CVE-2017-0680

CVE-2017-0680 is described across the provided documents as a remote code execution vulnerability in the Android media framework affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The connected sources reiterate the issue but do not provide concrete technical details in these documents about th...

CVE-2017-0682

CVE-2017-0682 : A remote code execution vulnerability in the Android media framework affecting Android 7.0, 7.1.1, and 7.1.2. Connected sources describe an RCE in the media framework (no root cause details provided) and note patches were released via the July 2017 Android security bulletin. Explo...

CVE-2017-0686

CVE-2017-0686 is a denial-of-service vulnerability reported in the Android media framework affecting Android versions 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID A-34231231). Connected CNVD entry CNVD-2017-15983 mirrors a media framework DoS in Android, describing a vulnerability in the Android...

CVE-2017-0700

The CVE-2017-0700 entry concerns a remote code execution vulnerability in Android’s System UI affecting Android 7.1.1 and 7.1.2. Connected sources (CNVD-2017-21549) describe a Google Android System UI RCE affecting the same versions, noting it is exploitable remotely, but do not provide technical...

CVE-2017-0705

CVE-2017-0705 is described here as an elevation of privilege in the Broadcom Wi-Fi driver within Android kernels. The connected sources identify the affected component as the Broadcom Wi‑Fi driver used in Android, with the impact stated as Elevation of Privilege (local). The root cause specifics ...

CVE-2017-0709

CVE-2017-0709 affects the HTC sensor hub driver in the Android kernel. It is an information-disclosure vulnerability with local access, requiring user interaction (CVSS v3: 3.3 Low). The HTC sensor hub vulnerability is addressed in the 2017-07 Android security bulletin; apply the July 2017 patch ...

CVE-2017-0716

CVE-2017-0716 is a remote code execution vulnerability in the Android media framework, specifically in the libmpeg2 decoding library. The issue affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The impact, as documented, is that an attacker could potentially execute arbitrary code in th...

CVE-2017-0771

CVE-2017-0771 is a denial of service vulnerability in Android’s media framework (libskia) affecting Android 7.0, 7.1.1, and 7.1.2. The NVD entry describes DoS in the media framework, with the running impact defined as availability loss. The CVSS v3 vector indicates LOCAL attack vector, low attack...

CVE-2017-0774

CVE-2017-0774 is a denial-of-service vulnerability in Android’s media framework (libstagefright) affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0/6.0.1, 7.0, 7.1.1, and 7.1.2. The issue is described in public sources as a DoS in the media framework; no exploit vectors, root cause details, or a...

CVE-2017-0788

CVE-2017-0788 is a local elevation-of-privilege vulnerability in the Broadcom Wi‑Fi driver used by Android (kernel level). The issue affects the Broadcom Wi‑Fi driver component and is documented in the Android 2017-09-01/09-05 security patch level bulletin under Broadcom entries, indicating mitig...

CVE-2017-0837

CVE-2017-0837 is an elevation of privilege vulnerability in Android’s media framework (libaudiopolicymanager). Affected: Android 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Root cause is an elevation of privilege in the Media framework as noted by the Android Security Bulletin (Media framework sec...

CVE-2017-0843

CVE-2017-0843 is a local elevation-of-privilege vulnerability in MediaTek’s CCCI component within the Android kernel. The NVD entry characterizes it as EoP with high impact (confidentiality, integrity, and availability all affected) and local attack vector with no user interaction. The vulnerabil...

CVE-2017-0847

CVE-2017-0847 is an elevation of privilege in the Android media framework (mediaanalytics) affecting Android 8.0 on Pixel/Nexus. The vulnerability is classified as EoP with impact on confidentiality, integrity, and availability. The Pixel security bulletin notes a patch level of 2017-11-05 or lat...

CVE-2017-0876

CVE-2017-0876 is a remote code execution vulnerability in Android’s media framework (libavc) affecting Android 6.0. The Android bulletin groups it under the Media framework RCE family (CVE-2017-0872/0876/0877/0878/13151) and notes that security patches at 2017-12-01 or newer (and 2017-12-05 for s...

CVE-2017-11002

CVE-2017-11002 is a Qualcomm Wi‑Fi driver information exposure/DoS type issue described as: in all Qualcomm products with Android CAF builds using the Linux kernel, when processing a vendor sub-command, a buffer over-read can occur. The connected sources confirm this CVE ID is classified as an In...

CVE-2017-11019

The CVE-2017-11019 issue affects Android for MSM, Firefox OS for MSM, and QRD Android on CAF Linux kernels, where a file descriptor allocated during get_metadata was not closed after freeing the associated buffer, causing a failure during exit. This is a kernel/user-space interaction flaw that ca...

CVE-2017-11030

CVE-2017-11030 affects Android for MSM and related CAF/Linux-kernel builds, via the HDMI video driver function hdmi_edid_sysfs_rda_res_info() that allows an arbitrary write into kernel memory from userspace. The issue is tied to Android devices using these CAF/kernel HDMI components, potentially ...

CVE-2017-11053

CVE-2017-11053 affects Android for MSM, Firefox OS for MSM, and QRD Android on CAF Linux-kernel builds. When a qos map set IE with length

CVE-2017-13184

CVE-2017-13184 affects Android 8.0–8.1 SurfaceFlinger. In enableVSyncInjections, a use-after-free on mVSyncInjector can enable local elevation of privilege with code execution in a privileged process; no user interaction required. Exploitation details are not provided in the connected documents. ...

CVE-2017-13234

CVE-2017-13234 affects Android’s sonivox DLSParser. A memory leak can cause resource exhaustion leading to remote temporary denial of service, with user interaction required for exploitation. Affected Android versions include 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. Remediation is via ...

CVE-2017-13245

CVE-2017-13245 is an Elevation of Privilege vulnerability in the Android Upstream kernel audio driver (kernel component). The Android Pixel/Nexus bulletin and CVE records identify the issue as a local EoP in the Audio driver within the Android kernel, with patched AOSP versions referenced (patch ...

CVE-2017-13247

CVE-2017-13247 affects the Pixel 2 bootloader (Android). The issue is a missing permission check in the bootloader that bypasses the carrier bootloader lock, enabling local elevation of privileges with user-privilege requirements. Exploitation is described as local with no user interaction requir...

CVE-2017-13285

CVE-2017-13285 affects Android and is rooted in the SvoxSsmlParser implementation (svox_ssml_parser.cpp), where an out-of-bounds write can occur due to an uninitialized buffer. This can enable remote code execution in an unprivileged process with no user interaction. The Android Security Bulletin...

CVE-2017-13293

CVE-2017-13293 affects Android kernel NFC driver. In the nfc_hci_cmd_received() function of core.c, there is a missing bounds check that can cause an out-of-bounds write, enabling local elevation of privilege in the kernel without extra execution privileges or user interaction. The connected Andr...

CVE-2017-14905

CVE-2017-14905 affects Android on MSM (and related CAF/Linux-kernel-based builds) via a buffer over-read when handling a specially crafted cfg80211 vendor command in the wireless networking stack. The CNVD/CVE records describe this as information disclosure due to a buffer over-read, impacting Qu...

CVE-2017-15822

CVE-2017-15822 affects Qualcomm-based Android devices (MSM) including Firefox OS for MSM and QRD Android builds within CAF releases prior to the 2018-04-05 security patch level. Description: a buffer overflow may occur while processing an 802.11 management frame in the Linux kernel components use...

CVE-2017-15828

CVE-2017-15828 affects CAF builds of Android (Android for MSM, Firefox OS for MSM, QRD Android) running on the Linux kernel. The vulnerability is an integer overflow during keystore access in LK, which may lead to a buffer overflow. Public references in the provided documents confirm the issue an...

CVE-2017-15831

CVE-2017-15831 describes a vulnerability in Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux, where the function wma_ndp_end_indication_event_handler() performs no input validation on an event_info value from firmware. This can cause an integer overflow and potentially ...

CVE-2017-18069

CVE-2017-18069 affects Android for MSM, Firefox OS for MSM, and QRD Android builds that use CAF Linux kernel, where an improper message length calculation in oem_cmd_handler() while processing a WLAN_NL_MSG_OEM netlink message leads to a buffer overread. Public data lists CVSS base scores around ...

CVE-2017-18158

CVE-2017-18158 is a buffer overflow/array bounds issue in Android builds based on CAF with the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) that could occur while flashing images. Root cause: improper memory handling leading to overflows. Impact per documented data: local impac...

CVE-2017-18644

Samsung CVE-2017-18644 affects mobile devices running L(5.1), M(6.x), and N(7.x). The issue is a heap-based buffer overflow in muic_set_reg_sel when reading MUIC register values (root cause). The Samsung ID is SVE-2017-10011. No fixes or mitigations are detailed in the provided documents; referen...

CVE-2017-18651

The CVE-2017-18651 entry describes an issue on Samsung mobile devices running M(6.x) and N(7.x) software, where an Integer Overflow occurs in process_M_SetTokenTUIPasswd while handling a trusted application, leading to memory corruption. The affected components are Samsung mobile platforms with S...

CVE-2017-18653

CVE-2017-18653 affects Samsung mobile devices running KK (4.4), L (5.0/5.1), M (6.0), and N (7.x). The Email application is vulnerable to an attack via a broadcasted intent that allows an attacker to send emails on behalf of any user. The issue is identified by Samsung as SVE-2017-9357 (Sept 2017...

CVE-2017-18680

CVE-2017-18680 concerns Samsung mobile devices running Lollipop (5.0/5.1) and Marshmallow (6.0) tablets. The issue arises from the lockscreen, where the Add User action can be exploited to access user data stored in external storage. Root cause and affected scope are tied to the lockscreen UI all...

CVE-2017-6249

CVE-2017-6249 is an elevation-of-privilege issue affecting NVIDIA’s Tegra kernel audio driver (Audio DSP) on Android. The NVIDIA bulletin specifies that an invalid user parameter may be copied to an output buffer without checking input size, which can allow a local malicious app to execute arbitr...

CVE-2017-6283

CVE-2017-6283 affects NVIDIA Security Engine where the RSA keyslot read/write lock permissions are cleared on chip reset, potentially enabling information disclosure. The issue is documented across NVIDIA advisories (Jetson TX1/TX2/TK1 and SHIELD TV) as part of a set of vulnerabilities in the Sec...

CVE-2017-8242

CVE-2017-8242 affects Android CAF releases that use the Linux kernel and involve the Secure Execution Environment (QTEE) driver. The issue is a race condition in the QTEE driver that can lead to an arbitrary memory write. The provided connected sources confirm the vulnerability description but do...

CVE-2017-9682

CVE-2017-9682 affects the Qualcomm KGSL GPU driver in Android CAF builds on Linux kernel. Description: a race condition between two KGSL driver functions can cause a Use After Free. Exploitation details are not provided in the connected documents. Mitigation: Android security bulletin patches (Au...

CVE-2017-9693

CVE-2017-9693 describes a local vulnerability in Android for MSM, Firefox OS for MSM, and QRD Android where the length of the STA_EXT_CAPABILITY attribute value is shorter than StaParams.extn_capability, causing a memcpy from params->ext_capab to StaParams.extn_capability to read extra bytes. ...

CVE-2017-9704

CVE-2017-9704 concerns CAF Android kernels (Android for MSM, Firefox OS for MSM, QRD Android) where there is no synchronization between msm_vb2 buffer operations, enabling a use-after-free condition. Root cause: missing synchronization in buffer handling within the kernel component msm_vb2. Affec...

CVE-2018-11301

CVE-2018-11301 describes an integer overflow caused by a missing buffer-length check while processing debug log events from firmware in Android CAF builds using the Linux kernel, affecting Qualcomm WLAN Host components across Android releases such as Android for MSM, Firefox OS for MSM, and QRD A...

CVE-2018-21050

CVE-2018-21050 concerns Samsung mobile devices running N(7.x) and O(8.X) on Exynos chipsets, where a Buffer overflow in the esecomm Trustlet can lead to arbitrary code execution. The vulnerability is identified by Samsung as SVE-2018-12852 (October 2018). The connected records confirm the affecte...

CVE-2018-21075

CVE-2018-21075 affects Samsung mobile devices running Android N (7.x) and O (8.x). The issue arises in the Call+ application which can load classes from an unintended path, enabling code execution. This vulnerability is documented in multiple sources (NVD entry, Red Hat advisory, CNVD, CVE listin...

CVE-2018-3565

CVE-2018-3565 affects Qualcomm WLAN/CAF Android devices where lim_send_sme_probe_req_ind() in the WLAN stack of the Linux kernel can overflow a buffer during probe request indication. The issue is documented across multiple sources as a buffer overflow in the Android CAF/Linux kernel path used fo...

CVE-2018-5842

CVE-2018-5842 describes a WLAN privilege/Arbitrary address write in Qualcomm WLAN on Android devices (CAF Android for MSM, Firefox OS for MSM, QRD Android) due to the WLAN firmware sending incorrect data to the WLAN driver. The root cause is a data handling flaw in the interaction between comprom...

CVE-2018-9459

CVE-2018-9459 affects Android across 6.0–8.1. A path traversal flaw in Attachment.java (Attachment of EmlAttachmentProvider.java) enables Elevation of Privilege with remote execution potential. Impact is a remote privilege escalation with no extra credentials; exploitation does not require user i...

CVE-2018-9477

CVE-2018-9477 is an Elevation of Privilege issue in Android’s Settings app (Development options) caused by a missing permission check. It enables a local attacker to bypass authentication and escalate privileges with no additional execution privileges required, though user interaction is needed f...

CVE-2018-9545

CVE-2018-9545 affects Android 9, with a local escalation of privilege due to an out-of-bounds write in BTA_HdRegisterApp (bta_hd_api.cc) caused by a missing bounds check. The issue enables a local attacker to potentially escalate privileges without user interaction. The vulnerability is documente...

CVE-2018-9551

CVE-2018-9551 affects Android 9 (Android-9) in the CAacDecoder_Init path of aacdecoder.cpp, where a missing bounds check can cause an out-of-bounds write. This vulnerability could enable remote code execution within the media server with privileges of a privileged process, requiring user interact...

CVE-2019-20610

The CVE-2019-20610 entry describes a double-fetch vulnerability in Trustlet on Samsung mobile devices running N(7.X) and O(8.X) with Exynos 7570/7870/7880/7885/8890/8895/9810 chipsets, enabling arbitrary TEE code execution. Affected component: Trustlet in the TEE. Root cause: double-fetch window ...