8153 matches found
CVE-2016-6675
This CVE (CVE-2016-6675) is a buffer/size difference (off-by-one) vulnerability in the Qualcomm Wi‑Fi driver’s CORE/HDD wlan_hdd_hostapd.c. Affected devices include Android on Nexus 5X and Android One, with exploitation via a crafted application that invokes the linkspeed ioctl, enabling local pr...
CVE-2024-39429
The CVE-2024-39429 entries describe a vulnerability in the faceid service where an out-of-bounds write can occur due to a missing bounds check. Affected component: faceid service. Impact per sources: local denial of service without requiring additional privileges. The descriptions consistently re...
CVE-2024-39436
The CVE-2024-39436 entry concerns the LinkTurboNative service, with a command-injection due to improper input validation. Impact is local privilege escalation to SYSTEM. Multiple connected sources (Red Hat, NVD, CVE lists, and PT-Security) confirm the issue description; details on affected versio...
CVE-2025-36887
CVE-2025-36887 affects the function wl_cfgscan_update_v3_schedscan_results() in wl_cfgscan.c, where an out-of-bounds write results from an incorrect bounds check. This could enable local escalation of privilege with no extra execution privileges required and no user interaction. Multiple sources ...
CVE-2026-0079
Technical details about CVE-2026-0079 are not publicly available in the provided documents. Monitor for updates.
CVE-2014-1939
CVE-2014-1939 affects Android’s BrowserFrame.java (Android before 4.4). The vulnerability arises from using addJavascriptInterface with an instance of SearchBoxImpl, allowing attackers to perform arbitrary Java code execution via the searchBoxJavaBridge_ interface at certain API levels. Exploitat...
CVE-2014-7953
CVE-2014-7953 describes a race condition in Android 4.4.4’s ActivityManagerService.bindBackupAgent that lets a local user with adb shell execute code as system by coordinating an adb install with a crafted logcat script to force bindBackupAgent to use an ApplicationInfo uid of 1000. The flaw stem...
CVE-2014-8507
The CVE-2014-8507 entry concerns a SQL injection vulnerability in the Android WAPPushManager module (WAP Push handling) prior to Android 5.0.0. Multiple SQL injection flaws exist in the queryLastApp method of WapPushManager.java, exploitable via crafted WAP Push messages where the attacker can se...
CVE-2014-9944
CVE-2014-9944 affects the Secure File System in all Android CAF builds using the Linux kernel. The issue is described as an Integer Overflow that could lead to a Buffer Overflow. Available sources note the vulnerability at a high impact level (CVSSv3 base score 7.8; CVSSv2 9.3) with local attack ...
CVE-2014-9952
CVE-2014-9952 concerns the Android Secure File System in CAF builds using the Linux kernel, described as a capture‑replay vulnerability. Publicly provided details in the sources indicate the issue affects the Secure File System component and could impact confidentiality, integrity, and availabili...
CVE-2015-1474
CVE-2015-1474 affects Android up to version 5.0, specifically the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp. The vulnerability arises from multiple integer overflows that can be triggered by inputs with a large number of file descriptors or large in...
CVE-2015-1529
The CVE-2015-1529 entry corresponds to an integer overflow in Android’s soundtrigger subsystem, specifically in soundtrigger/ISoundTriggerHwService.cpp. This vulnerability allows a denial of service through unspecified vectors by triggering an overflow in processing within the SoundTrigger hardwa...
CVE-2015-1537
Technical details about CVE-2015-1537 are not provided in the connected documents. The available descriptions mention an integer overflow in Android’s IHDCP.cpp but no further public technical specifics or fixes are included here. Monitor for updates.
CVE-2015-6599
CVE-2015-6599 affects libstagefright in Android prior to 5.1.1 LMY48T. A crafted media file can cause memory corruption in mediaserver, enabling remote code execution or a denial of service. The Android Nexus bulletin notes patches for builds after LMY48T (5.1.1+) and advises updating to at least...
CVE-2015-6605
CVE-2015-6605 concerns the Android mediaserver component. In affected Android releases prior to 5.1.1 LMY48T, a denial-of-service condition can be triggered in mediaserver, causing a process crash via unspecified vectors. The vulnerability is linked to internal bugs 20915134 and 23142203 and is d...
CVE-2015-7718
CVE-2015-7718 affects Android’s mediaserver in versions 5.x up to 5.1.1 (LMY48T) and 6.0 prior to 2015-10-01. The vulnerability allows a denial of service (process crash) via unspecified vectors and is described as a different issue from CVE-2015-6605. The provided sources do not reveal the exact...
CVE-2015-8505
Summary (concrete details from provided sources): Android mediaserver in versions prior to 5.1.1 LMY48Z is vulnerable to a memory corruption issue that can be triggered by a crafted media file, enabling remote code execution or a denial of service. The entry is part of CVE-2015-8505 and is linked...
CVE-2015-8507
The CVE-2015-8507 entry concerns a memory corruption vulnerability in Android’s mediaserver. Connected sources describe affected software as Android mediaserver running on Android 6.0 (and older) where a crafted media file can be used by a remote attacker to execute arbitrary code or cause a deni...
CVE-2015-8998
CVE-2015-8998 describes an integer overflow in TrustZone that could potentially affect Android devices using the CAF Linux kernel. Connected sources reiterate TrustZone/CAF exposure and label it as an integer overflow inTrustZone components; no further technical specifics (affected versions, expl...
CVE-2015-9051
CVE-2015-9051 affects Qualcomm components in Android CAF builds using the Linux kernel (LTE stack). Root cause: an assertion can be reached due to an improper bound on a length in a System Information message. Severity in the provided metrics is critical (CVSSv3 base 9.8). The connected documents...
CVE-2015-9063
CVE-2015-9063 : Technical details are not publicly provided in the supplied documents. Monitor for updates from official advisories; there are currently no concrete details on affected products, impact, or remediation in this source set.
CVE-2015-9065
CVE-2015-9065 concerns Qualcomm products with CAF Android releases using the Linux kernel, where a UE may respond to a UEInformationRequest before Access Stratum security is established. The provided sources describe the issue but do not specify exact affected models, versions, or a vendor patch/...
CVE-2016-0815
CVE-2016-0815 affects the mediaserver component of Android, specifically the MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp within libstagefright. The vulnerability exists on Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01, where processing a crafted media...
CVE-2016-0818
The CVE affects Conscrypt’s TrustManagerImpl on Android, where caching mishandles the distinction between an intermediate CA and a trusted root CA. Affected: Android/Conscrypt versions: 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01. Impact: enables MITM by exploiting an int...
CVE-2016-10341
Technical details about CVE-2016-10341 are not provided in the connected documents. The initial description notes elevated privileges for third-party TEEs on CAF Android/Linux kernel, but no vendor, component, version, impact, or remediation details are disclosed here. Monitor for updates.
CVE-2016-10388
Technical details about CVE-2016-10388 are not publicly provided in the connected documents. Monitor for updates.
CVE-2016-11044
The vulnerability CVE-2016-11044 affects Samsung mobile devices running Lollipop (5.0/5.1) and Marshmallow (6.0) with fingerprint support. It enables bypass of the application signature check during installation, as documented under Samsung’s SVE-2016-5923. Evidence across sources (NVD, Red Hat, ...
CVE-2016-2439
CVE-2016-2439 is a Bluetooth vulnerability in Android where a buffer overflow in btif/src/btif_dm.c during pairing can allow a remote attacker to execute arbitrary code via a long PIN. Affected: Android 4.x up to 4.4.3, 5.0.x up to 5.0.2, 5.1.x up to 5.1.1, and 6.x prior to 2016-05-01. Impact: re...
CVE-2016-2448
CVE-2016-2448 affects Android mediaserver’s NuPlayerStreamListener.cpp (NuPlayer in mediaserver). The issue is improper validation of entry data structures, enabling a local attacker to escalate privileges to Signature or SignatureOrSystem via a crafted app. Affected are Android 4.x before 4.4.4,...
CVE-2016-2479
CVE-2016-2479 affects the mm-video-v4l2 vdec in Mediaserver on Android. The vulnerability arises from mishandling a buffer count, enabling a local attacker to elevate privileges to Signature or SignatureOrSystem via a crafted application. Affected Android versions include 4.x prior to 4.4.4, 5.0....
CVE-2016-3755
CVE-2016-3755 affects the Android Mediaserver component, specifically decoder/ih264d_parse_pslice.c, where Mediaserver on Android 6.x before 2016-07-01 does not properly select concealment frames. This can allow a remote attacker to cause a denial of service (device hang or reboot) via a crafted ...
CVE-2016-3762
CVE-2016-3762 affects Android before patch levels: 5.0.2 for 5.0.x, 5.1.1 for 5.1.x, and 6.x before 2016-07-01. The issue is elevation of privileges in the sockets subsystem when a crafted application uses (1) AF_MSM_IPC or (2) another socket class unrecognized by SELinux, due to internal bug 286...
CVE-2016-3806
The CVE-2016-3806 issue affects the MediaTek display driver in Android One devices. It enables privilege escalation via a crafted application, tied to Android internal bug 28402341 and MediaTek internal bug ALPS02715341. Public details indicate the vulnerability exists in the MediaTek display dri...
CVE-2016-3809
CVE-2016-3809 is an information-disclosure vulnerability in Android’s networking component. The iovy/iovy_pxn2 flows describe using CVE-2016-3809 to leak the kernel address of a sock structure, enabling subsequent steps to corrupt kernel data and escalate privileges. Affected devices include Andr...
CVE-2016-5861
CVE-2016-5861 affects Qualcomm display/video driver in Android for MSM. The vulnerability arises when a userspace-controlled variable is used to compute offsets/sizes for copy operations, potentially causing a heap overflow. The connected documents classify this as an Elevation of Privilege (EoP)...
CVE-2016-6717
CVE-2016-6717 corresponds to an elevation-of-privilege in Android’s Mediaserver. A local malicious app could execute code in a privileged process due to memory/parameter handling in Mediaserver when processing media data. Affected Android versions span 4.x up to 7.0 (pre-2016-11-01 and pre-2016-1...
CVE-2016-6732
CVE-2016-6732 is an elevation-of-privilege vulnerability in the NVIDIA GPU driver on Android, allowing a local malicious app to execute code in the kernel. The Android bulletin notes patch levels from 2016-11-01/11-05 (and 11-06) address multiple issues; Pixel C is listed among updated devices fo...
CVE-2016-6739
CVE-2016-6739 is an elevation-of-privilege vulnerability in the Qualcomm camera driver on Android, allowing a local malicious app to execute arbitrary code in the kernel context. The issue requires compromising a privileged process and is described as a local attack with high impact (kernel integ...
CVE-2016-6744
CVE-2016-6744: Elevation of privilege in the Synaptics touchscreen driver for Android. A local malicious app could execute arbitrary kernel code via the Synaptics driver, with impact classified as High. Affected software is Android devices using the Synaptics touchscreen driver prior to the 2016-...
CVE-2016-8414
CVE-2016-8414 is an information-disclosure vulnerability in the Qualcomm Secure Execution Environment Communicator affecting Android. It permits a local attacker with a compromised privileged process to access data outside its permissions. Affected components are the Android kernel (Kernel-3.10 a...
CVE-2016-8419
CVE-2016-8419 is a local elevation-of-privilege vulnerability in the Qualcomm Wi‑Fi driver affecting Android. The issue could allow a local malicious application to execute arbitrary code in the kernel context by exploiting the Qualcomm Wi‑Fi driver. Affected components/files are tied to the Andr...
CVE-2016-8436
CVE-2016-8436 matches an elevation-of-privilege flaw in the Qualcomm video driver affecting Android kernels (Kernel-3.18). The vulnerability could let a local malicious app execute arbitrary code in the kernel context, potentially causing a permanent device compromise and requiring reflashing to ...
CVE-2016-8485
CVE-2016-8485 is an information-disclosure vulnerability affecting Android kernel components that include Qualcomm closed-source elements. The issue, as described in the provided documents, could allow a remote-access scenario to indirectly reveal data via the kernel’s handling, resulting in a hi...
CVE-2017-0395
Technical details about CVE-2017-0395 are not provided in the supplied documents; no specifics on affected components, root cause, or fixes are present. Monitor for updates from authoritative sources.
CVE-2017-0398
CVE-2017-0398 is an information-disclosure vulnerability in Android’s Audioserver. According to the sources, it could allow a local malicious application to access data outside of its permission levels. Affected products/versions are Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, with Andro...
CVE-2017-0490
Summary (CVE-2017-0490) : Android Wi‑Fi elevation of privilege vulnerability allowing a local malicious app to delete user data in affected Android versions (6.0, 6.0.1, 7.0, 7.1.1). The connected documents corroborate the core issue but do not provide public technical exploit details or patch in...
CVE-2017-0491
CVE-2017-0491 is an elevation of privilege vulnerability in Android’s Package Manager. The issue could allow a local malicious application to prevent users from uninstalling apps or removing app permissions. Affected versions are Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The descri...
CVE-2017-0494
Technical details (affected component/version or root cause) are not publicly provided in the connected documents for CVE-2017-0494; available descriptions note an information-disclosure issue in AOSP Messaging affecting Android 6.0–7.1.1. Monitor for updates.
CVE-2017-0502
CVE-2017-0502 describes an elevation of privilege in MediaTek components (M4U, sound, touchscreen, GPU, Command Queue drivers) that could allow a local malicious app to execute arbitrary code in the kernel context, potentially leading to permanent device compromise requiring reflashing. The vulne...