CVE-2016-3793

CVE-2016-3793 affects the NVIDIA camera driver (NVIDIA Tegra/Kernel driver) on Android, where a race condition use-after-free in the camera kernel path could allow a local attacker to gain privileges via a crafted app on affected Nexus devices (e.g., Nexus 9). The issue is described as a race con...

CVE-2016-3809

CVE-2016-3809 is an information-disclosure vulnerability in Android’s networking component. The iovy/iovy_pxn2 flows describe using CVE-2016-3809 to leak the kernel address of a sock structure, enabling subsequent steps to corrupt kernel data and escalate privileges. Affected devices include Andr...

CVE-2016-3819

CVE-2016-3819 involves an integer overflow in codecs/on2/h264dec/source/h264bsd_dpb.c within libstagefright/Mediaserver on Android. A crafted media file can trigger memory corruption, enabling remote code execution or a denial of service. Affected Android lineages include 4.x before 4.4.4, 5.0.x ...

CVE-2016-3938

CVE-2016-3938 affects the Qualcomm video driver (drivers/video/msm/mdss/mdss_mdp_overlay.c) on several Android devices (Nexus 5X, Nexus 6, Nexus 6P, and Android One) with Android versions older than 2016-10-05. The vulnerability allows a locally installed application to escalate privileges due to...

CVE-2016-6750

CVE-2016-6750 denotes an information-disclosure vulnerability in Qualcomm components used by Android—specifically the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver. The issue could allow a local malicious app to access data outside its permission levels, but only after co...

CVE-2016-6771

CVE-2016-6771 = Elevation of privilege in Android Telephony. A local malicious application could bypass restrictions in a constrained Telephony process and gain access to system functions beyond its granted level. Affected products/versions identified in the entry: Android 6.0, 6.0.1, and 7.0 (An...

CVE-2016-8419

CVE-2016-8419 is a local elevation-of-privilege vulnerability in the Qualcomm Wi‑Fi driver affecting Android. The issue could allow a local malicious application to execute arbitrary code in the kernel context by exploiting the Qualcomm Wi‑Fi driver. Affected components/files are tied to the Andr...

CVE-2016-8476

CVE-2016-8476 is an elevation-of-privilege vulnerability in the Qualcomm Wi‑Fi driver for Android, allowing a local malicious application to execute code in the kernel once a privileged process is compromised. The issue affects Android kernel versions 3.10 and 3.18; Android ID A-32879283. The NVD...

CVE-2017-0385

CVE-2017-0385 is an elevation-of-privilege vulnerability in Android’s Audioserver that could allow a local attacker to execute arbitrary code in the context of a privileged process. The issue affects Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The connected documents confirm...

CVE-2017-0402

CVE-2017-0402 describes an information disclosure vulnerability in Audioserver (libeffects, path lvm/wrapper/Bundle/EffectBundle.cpp) that could allow a local malicious Android app to access data outside its permission levels. Affected products/versions include Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6...

CVE-2017-0409

CVE-2017-0409 is a remote code execution vulnerability in Android’s libstagefright. The connected documents confirm the affected component (libstagefright) and that exploitation involves processing a specially crafted file to run code in the context of an unprivileged process, with Android versio...

CVE-2017-0441

CVE-2017-0441 is a Qualcomm Wi‑Fi driver elevation-of-privilege vulnerability affecting Android kernels (Kernel-3.10, Kernel-3.18). The connected documents describe a local attacker could run a malicious application to execute arbitrary code in the kernel context, after compromising a privileged ...

CVE-2017-0469

CVE-2017-0469 (Mediaserver, Android) : A remote code execution vulnerability arises from memory corruption during media file/data processing in Mediaserver. A crafted file can trigger the issue, potentially allowing code execution within the Mediaserver process. Affected product/versions: Android...

CVE-2017-0481

CVE-2017-0481 is an elevation-of-privilege vulnerability in Android’s NFC component. The description specifies it could allow a proximate attacker to execute arbitrary code in a privileged process, with affected Android versions including 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The conne...

CVE-2017-0488

The CVE-2017-0488 issue is a denial-of-service vulnerability in Android's Mediaserver. A specially crafted media file could cause a device hang or reboot. Affected Android versions are 6.0, 6.0.1, 7.0, and 7.1.1 (Android ID A-34097213). The vulnerability is documented in public advisories and is ...

CVE-2017-0532

CVE-2017-0532 describes an information-disclosure vulnerability in the MediaTek video codec driver that could allow a local malicious Android app to access data outside its permission levels. The issue is considered moderate because exploitation requires compromising a privileged process. The rec...

CVE-2017-0556

CVE-2017-0556 is an information-disclosure vulnerability in libmpeg2 used by Mediaserver on Android (versions 6.0–7.1.1). The root cause is data exposure due to Mediaserver’s handling of media data via libmpeg2, enabling a local attacker to access data outside its permissions. Impact is confident...

CVE-2017-0619

The CVE-2017-0619 entry describes an elevation-of-privilege vulnerability in the Qualcomm pin controller driver on Android kernels (Kernel-3.10). A local malicious app could execute arbitrary code in the kernel context. The CVSS indicates LOCAL access with HIGH impact on confidentiality, integrit...

CVE-2017-0639

CVE-2017-0639 is an information-disclosure vulnerability within Android’s Bluetooth component. The issue could allow a local malicious application to access data outside its permissions, effectively bypassing OS data isolation. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7....

CVE-2017-0645

CVE-2017-0645 describes an elevation-of-privilege vulnerability in Android’s Bluetooth stack. A local malicious application could access data outside its permission levels. Affected products/versions: Android 6.0.1, 7.0, 7.1.1, 7.1.2. Root cause: Bluetooth exposure allowing unauthorized data acce...

CVE-2017-0693

CVE-2017-0693 refers to a DoS vulnerability in the Android media framework. Affected products/versions are Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The CNVD entry describes a denial-of-service condition in the Android media framework that an attacker could trigger remotely to cause a DoS. Publi...

CVE-2017-0799

CVE-2017-0799 is a MediaTek-related elevation-of-privilege vulnerability affecting the MediaTek lastbus within the Android kernel. The issue is described as an EoP in the lastbus component, enabling a local attacker to potentially gain higher privileges. The vulnerability is associated with Media...

CVE-2017-0817

CVE-2017-0817 is an information-disclosure vulnerability in the Android media framework (libstagefright). Affected products/versions, per sources, include Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0 (Android ID A-63522430). The NVD CVSS data indicate a network-exposed issu...

CVE-2017-0823

CVE-2017-0823 is an information-disclosure vulnerability in Android’s radio interface layer (rild). Affected: Android (versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2). Root cause: information disclosure in rild (no technical details provided). Impact: potential partial disclosure of ...

CVE-2017-0826

CVE-2017-0826 is an Elevation of Privilege in the HTC bootloader affecting Android kernel on HTC devices. The vulnerability is described as an EoP in the bootloader, enabling privilege escalation within the Android stack. The primary documented impact is local privilege elevation, with CVSS indic...

CVE-2017-0831

CVE-2017-0831 is an elevation of privilege vulnerability in the Android framework (window manager) affecting Android 8.0. The NVD entry lists a local-privilege escalation risk with user interaction required and exploitation possible within the window manager context, rated HIGH (CVSS v3: LOCAL, U...

CVE-2017-0837

CVE-2017-0837 is an elevation of privilege vulnerability in Android’s media framework (libaudiopolicymanager). Affected: Android 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Root cause is an elevation of privilege in the Media framework as noted by the Android Security Bulletin (Media framework sec...

CVE-2017-0860

CVE-2017-0860 is an elevation-of-privilege vulnerability in Android’s inputdispatcher subsystem (Android System). Affected versions include 5.0.2, 5.1.1, 6.0/6.0.1, 7.0, 7.1.1, and 7.1.2. The root cause is described as an inputdispatcher-related elevation of privilege, allowing an attacker to gai...

CVE-2017-0880

CVE-2017-0880 is a DoS vulnerability in the Android media framework (libskia) affecting Android 7.0, 7.1.1, and 7.1.2. The issue is documented in multiple sources (NVD/NVD-family and CVE listings) with the Android 2017-12-01/2017-12-05 patch levels addressing these vulnerabilities. The connected ...

CVE-2017-11000

CVE-2017-11000 affects Qualcomm components: specifically the Camera driver within Android CAF builds using the Linux kernel ISP Camera driver function. The root cause is an incorrect bounds check that may lead to an out-of-bounds write, described as an Elevation of Privilege (EoP) issue in the Qu...

CVE-2017-11028

CVE-2017-11028 affects the Android MSM ISP Camera driver; the vulnerability allows leakage of contents from an arbitrary kernel address to userspace via msm_isp_get_stream_common_data(). Connected sources confirm this is an information-disclosure issue in the Camera subsystem within Android/Linux...

CVE-2017-11033

Technical details about CVE-2017-11033 (affected components, root cause, exploitability, and fixes) are not publicly provided in the connected documents. Monitor for updates.

CVE-2017-11053

CVE-2017-11053 affects Android for MSM, Firefox OS for MSM, and QRD Android on CAF Linux-kernel builds. When a qos map set IE with length

CVE-2017-13162

CVE-2017-13162 is an elevation-of-privilege vulnerability in the Android kernel binder (Binder IPC). The issue is a local exploit affecting the Android kernel components that implement Binder, allowing a non-privileged (local) attacker to escalate privileges with a high impact on confidentiality,...

CVE-2017-13190

CVE-2017-13190 is a vulnerability in the Android media framework (libhevc) related to ps_codec_obj memory allocation failures. The affected software is Android (Media framework/libhevc) on versions 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. The documented impact is denial of service (availability impact = ...

CVE-2017-13228

CVE-2017-13228 affects Android (versions 6.0–8.1) via an out-of-bounds write in libavc ih264d_ref_idx_reordering caused by modCount defined as an unsigned char. This can lead to remote code execution with user interaction; CVSS indicates HIGH impact. Patches are described in the Android Security ...

CVE-2017-13263

CVE-2017-13263 affects the Android framework (Android 8.0 and 8.1). The incident is classified as an Elevation of Privilege (EoP) in the framework; no specific root-cause technical details are provided in the documents. The accessible sources identify it under the Framework category with a Modera...

CVE-2017-13308

The CVE-2017-13308 entry describes a buffer overflow in an sscanf call within the Mediatek MTK TS Abts code path (tscpu_write_GPIO_out and mtkts_Abts_write in mtk_ts_Abts.c) caused by improper input validation. This could enable local privilege escalation with System execution privileges; exploit...

CVE-2017-14896

The CVE affects Android devices using Qualcomm GUD mobicore driver (Android for MSM/CAF builds) where a memory allocation occurs without validating length, causing an undersized buffer and potential kernel memory overwrite. Root cause: missing length-field validation in the mobicore driver. Impac...

CVE-2017-18667

CVE-2017-18667 affects Samsung mobile devices running KK (4.4), L (5.0/5.1), M (6.0), and N (7.x). The issue allows attackers to prevent users from learning that SMS storage space has been exhausted (Samsung ID SVE-2017-8702). The connected sources do not provide concrete exploitation vectors, im...

CVE-2017-18690

CVE-2017-18690 involves a buffer overflow in the sensor hub of certain Samsung mobile devices. Affected platforms include KK (4.4), L (5.0/5.1), M (6.0), and N (7.0) with Exynos54xx, Exynos7420, Exynos8890, or Exynos8895 chipsets. The available public description notes a sensor-hub buffer overflo...

CVE-2017-3750

On Lenovo VIBE phones, the Lenovo Security Android app allows private data to be backed up and restored via Android Debug Bridge, enabling tampering that leads to privilege escalation when exploited with CVE-2017-3748 and CVE-2017-3749. The root cause is described as improper access controls on t...

CVE-2017-6295

Affected software/hardware: NVIDIA TrustZone Software (Keymaster) in NVIDIA SHIELD TV SE 6.2 and earlier. Vulnerability: reads data past the end or before the beginning of the intended buffer, potentially leading to denial of service or information disclosure. Impact/Severity: rated high (CVE-201...

CVE-2017-8270

Technical details about CVE-2017-8270 are not publicly provided in the connected documents. The available sources only reiterate a race condition in Qualcomm CAF/Linux kernel driver; monitor for updates and disclosures.

CVE-2017-9693

CVE-2017-9693 describes a local vulnerability in Android for MSM, Firefox OS for MSM, and QRD Android where the length of the STA_EXT_CAPABILITY attribute value is shorter than StaParams.extn_capability, causing a memcpy from params->ext_capab to StaParams.extn_capability to read extra bytes. ...

CVE-2017-9698

CVE-2017-9698 relates to Android for MSM, Firefox OS for MSM, and QRD Android builds based on CAF Linux kernels. The vulnerability stems from improperly specified offset/size values for a submission command, which can trigger a math operation overflow and lead to access to arbitrary memory. The c...

CVE-2018-12006

The CVE-2018-12006 entry applies to CAF Android releases (Android for MSM, Firefox OS for MSM, QRD Android) that use the Linux kernel. Root cause: uninitialized padding in a display function. Impact: local attackers with no privileges may access leaked data (information disclosure). Exploitation ...

CVE-2018-9524

CVE-2018-9524 affects Android System UI where protections around overlay windows are insufficient, enabling local elevation of privilege. Affects Android 7.0–8.1; exploitation requires user interaction. The issue is documented in public CVE records (NVD/NVD 2018-9524) and is addressed in the Andr...

CVE-2019-20580

This CVE concerns Samsung mobile devices running P(9.0). The Motion photo player is able to bypass the Secure Folder feature to view images, constituting an information disclosure vulnerability. Affected software/hardware: Samsung mobile devices with P(9.0). Vulnerable component: Motion photo pla...

CVE-2019-20770

CVE-2019-20770 affects LG mobile devices running Android 9.0. The HAL service contains a buffer overflow that leads to arbitrary code execution. Sources in connected documents (Red Hat and NVD entries) confirm the description and LG’s internal ID LVE-SMP-190013 (Sept 2019). No further exploit det...