CVE-2017-14881

CVE-2017-14881 describes a use-after-free in the IPA IOCTL handler (IPA_IOC_ADD_HDR_PROC_CTX) on Android for MSM/Firefox OS for MSM/QRD Android prior to 2017-10-13. The vulnerability is in the ipa driver (Qualcomm) and is categorized in the Android Pixel bulletin as an Elevation of Privilege issu...

CVE-2017-8246

CVE-2017-8246 concerns the Android CAF ALSA PCM Playback Kernel Module. In msm_pcm_playback_close(), prtd is assigned from substream->runtime->private_data and later freed, but not sanitized to NULL; this creates a dangling pointer. Other code paths (e.g., msm_pcm_volume_ctl_put()) check fo...

CVE-2018-9399

The /proc/driver/wmt_dbg driver contains multiple out-of-bounds writes that can lead to local escalation of privilege . Exploitation requires System execution privileges and does not require user interaction. This vulnerability affects Google Pixel and Nexus devices. Security patch levels of 2018...

CVE-2018-9400

CVE-2018-9400 involves an out-of-bounds write vulnerability in the Goodix Touchscreen Driver within the MediaTek components of certain Google Pixel and Nexus devices . The flaw is caused by a missing bounds check in the gt1x_debug_write_proc and gt1x_tool_write functions located in drivers/input/...

CVE-2018-9404

A security vulnerability exists in Google Pixel smartphones, specifically within the oemCallback function of ril.cpp . The issue is caused by an integer overflow that can result in an out-of-bounds write . This flaw could lead to a local escalation of privilege , requiring System execution privil...

CVE-2021-39644

CVE-2021-39644 affects Google Pixel bootloader (Pixel component) with Elevation of Privilege (EoP) vulnerability. The Pixel security bulletin lists it under Pixel with High severity and a Bootloader impact. No exploitation details are provided in the provided connected documents. The remediation ...

CVE-2016-8487

CVE-2016-8487 describes an elevation of privilege vulnerability in Qualcomm closed source components used by the Android kernel. Affected software: Android kernel on devices with Qualcomm components. Root cause: privilege escalation within Qualcomm’s closed-source code. Impact: as per CVSS, allow...

CVE-2017-15851

CVE-2017-15851 affects Qualcomm Camerav2 in Android for MSM (Linux kernel CAF-based) due to a lack of copy_from_user and an information leak in msm_ois_subdev_do_ioctl, causing a camera crash across Android releases. The issue is documented in the Pixel/Nexus bulletin under Camerav2 (CVE-2017-158...

CVE-2017-6275

CVE-2017-6275 affects NVIDIA Tegra kernel CORE DVFS Thermal driver. The vulnerability arises from missing bounds checking in the thermal driver, enabling reading/writing of memory beyond buffer boundaries, potentially causing denial of service or privilege escalation. Public details in connected ...

CVE-2017-6296

NVIDIA CVE-2017-6296 affects the TrustZone DRM application in NVIDIA SHIELD TV. The issue is a TOCTOU vulnerability that may lead to denial of service or privilege escalation. Public details identify SHIELD TV SE 6.2 and earlier as affected; NVIDIA’s bulletin indicates updating to SE 6.3 to mitig...

CVE-2018-11280

CVE-2018-11280 affects Android CAF builds (Linux kernel in Android for MSM, Firefox OS for MSM, QRD Android). The vulnerability arises from missing size validation for NAT entry input during user-space processing, which could allow memory exhaustion when input size exceeds the maximum. Impact is ...

CVE-2018-9370

CVE-2018-9370 affects the MediaTek bootloader in the Android platform, describing a vulnerability in download.c where a special mode allows data to be downloaded into memory with missing bounds checks, leading to possible memory corruption and local escalation of privilege. The exploitation requi...

CVE-2018-9392

A vulnerability exists in the GPS HAL of MediaTek components, specifically within the get_binary function of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c. The issue is caused by a missing bounds check , leading to a possible out-of-bounds write . This flaw could ...

CVE-2018-9394

A vulnerability exists in the mtk_p2p_wext_set_key function of the gl_p2p.c file within the MediaTek P2P driver (drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c). The flaw is caused by improper input validation , which can result in an out-of-bounds (OOB) write . This issue could l...

CVE-2020-0261

CVE-2020-0261 affects the Android kernel (C2 flame devices) with a seccomp bypass caused by a missing configuration file, enabling local elevation of privilege without user interaction. The vulnerability impact is described as high, with local exploitability and complete confidentiality/integrity...

CVE-2025-36934

In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2014-9924

Technical details about CVE-2014-9924 are not provided in the supplied connected documents. Public information appears limited to a Signed to Unsigned Conversion Error in CAF Linux kernel. Monitor for updates.

CVE-2015-9009

CVE-2015-9009 is an Elevation of Privilege vulnerability in Qualcomm closed‑source components exposed via Android kernel. The public data indicates the issue affects Qualcomm/Android architectures and is classified as Critical (CVSS v3 9.8). The CVE is listed under Qualcomm closed‑source componen...

CVE-2017-11015

CVE-2017-11015 affects Android MSM, Firefox OS for MSM, and QRD Android builds (CAF Linux kernel). The issue is that SIR_MAC_AUTH_CHALLENGE_LENGTH is set to 128, while the frame parser allows challenge text up to 253 bytes, and the driver cannot handle >128 bytes. This mismatch can lead to a b...

CVE-2018-9406

CVE-2018-9406 concerns a vulnerability in NlpService where a missing permission check could allow access to location information, enabling local privilege escalation without additional execution privileges. The exploit requires only local access and does not require user interaction. Affected com...

CVE-2022-42537

CVE-2022-42537 is a remote code execution issue impacting Chromecast devices, described in the Chromecast Security Bulletin under the AMLogic Secure Monitor component with High severity (CVSS v3.1: 9.8). The Chromium/Android bulletin confirms it as a RCE in the Secure Monitor path and attributes ...

CVE-2017-11013

CVE-2017-11013 is a Qualcomm WLAN/Android kernel vulnerability where countOffset in UnpackCore increments per loop without bounds checking pIe->arraybound. Documented as a Remote Code Execution in the Qualcomm WLAN driver affecting CAF Android kernel builds; exploitation could occur via crafte...

CVE-2017-11014

CVE-2017-11014 describes a buffer overflow in the Android/CAF/Linux kernel stack when parsing a Measurement Request IE in a Roam Neighbor Action Report. Affected products include Android for MSM, Firefox OS for MSM, and QRD Android with CAF Linux kernel releases. The CVSS data indicates high impa...

CVE-2017-11035

CVE-2017-11035 affects Qualcomm WLAN in Android devices (notably Pixel/Nexus) with a buffer overflow/information leak caused by incorrect initialization of WEXT callbacks and missing buffer-size checks. The vulnerability enables EoP via the WLAN path and is tracked as a Qualcomm WLAN issue in the...

CVE-2017-11042

CVE-2017-11042 affects Android for MSM, Firefox OS for MSM, and QRD Android builds with CAF Linux kernel, where ImsService and IQtiImsExt AIDL APIs lack access control. Root cause: insufficient access restrictions on these ImsService interfaces. Exploitation would be local (CVSS2/3 reflect LOCAL,...

CVE-2017-11087

CVE-2017-11087 affects libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android. The issue arises when the mediaserver path copies the output buffer to an application using the “filled length,” which can exceed the output buffer’s actual size, causing an information disclosure. Publicly...

CVE-2017-13164

The CVE-2017-13164 entry is an information disclosure vulnerability in the Android kernel Binder driver. Affected component: Android kernel (Binder). Root cause and details are limited in the provided documents, but the NVD entry assigns a Confidentiality impact of PARTIAL (CVSSv2) and HIGH (CVSS...

CVE-2017-18067

CVE-2017-18067 affects the Qualcomm Wireless network driver in Android Qualcomm components (CAF/Linux-based Android releases). The root cause is improper input validation when processing an encrypted authentication management frame (lim_send_auth_mgmt_frame()), leading to a buffer overflow. The d...

CVE-2017-6211

CVE-2017-6211: In Android for MSM, Firefox OS for MSM, QRD Android (CAF Linux kernel builds), a buffer overflow in the processing of a downlink supplementary services message is reported. The vulnerability is triggered remotely over the network and, according to the CVSS data, could lead to a com...

CVE-2018-6241

The CVE-2018-6241 issue affects the NVIDIA Tegra Gralloc module in the driver, where missing input validation in the registerbuffer API could allow arbitrary code execution, denial of service, or privilege escalation. The NVIDIA SHIELD TV security bulletin lists this CVE as high severity (base sc...

CVE-2018-9373

A possible out-of-bounds write exists in the TdlsexRxFrameHandle function of the MTK WLAN driver (specifically the Mediatek WLAN TDLS component in Google Android). The root cause is a missing bounds check , which could allow an attacker to achieve remote escalation of privilege without requiring ...

CVE-2022-20531

The provided connected documents confirm CVE-2022-20531 affects Android’s Telecom component, describing a side-channel information disclosure that lets an app determine if another app is installed without query permissions. This enables local information disclosure with no extra execution privile...

CVE-2023-35691

Technical details about CVE-2023-35691 are not publicly provided in the supplied documents. No concrete affected products, versions, or remediation are present. Monitor for updates.

CVE-2026-0027

A use-after-free vulnerability exists in the smmu_detach_dev function within arm-smmu-v3.c . This flaw allows for a possible out-of-bounds write , which could lead to local escalation of privilege for an attacker with System execution privileges. The vulnerability is present in Google Android com...

CVE-2014-7952

CVE-2014-7952 affects the Android backup/restore flow via ADB. The backup manager does not filter the data stream from apps’ BackupAgent, enabling a malicious BackupAgent (no Android permissions) to inject extra APKs into the backup archive. Upon restoration, the system installs the injected APKs...

CVE-2014-9929

CVE-2014-9929 refers to a Use of Out-of-range Pointer Offset vulnerability in WCDMA for Android CAF builds using the Linux kernel. Public entries describe the root cause as an out-of-range pointer offset (with at least one linked source labeling the issue as a Null pointer dereference). The vulne...

CVE-2016-8485

CVE-2016-8485 is an information-disclosure vulnerability affecting Android kernel components that include Qualcomm closed-source elements. The issue, as described in the provided documents, could allow a remote-access scenario to indirectly reveal data via the kernel’s handling, resulting in a hi...

CVE-2017-0744

CVE-2017-0744 is detailed in connected documents as an Elevation of Privilege (EoP) affecting Google device sound drivers, with a Low severity patch in the August 2017 OTA. The vulnerability is tied to NVIDIA firmware processing per the NVD entry for Android kernel, while Android bulletin section...

CVE-2017-11092

CVE-2017-11092 is an Android/AAF (KGSL) vulnerability in the Qualcomm graphics driver: the kgsl_ioctl_gpu_command path can trigger a Use After Free condition in the KGSL kernel driver on Android for MSM, Firefox OS for MSM, and QRD Android builds with CAF Linux kernels. The description notes a Us...

CVE-2017-14909

Technical details about CVE-2017-14909 are not publicly available in the provided documents. Monitor for updates from the connected sources.

CVE-2018-3565

CVE-2018-3565 affects Qualcomm WLAN/CAF Android devices where lim_send_sme_probe_req_ind() in the WLAN stack of the Linux kernel can overflow a buffer during probe request indication. The issue is documented across multiple sources as a buffer overflow in the Android CAF/Linux kernel path used fo...

CVE-2022-42536

Chromecast security bulletin (ANDROID CHROMECAST-2023-07-01) documents CVE-2022-42536 as a remote code execution affecting Chromecast devices. The issue is categorized under AMLogic Secure Monitor with high severity (CVSSv3.1: 9.8, network vector, no user interaction). The bulletin confirms a fun...

CVE-2014-9930

CVE-2014-9930 concerns a Use-After-Free vulnerability in the WCDMA stack on CAF Android releases that use the Linux kernel. Affected component: WCDMA subsystem; root cause: use-after-free memory error as described in the CVE description. Potential impact as per CVSS v3 metrics is High for Confide...

CVE-2017-11072

Summary: CVE-2017-11072 corresponds to an elevation-of-privilege vulnerability in Android's Partition table updater, affecting Google Pixel/Nexus devices. Affected component: Partition table updater in Android on CAF/Kernel stack with GPT header processing. Root cause: Buffer overflow when calcul...

CVE-2017-13171

The CVE-2017-13171 entry describes an elevation of privilege in the MediaTek performance service used by Android. Affected component: MediaTek performance service within the Android kernel stack. Root cause: local privilege escalation. Impact: attacker with local access could gain higher privileg...

CVE-2017-13247

CVE-2017-13247 affects the Pixel 2 bootloader (Android). The issue is a missing permission check in the bootloader that bypasses the carrier bootloader lock, enabling local elevation of privileges with user-privilege requirements. Exploitation is described as local with no user interaction requir...

CVE-2017-13308

The CVE-2017-13308 entry describes a buffer overflow in an sscanf call within the Mediatek MTK TS Abts code path (tscpu_write_GPIO_out and mtkts_Abts_write in mtk_ts_Abts.c) caused by improper input validation. This could enable local privilege escalation with System execution privileges; exploit...

CVE-2017-14907

CVE-2017-14907 describes a cryptographic weakness in Android for MSM, Firefox OS for MSM, and QRD Android builds aligned with CAF Linux kernel, caused by a flaw in deriving the disk encryption key that reduces cryptographic strength. Publicly documented as a critical encryption bug affecting Qual...

CVE-2017-6276

CVE-2017-6276 affects NVIDIA mediaserver/OpenMax component (LIBNVMMLITE_VIDEO.SO). The issue is a use-after-free caused by referencing memory after it has been freed, leading to potential denial of service and possible elevation of privileges. NVIDIA’s NVIDIA SHIELD Tablet bulletin lists CVE-2017...

CVE-2017-6281

CVE-2017-6281 affects NVIDIA libnvomx and is described as a possible out-of-bounds write caused by improper input validation, leading to local elevation of privilege. The NVIDIA SHIELD TV advisory lists Libnvomx as the vulnerable component and rates the issue as EoP (High). Affected product: SHIE...