CVE-2017-0860

CVE-2017-0860 is an elevation-of-privilege vulnerability in Android’s inputdispatcher subsystem (Android System). Affected versions include 5.0.2, 5.1.1, 6.0/6.0.1, 7.0, 7.1.1, and 7.1.2. The root cause is described as an inputdispatcher-related elevation of privilege, allowing an attacker to gai...

CVE-2017-0876

CVE-2017-0876 is a remote code execution vulnerability in Android’s media framework (libavc) affecting Android 6.0. The Android bulletin groups it under the Media framework RCE family (CVE-2017-0872/0876/0877/0878/13151) and notes that security patches at 2017-12-01 or newer (and 2017-12-05 for s...

CVE-2017-11000

CVE-2017-11000 affects Qualcomm components: specifically the Camera driver within Android CAF builds using the Linux kernel ISP Camera driver function. The root cause is an incorrect bounds check that may lead to an out-of-bounds write, described as an Elevation of Privilege (EoP) issue in the Qu...

CVE-2017-11073

CVE-2017-11073 is a Qualcomm Networking subsystem vulnerability affecting Android on MSM/CAF/Linux kernel builds. The qcacld pktlog allows a local attacker to map memory to user space via /proc/ath_pktlog/cld, enabling potentially exposure or modification of memory. Public details specify LOCAL a...

CVE-2017-13162

CVE-2017-13162 is an elevation-of-privilege vulnerability in the Android kernel binder (Binder IPC). The issue is a local exploit affecting the Android kernel components that implement Binder, allowing a non-privileged (local) attacker to escalate privileges with a high impact on confidentiality,...

CVE-2017-13245

CVE-2017-13245 is an Elevation of Privilege vulnerability in the Android Upstream kernel audio driver (kernel component). The Android Pixel/Nexus bulletin and CVE records identify the issue as a local EoP in the Audio driver within the Android kernel, with patched AOSP versions referenced (patch ...

CVE-2017-13279

CVE-2017-13279 affects Android’s M3UParser parsing path (M3UParser.cpp). The issue is a memory resource exhaustion caused by a large loop that pushes items into a vector, leading to remote denial of service. Impacted Android versions include 6.0–8.1. Exploitation requires user interaction, and th...

CVE-2017-14896

The CVE affects Android devices using Qualcomm GUD mobicore driver (Android for MSM/CAF builds) where a memory allocation occurs without validating length, causing an undersized buffer and potential kernel memory overwrite. Root cause: missing length-field validation in the mobicore driver. Impac...

CVE-2017-18650

The CVE-2017-18650 entry affects Samsung mobile devices running N(7.x) software. The issue is triggered when reading a malformed wpa_supplicant.conf, causing the WifiStateMachine to throw an IllegalArgumentException and the device to reboot. Samsung’s internal tracking references SVE-2017-9828 (O...

CVE-2017-18652

CVE-2017-18652 affects Samsung mobile devices running M(6.0) and N(7.x). The issue is that SVoice can be exploited to execute arbitrary code by manipulating dynamic libraries, enabling code execution with the privileges of the compromised process. The vulnerability is tied to the SVoice component...

CVE-2017-18667

CVE-2017-18667 affects Samsung mobile devices running KK (4.4), L (5.0/5.1), M (6.0), and N (7.x). The issue allows attackers to prevent users from learning that SMS storage space has been exhausted (Samsung ID SVE-2017-8702). The connected sources do not provide concrete exploitation vectors, im...

CVE-2017-18692

CVE-2017-18692 affects Samsung mobile devices running M (6.0) and N (7.0) on certain chipsets (MSM8939, MSM8996, MSM8998, Exynos7580, Exynos8890, Exynos8895). The vulnerability is a race condition in the sec_ts touchscreen sysfs interface that can lead to a buffer overflow. Affected component: se...

CVE-2017-8242

CVE-2017-8242 affects Android CAF releases that use the Linux kernel and involve the Secure Execution Environment (QTEE) driver. The issue is a race condition in the QTEE driver that can lead to an arbitrary memory write. The provided connected sources confirm the vulnerability description but do...

CVE-2017-8261

CVE-2017-8261 is a Qualcomm component issue affecting the Camera driver in CAF Android builds using the Linux kernel. The root cause is a potential kernel overwrite in a camera driver ioctl, enabling Elevation of Privilege rather than remote code execution. The vulnerability is classified as EoP ...

CVE-2017-9678

CVE-2017-9678 affects Qualcomm’s video driver in Android CAF builds on Linux kernel. The issue is memory corruption due to lack of bounds checking in memcpy(), enabling local exploitation with user interaction. CVSS v3.0 base score 7.8 (HIGH) with LOCAL exploit and HIGH impact on confidentiality,...

CVE-2017-9691

CVE-2017-9691 is a Qualcomm MobiCore (Trustonic) driver issue via a race condition in the debug message output path on Android devices (MSM, Firefox OS for MSM, QRD Android). The vulnerability allows access to already freed memory, exposing potential confidentiality impact. The connected document...

CVE-2018-13893

CVE-2018-13893 affects Android platforms built on CAF Linux kernels, with the root cause described as out-of-bounds access when copying masks to userspace due to using an old value of the msg mask table count. The CVSS3 vector (LOCAL, LOW CIA/IIA, HIGH impact) indicates local access is required a...

CVE-2018-21052

The CVE-2018-21052 entry concerns Samsung mobile devices running N(7.x) and O(8.X) with Exynos chipsets. The root cause is incorrect usage of shared memory in the vaultkeeper Trustlet, which can lead to arbitrary code execution. Affected component: vaultkeeper Trustlet; impact is arbitrary code e...

CVE-2018-21082

Affected product: Samsung mobile devices running N(7.x) with Dex Station. Issue: Dex Station enables App Pinning bypass and lock-screen bypass via the To unpin screen lock option. Root cause: bypass of app pinning/lock screen through the “Use screen lock type to unpin” flow. Impact: allows bypass...

CVE-2018-5842

CVE-2018-5842 describes a WLAN privilege/Arbitrary address write in Qualcomm WLAN on Android devices (CAF Android for MSM, Firefox OS for MSM, QRD Android) due to the WLAN firmware sending incorrect data to the WLAN driver. The root cause is a data handling flaw in the interaction between comprom...

CVE-2018-5846

CVE-2018-5846 affects the IPA driver in Android CAF (Android for MSM, Firefox OS for MSM, QRD Android) on Linux kernels. The issue is a Use-After-Free in the IPA driver that can occur when IPA IOCTLs IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_ADD/IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_DEL/IPA_IOC_NOTIFY_WAN_EM...

CVE-2018-9345

CVE-2018-9345 affects Android’s BnAudioPolicyService (AudioPolicyService.cpp). The issue is information disclosure due to uninitialized data, enabling local information disclosure with no extra privileges and no user interaction required. Multiple connected sources confirm the same description. P...

CVE-2018-9346

CVE-2018-9346 affects the Android AudioPolicyService component: In BnAudioPolicyService::onTransact there is information disclosure due to uninitialized data, enabling local information disclosure without additional privileges. Exploitation context: local access, no user interaction required. Aff...

CVE-2018-9361

CVE-2018-9361 describes an out-of-bounds read in process_l2cap_cmd of l2c_main.cc, leading to remote information disclosure without extra privileges and no user interaction. Multiple sources align on Android impact across versions 6.0–8.1. The vulnerability affects Bluetooth L2CAP handling; the u...

CVE-2018-9367

CVE-2018-9367 describes a potential out-of-bounds write in the MediaTek Cameratool CCAP component (function FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS within Meta_CCAP_Para.cpp). The underlying issue is improper input validation, which could enable local escalation of privilege with no additional exe...

CVE-2018-9501

CVE-2018-9501 describes a vulnerability in the Android SetupWizard that allows a Factory Reset Protection bypass via a permissions bypass, enabling local escalation of privilege with no additional execution privileges and no user interaction required. Affected Android versions include 7.0, 7.1.1,...

CVE-2018-9547

CVE-2018-9547 impacts Android 8.1 and 9, specifically the GraphicBuffer.cpp unflatten path. Description: a bad file descriptor close due to insufficient input validation could allow local escalation of privilege in the system server, with no user interaction required. The issue affects the Androi...

CVE-2018-9555

CVE-2018-9555 applies to Android Bluetooth, where the function l2c_lcc_proc_pdu in l2c_fcr.cc contains a missing bounds check causing an out-of-bounds write. This can enable remote escalation of privilege via Bluetooth with no user interaction, impacting Android 7.0–9 according to the CVE record....

CVE-2019-2001

CVE-2019-2001 affects the Android kernel iomem implementation. The issue is that the permissions on /proc/iomem were world-readable, enabling local information disclosure without any execution privileges or user interaction. The vulnerability is a local information disclosure (ID) with impact on ...

CVE-2019-2035

The CVE-2019-2035 issue affects Android and is caused by a missing bounds check in rw_i93_sm_update_ndef within rw_i93.cc, leading to an out-of-bounds write. The described impact is local elevation of privilege with user interaction required for exploitation, on Android versions 7.0–9 (Android ID...

CVE-2019-20534

CVE-2019-20534 affects Samsung mobile devices running Android P (9.0). The issue allows an attacker to view the home-screen wallpaper by adjusting the brightness on a locked screen. The description repeatedly mirrors Samsung’s SVE-2019-15540 identifier; Red Hat and CNVD/EUVD/CVE records corrobora...

CVE-2019-20611

The CVE-2019-20611 entry describes a baseband stack overflow in Samsung mobile devices with Exynos chips (N7.x, O8.x, Go8.1, P9.0, Go9.0) leading to arbitrary code execution. Root cause: a stack overflow in the baseband firmware; impact: potential full device compromise with high privileges. Publ...

CVE-2019-20776

Technical details (affected products, components, root cause, versions, or fixes) are not publicly available in the provided connected documents. Monitor for updates; current sources only reiterate a crash in TZ trusted apps on LG Android 7.x–8.1 with crafted input.

CVE-2019-20784

CVE-2019-20784 affects LG mobile devices running Android 7.0–8.1 (MTK chipset) where the interaction between GPS and 911 emergency calls is mishandled. The issue is described in multiple sources (NVD, Red Hat, CVE listing) as a GPS-related handling flaw during emergency calls, with LG’s internal ...

CVE-2019-2198

CVE-2019-2198 is a SQL injection vulnerability in Android’s Download Provider that can lead to local information disclosure without user interaction. Affected: Android 8.0–10 (Download Provider query selection parameter). Root cause: SQL injection in the Download Provider. Impact: local informati...

CVE-2019-2200

CVE-2019-2200 affects Android 10 where updatePermissions in PermissionManagerService.java could allow a malicious app to bypass a custom-permission check, enabling local privilege escalation with full confidentiality/ integrity/ availability impact as described. Root cause: permission bypass with...

CVE-2019-2208

CVE-2019-2208 affects Android components (Android 8.1 and 9) with a flaw in V8 JIT code during PromiseBuiltinsAssembler::NewPromiseCapability, causing an out-of-bounds read. This can lead to remote information disclosure without user interaction or privileges. The connected records confirm the is...

CVE-2019-9431

CVE-2019-9431 describes a Bluetooth vulnerability in Android 10: a use-after-free leads to an out-of-bounds read, enabling remote information disclosure. The issue can disclose heap information and requires no user interaction, with potential system-level privileges needed for impact per public r...

CVE-2020-0005

CVE-2020-0005 describes an out-of-bounds write in the Bluetooth stack (btm_read_remote_ext_features_complete in btm_acl.cc) that could enable local elevation of privilege to SYSTEM on Android 8.0–10. No user interaction is required. Public docs list Android versions affected as 8.0, 8.1, 9, and 1...

CVE-2020-0015

CVE-2020-0015 affects the Android framework via CertInstaller.java (onCreate), where an attacker could overlay the Certificate Installation dialog to escalate privileges locally without extra execution privileges. Impact is described as local EoP with partial confidentiality/integrity/availabilit...

CVE-2020-0064

CVE-2020-0064 is a MediaTek-specific issue (component: Omacp) documented in the Android May 2020 bulletin. It is classified as Information Disclosure (ID) with High severity and is linked to Android patch levels 2020-05-01 and later. The vulnerability arises from improper authorization when proce...

CVE-2020-0088

CVE-2020-0088 affects Android 10 and is caused by an issue in parseTrackFragmentRun within MPEG4Extractor.cpp that can lead to resource exhaustion and a remote Denial of Service. Exploitation requires user interaction. The description does not specify the exact vulnerable versions beyond Android-...

CVE-2020-0105

CVE-2020-0105 affects Android 9 and 10. It stems from a missing permission check in onKeyguardVisibilityChanged within key_store_service.cpp, enabling local privilege escalation to use keyguard-bound keys when the screen is locked, without extra execution privileges. CVSS data (NVD) shows LOCAL a...

CVE-2020-0369

CVE-2020-0369 affects libavb and is an out-of-bounds write caused by an integer overflow that can lead to local privilege escalation without user interaction. Exploitation details are not provided in the connected documents beyond the local-privilege-elevation impact for Android 11. Remediation i...

CVE-2020-0477

CVE-2020-0477 affects Android 11, describing an information disclosure in the Android framework. In ClientModeImpl.java, there is a missing permission check in sendLinkConfigurationChangedBroadcast that can allow local disclosure of the current network configuration without extra privileges or us...

CVE-2020-11873

CVE-2020-11873 affects LG mobile devices running Android OS 7.2, 8.0, 8.1, 9 and 10. The vulnerability is a stack-based overflow in the logging tool, causing privilege escalation. Root cause is a stack overflow in the logging component; impact is elevated privileges for an attacker without user i...

CVE-2020-12745

CVE-2020-12745 affects Samsung mobile devices running Q(10.0). The issue enables bypass of the locked-state protection to read clipboard content via USSD. The root cause is described as a protection bypass, but no further technical details or affected versions are provided in the connected docume...

CVE-2020-13831

CVE-2020-13831 affects Samsung mobile devices running O(8.x) and P(9.0) on Exynos 7570. The vulnerability stems from the Trustonic Kinibi component, which allows arbitrary memory mapping. This yields high-severity impact (partial confidentiality, integrity, and availability; in NVD, CVSSv3.1 base...

CVE-2020-13835

The CVE-2020-13835 issue affects Samsung mobile devices running O(8.x) with TEEGRIS, specifically involving the Gatekeeper Trustlet. The vulnerability stems from a brute-force weakness in the Trustlet that allows credential guessing, enabling a user credential brute-force attack. The issue is tie...

CVE-2020-26599

CVE-2020-26599 affects Samsung mobile devices running Q(10.0) software. The DynamicLockscreen Terms and Conditions can be accepted without authentication, enabling potential credentialless interaction with the lockscreen flow. The Samsung ID SVE-2020-17079 (October 2020) is cited. Connected advis...