CVE-2023-44128

CVE-2023-44128 affects LGInstallService (com.lge.lginstallservies) on LG devices, where the exported AIDL-based InstallService exposes installPackage* methods that call installPackageVerify() for signature validation after a delete-file operation. An attacker can manipulate conditions so the secu...

CVE-2023-45780

CVE-2023-45780 affects the Android Print Service. The issue stems from a logic error enabling a background activity launch, potentially causing local privilege escalation with no extra execution privileges required beyond user interaction. Documented impact covers confidentiality, integrity, and ...

CVE-2024-20013

CVE-2024-20013: MediaTek media chips — in keyInstall there is an out-of-bounds write due to a missing bounds check, enabling local privilege escalation to System level. Exploitation details are not provided in the documents; exploitation status is not confirmed. Patch ID ALPS08471742; Issue ID AL...

CVE-2024-20086

A security vulnerability exists in MediaTek chips due to a missing bounds check in the vdec component. This flaw can lead to an out-of-bounds write , potentially allowing for local escalation of privilege with System execution privileges. No user interaction is required for exploitation. Remediat...

CVE-2024-20115

A vulnerability exists in ccu (specifically within MediaTek Chipsets ) caused by a missing bounds check , which allows for a possible out-of-bounds write . An attacker can exploit this to achieve local escalation of privilege , requiring System execution privileges . No user interaction is requir...

CVE-2024-20117

A security vulnerability exists in vdec , a component associated with MediaTek Chipsets , due to an improper structure design that allows for an out-of-bounds read . An attacker with System execution privileges can exploit this flaw to perform local information disclosure without requiring user i...

CVE-2024-20129

CVE-2024-20129 affects Telephony with a missing bounds check leading to an out-of-bounds read and potential remote denial of service. The vulnerability is exploitable over the network without privileges or user interaction, per the provided description. A patch is identified as ALPS09289881 (Issu...

CVE-2024-20135

A security vulnerability exists in soundtrigger within MediaTek Chipsets due to a missing bounds check . This flaw allows for an out-of-bounds write , which could lead to local escalation of privilege requiring System execution privileges. Exploitation does not require user interaction. While the...

CVE-2025-36917

A denial of service (DoS) vulnerability exists in the Exynos-SLSI subcomponent of Google Pixel devices. The flaw is caused by an incorrect bounds check within the SwDcpItg function in up_L2commonPdcpSecurity.cpp. This vulnerability can be exploited remotely without requiring additional execution ...

CVE-2025-36934

In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48544

A SQL injection vulnerability exists in multiple locations within the MediaProvider component of the Android operating system. This flaw allows an attacker to read files belonging to other applications, potentially leading to a local escalation of privilege without requiring additional execution ...

CVE-2026-0027

A use-after-free vulnerability in the smmu_detach_dev function of arm-smmu-v3.c allows for an out-of-bounds write . This flaw exists within the Google Android operating system and its underlying Linux-based architecture. Successful exploitation can lead to local privilege escalation , requiring S...

CVE-2026-0079

The Google Android operating system is affected by an integer overflow vulnerability in multiple functions of the ubsan_throwing_runtime.cpp component. This flaw can lead to a persistent local denial of service (DoS) without requiring additional execution privileges or user interaction. While spe...

CVE-2011-3975

CVE-2011-3975 involves an HTC update for Android 2.3.4 (build GRJ22) used with Sense on HTC EVO 3D, EVO 4G, ThunderBolt, and other devices. The HtcLoggers.apk component is exposed via android.permission.INTERNET and can be leveraged by user-assisted remote attackers to extract sensitive data, inc...

CVE-2014-9881

CVE-2014-9881 affects Qualcomm components in Android on Nexus 7 (2013) where drivers/media/radio/radio-iris.c uses an incorrect integer data type, enabling privilege escalation or denial of service (buffer overflow) via a crafted app. The issue is documented in CVE descriptions and mapped to Andr...

CVE-2014-9893

CVE-2014-9893 concerns the Qualcomm MSM MDSS driver on Android (Nexus 5) where the mdss_mdp_pp.c path does not correctly determine the size of Gamut LUT data. This leads to information disclosure via a crafted application. The issue affects Android devices prior to the 2016-08-05 patch level and ...

CVE-2014-9934

CVE-2014-9934 : A PKCS#1 v1.5 signature verification routine in all Android CAF releases using the Linux kernel may not check padding, potentially enabling signature forgery or bypass of integrity checks. The NVD entry reports a high impact (CVSS v3.0: HIGH, LOCAL attack vector with high confiden...

CVE-2014-9941

Technical details for CVE-2014-9941 are not publicly provided in the supplied documents. No specific affected products, root cause, or fixes are present here; monitor for updates from official sources.

CVE-2015-3835

The CVE-2015-3835 entry describes a buffer overflow in libstagefright’s OMXNodeInstance::emptyBuffer (omx/OMXNodeInstance.cpp) affecting Android prior to 5.1.1 LMY48I. The underlying issue is a memory corruption vulnerability in mediaserver-related code that could allow remote code execution via ...

CVE-2015-3862

CVE-2015-3862 affects mediaserver in Android prior to 5.1.1 LMY48T, where processing of media data can crash the mediaserver, causing a denial of service. The primary description specifies an unspecified vector; the CVE entry is listed as a low-severity DoS in Mediaserver per Android bulletin det...

CVE-2015-6622

The CVE-2015-6622 issue affects the Android Native Frameworks Library in Android versions before 5.1.1 LMY48Z and 6.0 before 2015-12-01. It is described as an information-disclosure vulnerability that could allow attackers to obtain sensitive information and bypass certain protections, demonstrat...

CVE-2015-6642

CVE-2015-6642 is an information-disclosure vulnerability in the Android kernel that could allow a local attacker to obtain sensitive data and bypass a protection mechanism. Affected platforms include Android kernels prior to 5.1.1 LMY49F and before 2016-01-01 on 6.0. The primary impact is leakage...

CVE-2015-9002

This CVE concerns Google Android TrustZone, where a DRM routine in the TrustZone DRM path can suffer an out-of-range pointer offset (integer overflow) vulnerability. Connected CNVD entry explicitly states an integer overflow in the TrustZone DRM routine exists on Android, and that an attacker cou...

CVE-2015-9010

CVE-2015-9010 is described as an elevation of privilege vulnerability affecting Qualcomm closed‑source components used by Android, within the Android kernel. The provided documents confirm the issue is associated with Qualcomm components and Android kernel, but do not provide specific technical d...

CVE-2016-0811

CVE-2016-0811 covers an integer overflow in BnCrypto::onTransact within media/libmedia/ICrypto.cpp of libmediaplayerservice on Android 6.x prior to 2016-02-01. The vulnerability can allow attackers to obtain sensitive information and bypass an unspecified protection mechanism through a improper s...

CVE-2016-0818

The CVE affects Conscrypt’s TrustManagerImpl on Android, where caching mishandles the distinction between an intermediate CA and a trusted root CA. Affected: Android/Conscrypt versions: 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01. Impact: enables MITM by exploiting an int...

CVE-2016-10336

Technical details about CVE-2016-10336 are not publicly available in the provided connected documents. The material confirms memory regions unprotected during boot on CAF Android/Linux, but remediation specifics are not included here. Monitor for updates.

CVE-2016-10388

Technical details about CVE-2016-10388 are not publicly provided in the connected documents. Monitor for updates.

CVE-2016-10391

CVE-2016-10391 affects Qualcomm Wconnect in Android CAF builds using the Linux kernel. The root cause is insufficient validation of HCI command length, enabling a remote attacker to trigger unauthorized operations. CVSSv3 is reported as 9.8 (CRITICAL). The issue is discussed in multiple sources; ...

CVE-2016-11039

CVE-2016-11039 affects Samsung mobile devices running KK/4.4, L/5.0–5.1, and M/6.0 (AP + CP MDM9x35 or Qualcomm Onechip). The issue is a NULL pointer dereference in the IPC socket code, as described by multiple sources (e.g., Red Hat and NVD records). Impact is indicated as HIGH with potential av...

CVE-2016-11044

The vulnerability CVE-2016-11044 affects Samsung mobile devices running Lollipop (5.0/5.1) and Marshmallow (6.0) with fingerprint support. It enables bypass of the application signature check during installation, as documented under Samsung’s SVE-2016-5923. Evidence across sources (NVD, Red Hat, ...

CVE-2016-2457

CVE-2016-2457 affects Android Wi‑Fi, specifically server/pm/UserManagerService.java, and is described as a bypass against restrictions on Wi‑Fi configuration changes via guest access in Android 5.0.x (before 5.0.2), 5.1.x (before 5.1.1), and 6.x (before 2016-05-01). The connected documents confir...

CVE-2016-2480

CVE-2016-2480 affects the mm-video-v4l2 vidc component in Mediaserver (Android 4.x up to 4.4.4, 5.0.x up to 5.0.2, 5.1.x up to 5.1.1, and 6.x prior to 2016-06-01). The root cause is improper validation of certain OMX parameter data structures, enabling a local attacker to gain privileges via a cr...

CVE-2016-3751

CVE-2016-3751 is a libpng vulnerability (plibpng before 1.6.20) described as allowing attackers to gain privileges via a crafted application (Signature or SignatureOrSystem access). The connected documents show this CVE referenced in Photon OS security advisories PHSA-2023-3.0-0602, PHSA-2023-5.0...

CVE-2016-3772

CVE-2016-3772 concerns the MediaTek drivers in Android One devices prior to 2016-07-05, enabling local privilege escalation via a crafted application. The issue is described as Android internal bug 29008188 and MediaTek internal bug ALPS02703102, with affected software components being the Androi...

CVE-2016-3802

CVE-2016-3802: Privilege-escalation in the Android kernel file system (Nexus 9) due to a fault in the kernel file system implementation. Local attacker could gain privileges via a crafted app. Exploitation status not provided in the documents. The issue is listed in the 2016-07-01/07-05 Android s...

CVE-2016-3819

CVE-2016-3819 involves an integer overflow in codecs/on2/h264dec/source/h264bsd_dpb.c within libstagefright/Mediaserver on Android. A crafted media file can trigger memory corruption, enabling remote code execution or a denial of service. Affected Android lineages include 4.x before 4.4.4, 5.0.x ...

CVE-2016-3852

The CVE-2016-3852 entry describes an information-disclosure vulnerability in the MediaTek Wi‑Fi driver on Android One devices prior to the 2016-08-05 patch. The issue arises in the MediaTek Wi‑Fi driver (Android/Open Android bug 29141147; MediaTek ALPS02751738) and could allow a crafted applicati...

CVE-2016-3854

CVE-2016-3854 affects the Qualcomm MSMM driver path in Android: the file drivers/media/video/msm/msm_mctl_buf.c does not validate the image mode, enabling a crafted application to trigger a denial of service via out-of-bounds access, with potential unspecified additional impact. Reported as Qualc...

CVE-2016-3926

CVE-2016-3926 is a Qualcomm component elevation-of-privilege issue affecting Nexus 5/5X/6/6P on Android, listed under the 2016-10-05 patch level. The vulnerability is described as part of Qualcomm AMSS/driver vulnerabilities with internal bug 28823953 and is marked as a critical issue in the Qual...

CVE-2016-6706

CVE-2016-6706 is a local privilege-escalation vulnerability in Android’s Mediaserver, specifically within the libstagefright component. The issue allows a local malicious application to execute arbitrary code in the context of a privileged process due to a flaw in Mediaserver on Android 7.0 and e...

CVE-2016-8422

CVE-2016-8422 is an elevation-of-privilege issue in the Qualcomm bootloader that could let a local malicious Android app execute code in the kernel context, potentially leading to permanent device compromise. The vulnerability is described as critical and is tied to the bootloader/Qualcomm stack;...

CVE-2016-8485

CVE-2016-8485 is an information-disclosure vulnerability affecting Android kernel components that include Qualcomm closed-source elements. The issue, as described in the provided documents, could allow a remote-access scenario to indirectly reveal data via the kernel’s handling, resulting in a hi...

CVE-2017-0395

Technical details about CVE-2017-0395 are not provided in the supplied documents; no specifics on affected components, root cause, or fixes are present. Monitor for updates from authoritative sources.

CVE-2017-0398

CVE-2017-0398 is an information-disclosure vulnerability in Android’s Audioserver. According to the sources, it could allow a local malicious application to access data outside of its permission levels. Affected products/versions are Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, with Andro...

CVE-2017-0416

CVE-2017-0416 affects Android: an elevation of privilege in the Audioserver could allow a local malicious app to execute arbitrary code in the context of a privileged process. Affected software is Android, with versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The description documents th...

CVE-2017-0450

CVE-2017-0450 describes an elevation-of-privilege vulnerability in Android’s Audioserver that could allow a local malicious application to execute arbitrary code within the context of a privileged process. Root cause is a privilege escalation in Audioserver; impact is local code execution in a pr...

CVE-2017-0490

Summary (CVE-2017-0490) : Android Wi‑Fi elevation of privilege vulnerability allowing a local malicious app to delete user data in affected Android versions (6.0, 6.0.1, 7.0, 7.1.1). The connected documents corroborate the core issue but do not provide public technical exploit details or patch in...

CVE-2017-0500

CVE-2017-0500 is an elevation of privilege vulnerability in MediaTek components used in Android, affecting multiple kernel drivers (M4U, sound, touchscreen, GPU, Command Queue). The issue could let a local malicious app execute arbitrary code in the kernel context. Exploitation is local and requi...

CVE-2017-0545

CVE-2017-0545 describes an elevation-of-privilege weakness in Android’s Audioserver that could let a local malicious app run arbitrary code within a privileged process. The linked sources list affected Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1, and categorize the issue as High imp...