

CVE-2017-0544 is an Android CameraBase elevation of privilege vulnerability enabling a local malicious app to execute arbitrary code in a privileged process. Affected products/versions: Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. The vulnerability is described in the Android bulletin as ...

CVE-2017-0645

CVE-2017-0645 describes an elevation-of-privilege vulnerability in Android’s Bluetooth stack. A local malicious application could access data outside its permission levels. Affected products/versions: Android 6.0.1, 7.0, 7.1.1, 7.1.2. Root cause: Bluetooth exposure allowing unauthorized data acce...