CVE-2017-0398

CVE-2017-0398 is an information-disclosure vulnerability in Android’s Audioserver. According to the sources, it could allow a local malicious application to access data outside of its permission levels. Affected products/versions are Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, with Andro...

CVE-2015-1474

CVE-2015-1474 affects Android up to version 5.0, specifically the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp. The vulnerability arises from multiple integer overflows that can be triggered by inputs with a large number of file descriptors or large in...

CVE-2015-3844

The CVE-2015-3844 entry concerns Android’s ActivityManagerService.getProcessRecordLocked() before 5.1.1 (LMY48I). The issue arises when the method does not verify that an application’s process name matches its package name, which can lead ActivityManager to load the wrong process for certain task...

CVE-2015-3865

CVE-2015-3865 : Elevation of privilege in the Android Runtime (ART) before 5.1.1 LMY48T allows a crafted application to gain Signature or SignatureOrSystem privileges, as described in the NVD entry. The root cause is an ART elevation-of-privilege flaw enabling local code execution within an eleva...

CVE-2015-3868

CVE-2015-3868 affects libstagefright in Android devices running versions before 5.1.1 LMY48T. A crafted media file could cause memory corruption in the mediaserver process, enabling remote code execution or a denial of service. The Android October 2015 security bulletin notes this family of RCE/m...

CVE-2015-3870

CVE-2015-3870 affects Android’s libstagefright prior to 5.1.1 LMY48T. In these builds, processing a specially crafted media file could allow a remote attacker to execute arbitrary code or cause a denial of service via memory corruption in the mediaserver. The vulnerability stems from libstagefrig...

CVE-2015-6622

The CVE-2015-6622 issue affects the Android Native Frameworks Library in Android versions before 5.1.1 LMY48Z and 6.0 before 2015-12-01. It is described as an information-disclosure vulnerability that could allow attackers to obtain sensitive information and bypass certain protections, demonstrat...

CVE-2015-6640

The CVE-2015-6640 issue affects Android kernels prior to 5.1.1 (LMY49F) and 6.0 prior to 2016-01-01. It concerns the prctl_set_vma_anon_name function in kernel/sys.c, which does not ensure that only a single vma is accessed during a specific update action. Consequence: local privilege escalation ...

CVE-2015-6642

CVE-2015-6642 is an information-disclosure vulnerability in the Android kernel that could allow a local attacker to obtain sensitive data and bypass a protection mechanism. Affected platforms include Android kernels prior to 5.1.1 LMY49F and before 2016-01-01 on 6.0. The primary impact is leakage...

CVE-2015-8072

CVE-2015-8072 describes a media server (mediaserver) remote code execution/memory corruption vulnerability in Android 4.4 through 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01, exploitable via a crafted media file. The issue is cited across multiple sources (NVD/CNVD entries and related CVEs)...

CVE-2015-9020

Technical details about CVE-2015-9020 are not publicly available in the provided documents. Monitor for updates as new information becomes available.

CVE-2015-9033

CVE-2015-9033 is an Android CAF/Linux kernel issue where a QTEE system call fails to validate a pointer. Reported as a local vulnerability with high impact (confidentiality, integrity, availability) and requiring user interaction. Public references describe the root cause as pointer validation fa...

CVE-2016-0816

The CVE-2016-0816 issue affects mediaserver on Android 6.x (before March 1, 2016). The vulnerability allows remote code execution or memory corruption via a crafted media file, related to decoder/ih264d_parse_islice.c and decoder/ih264d_parse_pslice.c (internal bug 25928803). Affects the Mediaser...

CVE-2016-0826

CVE-2016-0826 affects libcameraservice in mediaserver on Android 4.x (before 4.4.4), 5.x (before 5.1.1 LMY49H), and 6.x (before 2016-03-01). The issue is that the camera service dump path does not require use of ICameraService::dump, allowing a crafted application to dump data directly and obtain...

CVE-2016-10339

CVE-2016-10339 affects CAF Android builds using the Linux kernel. The issue allows HLOS to overwrite secure memory or read the keystore contents. Details across sources indicate the vulnerability impacts Android devices in CAF releases and were addressed in the 2017 Android security patches (June...

CVE-2016-11042

CVE-2016-11042 affects Samsung mobile devices running L (5.0/5.1) and M (6.0), describing a SIM lock bypass. The connected documents reiterate only that a SIM lock bypass exists (SVE-2016-5381) but do not provide technical details about the affected component, root cause, exploitability, or concr...

CVE-2016-2409

Summary: CVE-2016-2409 affects a Texas Instruments haptic kernel driver used in Android 6.x. The vulnerability enables a local attacker to gain privileges in the kernel by exploiting a crafted application that targets a service which can call the TI haptic driver. This is described as an elevatio...

CVE-2016-2417

CVE-2016-2417 affects mediaserver’s mediaserver component (frameworks/av/media/libmedia/IOMX.cpp) on Android 4.x–6.x where a parameter data structure is not initialized, enabling information disclosure from process memory and potentially bypassing a protection mechanism. This is demonstrated via ...

CVE-2016-2459

CVE-2016-2459 affects mediaserver in Android 4.x up to 4.4.3, 5.0.x up to 5.0.1/2, 5.1.x up to 5.1.0/1, and 6.x prior to 2016-05-01. The root cause is that certain data structures are not initialized, enabling an attacker to disclose sensitive information via a crafted application. The vulnerabil...

CVE-2016-2473

CVE-2016-2473 describes a privilege-escalation vulnerability in the Qualcomm Wi‑Fi driver used by the Android stack on the Nexus 7 (2013) . The issue exists in Android builds prior to the 2016-06-01 patch level and can be triggered by a crafted application , enabling an attacker to gain elevated ...

CVE-2016-2482

CVE-2016-2482 affects the mm-video-v4l2 vdec component in Android Mediaserver, where a faulty handling of a buffer count in versions prior to 4.4.4 (and 5.x/6.x ranges listed) enables a local attacker to gain privileges (Signature or SignatureOrSystem) via a crafted application. The issue is an e...

CVE-2016-3751

CVE-2016-3751 is a libpng vulnerability (plibpng before 1.6.20) described as allowing attackers to gain privileges via a crafted application (Signature or SignatureOrSystem access). The connected documents show this CVE referenced in Photon OS security advisories PHSA-2023-3.0-0602, PHSA-2023-5.0...

CVE-2016-3764

CVE-2016-3764 affects Android Mediaserver: media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver is vulnerable. A crafted application can cause information disclosure by obtaining sensitive pointer information. Affected Android versions include 4.x before 4.4.4, 5.0.x before 5.0....

CVE-2016-3775

The vulnerability CVE-2016-3775 concerns the Android kernel file system. A local, privilege-escalation flaw exists in the kernel file system on Nexus 5X, Nexus 6P, Nexus 6, Nexus Player, and Pixel C devices running affected Android versions prior to 2016-07-05, allowing a crafted application to g...

CVE-2016-3810

The CVE-2016-3810 issue affects the MediaTek Wi‑Fi driver on Android One devices. The vulnerability is an information‑disclosure flaw in the MediaTek Wi‑Fi driver exposed when processing a crafted application, linked to Android bug 28175522 and MediaTek ALPS02694389. Impact: a local attacker coul...

CVE-2016-3819

CVE-2016-3819 involves an integer overflow in codecs/on2/h264dec/source/h264bsd_dpb.c within libstagefright/Mediaserver on Android. A crafted media file can trigger memory corruption, enabling remote code execution or a denial of service. Affected Android lineages include 4.x before 4.4.4, 5.0.x ...

CVE-2016-3820

The CVE-2016-3820 issue affects the ih264d decoder in Mediaserver (Android 6.x). The root cause is the decoder mishandling slice numbers, enabling a remote attacker to craft a media file that could trigger arbitrary code execution or memory corruption within Mediaserver. Public details confirm im...

CVE-2016-3938

CVE-2016-3938 affects the Qualcomm video driver (drivers/video/msm/mdss/mdss_mdp_overlay.c) on several Android devices (Nexus 5X, Nexus 6, Nexus 6P, and Android One) with Android versions older than 2016-10-05. The vulnerability allows a locally installed application to escalate privileges due to...

CVE-2016-5863

Technical details about CVE-2016-5863 are not provided in the supplied documents. Public references exist (NVD, Ubuntu, SUSE, Tenable, ENISA) but no vendor/product/version/patch info is included here. Monitor for updates.

CVE-2016-6675

This CVE (CVE-2016-6675) is a buffer/size difference (off-by-one) vulnerability in the Qualcomm Wi‑Fi driver’s CORE/HDD wlan_hdd_hostapd.c. Affected devices include Android on Nexus 5X and Android One, with exploitation via a crafted application that invokes the linkspeed ioctl, enabling local pr...

CVE-2016-8420

The CVE-2016-8420 entry describes an elevation-of-privilege vulnerability in the Qualcomm Wi‑Fi driver for Android kernels (Kernel-3.10 and Kernel-3.18). A local malicious application could execute arbitrary code in kernel context after compromising a privileged process. The description lists And...

CVE-2016-8421

CVE-2016-8421 is an elevation-of-privilege vulnerability in the Qualcomm Wi‑Fi driver on Android. A local malicious app could execute arbitrary code in the kernel context by exploiting this driver vulnerability. Affected components/versions noted in provided docs include the Qualcomm Wi‑Fi driver...

CVE-2016-8476

CVE-2016-8476 is an elevation-of-privilege vulnerability in the Qualcomm Wi‑Fi driver for Android, allowing a local malicious application to execute code in the kernel once a privileged process is compromised. The issue affects Android kernel versions 3.10 and 3.18; Android ID A-32879283. The NVD...

CVE-2017-0402

CVE-2017-0402 describes an information disclosure vulnerability in Audioserver (libeffects, path lvm/wrapper/Bundle/EffectBundle.cpp) that could allow a local malicious Android app to access data outside its permission levels. Affected products/versions include Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6...

CVE-2017-0476

CVE-2017-0476 : A remote code execution vulnerability in AOSP Messaging causing memory corruption during media/file processing via a specially crafted file. Affected: Android 6.0, 6.0.1, 7.0, 7.1.1 (Android ID A-33388925). Impact: remote code execution within an unprivileged context. Source notes...

CVE-2017-0481

CVE-2017-0481 is an elevation-of-privilege vulnerability in Android’s NFC component. The description specifies it could allow a proximate attacker to execute arbitrary code in a privileged process, with affected Android versions including 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The conne...

CVE-2017-0485

CVE-2017-0485 is a denial-of-service in Android’s Mediaserver. A specially crafted file can cause a device hang or reboot. Affected products/versions are Android 6.0, 6.0.1, 7.0, and 7.1.1. The issue arises from how Mediaserver processes media/file data, per public CVE summaries and the 2017-03 A...

CVE-2017-0495

CVE-2017-0495 is an information-disclosure vulnerability in Android Mediaserver that could allow a local malicious app to access data beyond its permission levels. Affected: Android 6.0–7.1.1. Impact: partial confidentiality breach; no exploitation details or patches are provided in the documents.

CVE-2017-0554

CVE-2017-0554 is an elevation-of-privilege issue in the Android Telephony component that could let a local malicious app access capabilities outside its permissions. Affected Android versions are 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The connected documents confirm this is a local priv...

CVE-2017-0556

CVE-2017-0556 is an information-disclosure vulnerability in libmpeg2 used by Mediaserver on Android (versions 6.0–7.1.1). The root cause is data exposure due to Mediaserver’s handling of media data via libmpeg2, enabling a local attacker to access data outside its permissions. Impact is confident...

CVE-2017-0562

CVE-2017-0562 is an elevation of privilege vulnerability in the MediaTek touchscreen driver affecting Android. The issue could allow a local malicious app to execute arbitrary code in the kernel context, potentially leading to permanent device compromise that may require a reflashed OS. Connected...

CVE-2017-0587

CVE-2017-0587 describes a remote code execution vulnerability in the Android Mediaserver component, specifically in libmpeg2 used during media file and data processing. The underlying issue is memory corruption triggered by processing specially crafted media files, allowing an attacker to execute...

CVE-2017-0590

CVE-2017-0590 describes a remote code execution in the Mediaserver component of Android via a crafted media file that triggers memory corruption in the libhevc path. Affected products/versions include Android releases 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The vulnerability stems from a...

CVE-2017-0596

CVE-2017-0596 is an Android Mediaserver (libstagefright) elevation-of-privilege vulnerability. The issue could allow a local malicious app to execute code with the privileges of Mediaserver. Affected products/versions listed in sources include Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1...

CVE-2017-0615

CVE-2017-0615 is an elevation-of-privilege vulnerability in the MediaTek power driver on Android that could allow a local malicious application to execute arbitrary code in the kernel context after compromising a privileged process. The entry notes the issue is high severity and that patches are ...

CVE-2017-0712

CVE-2017-0712 is an elevation of privilege in the Android framework wi-fi service. Affects Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. The vulnerability is linked to the Framework wi-fi service and could allow a local attacker to gain elevated privileges. The issue is addressed ...

CVE-2017-0790

CVE-2017-0790 is a local elevation-of-privilege vulnerability in the Broadcom Wi‑Fi driver used by Android kernel. The issue is categorized as EoP and is located in the Broadcom Wi‑Fi driver component; the Android bulletin lists CVE-2017-0790 under Broadcom components with a Moderate Android bug ...

CVE-2017-0816

CVE-2017-0816 is an information-disclosure vulnerability in Android’s media framework (libeffects). Affected products: Android releases listed in the CVE entry (4.4.4–8.0). The root cause is described as a vulnerability within the media framework that can disclose sensitive information. Public re...

CVE-2017-0823

CVE-2017-0823 is an information-disclosure vulnerability in Android’s radio interface layer (rild). Affected: Android (versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2). Root cause: information disclosure in rild (no technical details provided). Impact: potential partial disclosure of ...

CVE-2017-0833

CVE-2017-0833 is a remote code execution vulnerability in Android’s media framework (libavc) affecting Android devices running versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0 (Android ID: A-62896384). The initial descriptions consistently identify the issue as a media framework RCE, with no publi...