CVE-2016-0829

The CVE-2016-0829 issue affects Android mediaserver and is triggered in the BnGraphicBufferProducer::onTransact path within libs/gui/IGraphicBufferConsumer.cpp. The root cause is failure to initialize a specific output data structure in Mediaserver, allowing an attacker to read leaked data and by...

CVE-2016-0848

CVE-2016-0848 is a race-condition vulnerability in Android’s Download Manager that affects Android 4.x (before 4.4.4), 5.x (before 5.0.2 or 5.1.1), and 6.x (before 2016-04-01). A crafted app can exploit a symlink target change to bypass private-storage file-access restrictions, enabling unauthori...

CVE-2016-10339

CVE-2016-10339 affects CAF Android builds using the Linux kernel. The issue allows HLOS to overwrite secure memory or read the keystore contents. Details across sources indicate the vulnerability impacts Android devices in CAF releases and were addressed in the 2017 Android security patches (June...

CVE-2016-11042

CVE-2016-11042 affects Samsung mobile devices running L (5.0/5.1) and M (6.0), describing a SIM lock bypass. The connected documents reiterate only that a SIM lock bypass exists (SVE-2016-5381) but do not provide technical details about the affected component, root cause, exploitability, or concr...

CVE-2016-2417

CVE-2016-2417 affects mediaserver’s mediaserver component (frameworks/av/media/libmedia/IOMX.cpp) on Android 4.x–6.x where a parameter data structure is not initialized, enabling information disclosure from process memory and potentially bypassing a protection mechanism. This is demonstrated via ...

CVE-2016-2439

CVE-2016-2439 is a Bluetooth vulnerability in Android where a buffer overflow in btif/src/btif_dm.c during pairing can allow a remote attacker to execute arbitrary code via a long PIN. Affected: Android 4.x up to 4.4.3, 5.0.x up to 5.0.2, 5.1.x up to 5.1.1, and 6.x prior to 2016-05-01. Impact: re...

CVE-2016-2482

CVE-2016-2482 affects the mm-video-v4l2 vdec component in Android Mediaserver, where a faulty handling of a buffer count in versions prior to 4.4.4 (and 5.x/6.x ranges listed) enables a local attacker to gain privileges (Signature or SignatureOrSystem) via a crafted application. The issue is an e...

CVE-2016-2499

Technical details (affected products, root cause, remediation) are not publicly provided in the supplied documents for CVE-2016-2499. Monitor for updates.

CVE-2016-3742

The CVE-2016-3742 entry affects Android 6.x Mediaserver (decoder/ih264d_process_intra_mb.c). A flaw in intra mode handling in Mediaserver could allow a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) via a specially crafted media file. The issue is docum...

CVE-2016-3820

The CVE-2016-3820 issue affects the ih264d decoder in Mediaserver (Android 6.x). The root cause is the decoder mishandling slice numbers, enabling a remote attacker to craft a media file that could trigger arbitrary code execution or memory corruption within Mediaserver. Public details confirm im...

CVE-2016-6732

CVE-2016-6732 is an elevation-of-privilege vulnerability in the NVIDIA GPU driver on Android, allowing a local malicious app to execute code in the kernel. The Android bulletin notes patch levels from 2016-11-01/11-05 (and 11-06) address multiple issues; Pixel C is listed among updated devices fo...

CVE-2016-6768

CVE-2016-6768: A remote code execution vulnerability in the Framesequence library could allow an attacker to run arbitrary code in an unprivileged process by reading a specially crafted file. Affected product/stack: Android, with Framesequence library present in versions 5.0.2, 5.1.1, 6.0, 6.0.1,...

CVE-2016-6772

CVE-2016-6772 is an Android Wi‑Fi elevation of privilege vulnerability. The issue could let a local malicious app execute code in the context of a privileged Wi‑Fi process. Affected products/versions per the entry: Android 5.0.2, 5.1.1, 6.0, 6.0.1, and 7.0. The root cause is exploitation of the W...

CVE-2016-8433

CVE-2016-8433 is an elevation-of-privilege flaw in the MediaTek driver that could allow a local malicious app to execute code in the kernel context on Android. The vulnerability is rated Critical with potential for permanent device compromise, possibly requiring OS reflashing. The cited documents...

CVE-2017-0417

Technical details about CVE-2017-0417 are not provided in the supplied documents. No specific affected versions, exploit information, or fixes are disclosed here; monitor for updates from vendors and security bulletins.

CVE-2017-0423

CVE-2017-0423 is an elevation-of-privilege vulnerability in the Android Bluetooth stack. A proximate attacker could leverage a separate Bluetooth stack vulnerability to manage access to documents on Android devices. Affected products/versions include Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1...

CVE-2017-0438

CVE-2017-0438 is a local elevation-of-privilege issue in the Qualcomm Wi‑Fi driver for Android, enabling a local malicious app to run code in the kernel context. The vulnerability is tied to the Qualcomm Wi‑Fi stack and is listed under Android kernel versions 3.10 and 3.18 with Android IDs A-3240...

CVE-2017-0470

CVE-2017-0470 describes a remote code execution vulnerability in Android’s Mediaserver. A crafted media file could trigger memory corruption during media file/data processing, allowing code execution within the Mediaserver process. Affected Android versions include 6.0, 6.0.1, 7.0, and 7.1.1. The...

CVE-2017-0479

CVE-2017-0479 describes an elevation of privilege vulnerability in the Android Audioserver. A local malicious app could execute arbitrary code in the context of a privileged process. Affected software: Android, with listed versions including 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The ro...

CVE-2017-0484

The CVE-2017-0484 entry concerns a denial-of-service in Mediaserver on Android. The issue allows a specially crafted file to cause a device hang or reboot. Affected products/versions are Android 6.0, 6.0.1, 7.0, and 7.1.1 (Android ID A-33298089). The vulnerability arises from how Mediaserver hand...

CVE-2017-0489

CVE-2017-0489 is an elevation-of-privilege vulnerability in Android’s Location Manager that could allow a local malicious app to bypass OS protections for location data. Affected products/versions are Android 4.4.4 through 7.1.1 (including 5.x, 6.x, 7.0, 7.1.1). The issue is described as Moderate...

CVE-2017-0491

CVE-2017-0491 is an elevation of privilege vulnerability in Android’s Package Manager. The issue could allow a local malicious application to prevent users from uninstalling apps or removing app permissions. Affected versions are Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The descri...

CVE-2017-0495

CVE-2017-0495 is an information-disclosure vulnerability in Android Mediaserver that could allow a local malicious app to access data beyond its permission levels. Affected: Android 6.0–7.1.1. Impact: partial confidentiality breach; no exploitation details or patches are provided in the documents.

CVE-2017-0544

CVE-2017-0544 is an Android CameraBase elevation of privilege vulnerability enabling a local malicious app to execute arbitrary code in a privileged process. Affected products/versions: Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. The vulnerability is described in the Android bulletin as ...

CVE-2017-0558

CVE-2017-0558 is an information-disclosure vulnerability in the Android Mediaserver. A local malicious application could access data outside its permission levels on affected Android versions (4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1). The CVSS scores in the initial description indicate a conf...

CVE-2017-0619

The CVE-2017-0619 entry describes an elevation-of-privilege vulnerability in the Qualcomm pin controller driver on Android kernels (Kernel-3.10). A local malicious app could execute arbitrary code in the kernel context. The CVSS indicates LOCAL access with HIGH impact on confidentiality, integrit...

CVE-2017-0639

CVE-2017-0639 is an information-disclosure vulnerability within Android’s Bluetooth component. The issue could allow a local malicious application to access data outside its permissions, effectively bypassing OS data isolation. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7....

CVE-2017-0645

CVE-2017-0645 describes an elevation-of-privilege vulnerability in Android’s Bluetooth stack. A local malicious application could access data outside its permission levels. Affected products/versions: Android 6.0.1, 7.0, 7.1.1, 7.1.2. Root cause: Bluetooth exposure allowing unauthorized data acce...

CVE-2017-0693

CVE-2017-0693 refers to a DoS vulnerability in the Android media framework. Affected products/versions are Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The CNVD entry describes a denial-of-service condition in the Android media framework that an attacker could trigger remotely to cause a DoS. Publi...

CVE-2017-0701

CVE-2017-0701 is a remote code execution vulnerability in the Android System UI affecting Android 7.1.1 and 7.1.2. The issue is described as a System UI RCE; exploitation would allow a remote attacker to run code, with the Android bulletin noting security patch levels of 2017-07-01 and 2017-07-05...

CVE-2017-0766

CVE-2017-0766 is described as a remote code execution vulnerability in Android's media framework (libjhead), affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The CVSS3 vector suggests a Local attack vector with User Interaction required, though the CVE descriptio...

CVE-2017-0772

CVE-2017-0772 is a DoS in Android's media framework libavc affecting Android 6.0–8.0. The NVD entry lists: vulnerable component libavc in Android; affected versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0; impact is Denial of Service with a CVSS v3.0 vector of AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H (base...

CVE-2017-0810

CVE-2017-0810 describes a remote code execution vulnerability in Android’s media framework (libmpeg2). Affected products/versions include Android 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0. The root cause is a flaw in the libmpeg2 component within the Android Media framework that could allow arbitrar...

CVE-2017-0818

The CVE-2017-0818 entry concerns the Android Media Framework vulnerability affecting Android 7.0, 7.1.1, 7.1.2 and 8.0. The issue is described as a vulnerability in the Android media framework (component: Media Framework) with no explicit root-cause details in the provided docs. CVSSv3 base score...

CVE-2017-0827

CVE-2017-0827 is an Elevation of Privilege vulnerability in the MediaTek SoC driver within the Android kernel. Affects Android devices with MediaTek SoC driver stack; root cause is a flaw in the SoC driver that could allow a local attacker to execute arbitrary code within a privileged process con...

CVE-2017-0831

CVE-2017-0831 is an elevation of privilege vulnerability in the Android framework (window manager) affecting Android 8.0. The NVD entry lists a local-privilege escalation risk with user interaction required and exploitation possible within the window manager context, rated HIGH (CVSS v3: LOCAL, U...

CVE-2017-0846

CVE-2017-0846 is an information-disclosure vulnerability in the Android framework component clipboardservice. Affected Android versions include 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0. The Pixel/Nexus bulletin indicates a security patch level of 2018-01-05 (AOSP updates) addresses this issu...

CVE-2017-0858

CVE-2017-0858 is a DoS vulnerability in the Android media framework affecting Pixel/Nexus devices. The Pixel security bulletin groups the issue under Media framework with NSI classification and lists affected AOSP versions 7.0, 7.1.1, 7.1.2, and 8.0. The vulnerability is described as part of a br...

CVE-2017-10999

CVE-2017-10999 concerns the Qualcomm IPA (IP Multimedia Architecture) driver in Android CAF builds on the Linux kernel. The issue arises when concurrent calls into RMNET_IOCTL_ADD_MUX_CHANNEL in the IPA WAN driver may lead to memory corruption due to missing synchronization locks. The vulnerabili...

CVE-2017-11000

CVE-2017-11000 affects Qualcomm components: specifically the Camera driver within Android CAF builds using the Linux kernel ISP Camera driver function. The root cause is an incorrect bounds check that may lead to an out-of-bounds write, described as an Elevation of Privilege (EoP) issue in the Qu...

CVE-2017-11041

CVE-2017-11041 affects Qualcomm LibOmxVenc in Android CAF/Linux-kernel builds. The issue is listed as a remote-code-execution vulnerability (RCE) with Critical severity, arising from a buffer-management flaw that could allow exploitation via a specially crafted file. Android security bulletins fl...

CVE-2017-11092

CVE-2017-11092 is an Android/AAF (KGSL) vulnerability in the Qualcomm graphics driver: the kgsl_ioctl_gpu_command path can trigger a Use After Free condition in the KGSL kernel driver on Android for MSM, Firefox OS for MSM, and QRD Android builds with CAF Linux kernels. The description notes a Us...

CVE-2017-13245

CVE-2017-13245 is an Elevation of Privilege vulnerability in the Android Upstream kernel audio driver (kernel component). The Android Pixel/Nexus bulletin and CVE records identify the issue as a local EoP in the Audio driver within the Android kernel, with patched AOSP versions referenced (patch ...

CVE-2017-13269

CVE-2017-13269 is an Android information-disclosure flaw in Bluetooth affecting Android 5.1.1–8.1 (Android IDs A-68818034). The Pixel/Nexus bulletin classifies it as ID-type with Moderate severity and partial confidentiality impact. The issue is addressed in the March 2018 Android bulletin; apply...

CVE-2017-13313

A denial of service vulnerability exists in the Media framework of Google Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1 . The root cause is an incorrect bounds check in the ElementaryStreamQueue::dequeueAccessUnitMPEG4Video function of ESQueue.cpp, which can trigger an infinite loo...

CVE-2017-18692

CVE-2017-18692 affects Samsung mobile devices running M (6.0) and N (7.0) on certain chipsets (MSM8939, MSM8996, MSM8998, Exynos7580, Exynos8890, Exynos8895). The vulnerability is a race condition in the sec_ts touchscreen sysfs interface that can lead to a buffer overflow. Affected component: se...

CVE-2017-3750

On Lenovo VIBE phones, the Lenovo Security Android app allows private data to be backed up and restored via Android Debug Bridge, enabling tampering that leads to privilege escalation when exploited with CVE-2017-3748 and CVE-2017-3749. The root cause is described as improper access controls on t...

CVE-2017-6296

NVIDIA CVE-2017-6296 affects the TrustZone DRM application in NVIDIA SHIELD TV. The issue is a TOCTOU vulnerability that may lead to denial of service or privilege escalation. Public details identify SHIELD TV SE 6.2 and earlier as affected; NVIDIA’s bulletin indicates updating to SE 6.3 to mitig...

CVE-2017-7369

CVE-2017-7369 affects Android CAF builds using the Linux kernel. The vulnerability stems from an array index in an ALSA routine not properly validating input, which can potentially lead to kernel stack corruption. Public details in the provided documents describe the root cause and impact but do ...

CVE-2017-8236

CVE-2017-8236 is a buffer overflow vulnerability in an IPA driver present in CAF Android builds using the Linux kernel. Affected component: IPA driver; Root cause: buffer overflow. Potential impact per CVSS3 metrics is HIGH for confidentiality, integrity, and availability, with LOCAL exploitabili...