1555 matches found
CVE-2017-13303
CVE-2017-13303 is a memory information-disclosure vulnerability in the Broadcom bcmdhd driver used by Android kernel. Affected component: Broadcom bcmdhd driver; root cause: information disclosure vulnerability in that driver. Impact per sources: partial confidentiality breach with no integrity/a...
CVE-2017-6281
CVE-2017-6281 affects NVIDIA libnvomx and is described as a possible out-of-bounds write caused by improper input validation, leading to local elevation of privilege. The NVIDIA SHIELD TV advisory lists Libnvomx as the vulnerable component and rates the issue as EoP (High). Affected product: SHIE...
CVE-2017-6295
Affected software/hardware: NVIDIA TrustZone Software (Keymaster) in NVIDIA SHIELD TV SE 6.2 and earlier. Vulnerability: reads data past the end or before the beginning of the intended buffer, potentially leading to denial of service or information disclosure. Impact/Severity: rated high (CVE-201...
CVE-2017-6296
NVIDIA CVE-2017-6296 affects the TrustZone DRM application in NVIDIA SHIELD TV. The issue is a TOCTOU vulnerability that may lead to denial of service or privilege escalation. Public details identify SHIELD TV SE 6.2 and earlier as affected; NVIDIA’s bulletin indicates updating to SE 6.3 to mitig...
CVE-2017-8245
CVE-2017-8245 affects Android releases from CAF using the Linux kernel. The issue occurs while processing a voice SVC request with a payload size that overflows its declared size, causing an out-of-bounds memory copy. The initial documents provide no vendor/version specifics beyond CAF Android an...
CVE-2017-9704
CVE-2017-9704 concerns CAF Android kernels (Android for MSM, Firefox OS for MSM, QRD Android) where there is no synchronization between msm_vb2 buffer operations, enabling a use-after-free condition. Root cause: missing synchronization in buffer handling within the kernel component msm_vb2. Affec...
CVE-2018-11280
CVE-2018-11280 affects Android CAF builds (Linux kernel in Android for MSM, Firefox OS for MSM, QRD Android). The vulnerability arises from missing size validation for NAT entry input during user-space processing, which could allow memory exhaustion when input size exceeds the maximum. Impact is ...
CVE-2018-12006
The CVE-2018-12006 entry applies to CAF Android releases (Android for MSM, Firefox OS for MSM, QRD Android) that use the Linux kernel. Root cause: uninitialized padding in a display function. Impact: local attackers with no privileges may access leaked data (information disclosure). Exploitation ...
CVE-2018-12010
CVE-2018-12010: Concrete details in connected docs show a stack overflow with memory corruption in the trustzone region affecting Android releases using CAF’s Linux kernel. The root cause is an absence of length sanity checks in the kernel path, leading to potential local impact on trustzone. Rep...
CVE-2021-0451
In CVE-2021-0451, the Titan M chip firmware contains an issue where uninitialized data can disclose stack memory, enabling local information disclosure with System execution privileges. The impact is described as requiring no user interaction. Affected software areas include the Titan M component...
CVE-2026-0031
CVE-2026-0031 affects Google Android’s kernel code (mem_protect.c) with an out-of-bounds write caused by an integer overflow. This vulnerability allows local privilege escalation without user interaction. Public references indicate Android kernel fixes/updates were released (and related advisorie...
CVE-2014-9930
CVE-2014-9930 concerns a Use-After-Free vulnerability in the WCDMA stack on CAF Android releases that use the Linux kernel. Affected component: WCDMA subsystem; root cause: use-after-free memory error as described in the CVE description. Potential impact as per CVSS v3 metrics is High for Confide...
CVE-2014-9941
Technical details for CVE-2014-9941 are not publicly provided in the supplied documents. No specific affected products, root cause, or fixes are present here; monitor for updates from official sources.
CVE-2017-11028
CVE-2017-11028 affects the Android MSM ISP Camera driver; the vulnerability allows leakage of contents from an arbitrary kernel address to userspace via msm_isp_get_stream_common_data(). Connected sources confirm this is an information-disclosure issue in the Camera subsystem within Android/Linux...
CVE-2017-11035
CVE-2017-11035 affects Qualcomm WLAN in Android devices (notably Pixel/Nexus) with a buffer overflow/information leak caused by incorrect initialization of WEXT callbacks and missing buffer-size checks. The vulnerability enables EoP via the WLAN path and is tracked as a Qualcomm WLAN issue in the...
CVE-2017-13245
CVE-2017-13245 is an Elevation of Privilege vulnerability in the Android Upstream kernel audio driver (kernel component). The Android Pixel/Nexus bulletin and CVE records identify the issue as a local EoP in the Audio driver within the Android kernel, with patched AOSP versions referenced (patch ...
CVE-2017-14896
The CVE affects Android devices using Qualcomm GUD mobicore driver (Android for MSM/CAF builds) where a memory allocation occurs without validating length, causing an undersized buffer and potential kernel memory overwrite. Root cause: missing length-field validation in the mobicore driver. Impac...
CVE-2017-15828
CVE-2017-15828 affects CAF builds of Android (Android for MSM, Firefox OS for MSM, QRD Android) running on the Linux kernel. The vulnerability is an integer overflow during keystore access in LK, which may lead to a buffer overflow. Public references in the provided documents confirm the issue an...
CVE-2017-18054
CVE-2017-18054 describes a buffer overflow risk in Qualcomm WMA within Android CAF builds, caused by improper input validation for num_vdev_mac_entries in wma_pdev_hw_mode_transition_evt_handler() and the value received from firmware. The vulnerability affects Android for MSM, Firefox OS for MSM,...
CVE-2017-18069
CVE-2017-18069 affects Android for MSM, Firefox OS for MSM, and QRD Android builds that use CAF Linux kernel, where an improper message length calculation in oem_cmd_handler() while processing a WLAN_NL_MSG_OEM netlink message leads to a buffer overread. Public data lists CVSS base scores around ...
CVE-2017-8269
CVE-2017-8269 affects the Qualcomm IPA driver (IPA WAN) with a userspace-controlled non-null-terminated parameter in the IPA WAN ioctl, exposing kernel memory on CAF/Linux-based Android builds. Root cause: improper handling of a userspace parameter in the IPA WAN ioctl. Impact: kernel memory expo...
CVE-2017-9698
CVE-2017-9698 relates to Android for MSM, Firefox OS for MSM, and QRD Android builds based on CAF Linux kernels. The vulnerability stems from improperly specified offset/size values for a submission command, which can trigger a math operation overflow and lead to access to arbitrary memory. The c...
CVE-2018-11301
CVE-2018-11301 describes an integer overflow caused by a missing buffer-length check while processing debug log events from firmware in Android CAF builds using the Linux kernel, affecting Qualcomm WLAN Host components across Android releases such as Android for MSM, Firefox OS for MSM, and QRD A...
CVE-2018-13893
CVE-2018-13893 affects Android platforms built on CAF Linux kernels, with the root cause described as out-of-bounds access when copying masks to userspace due to using an old value of the msg mask table count. The CVSS3 vector (LOCAL, LOW CIA/IIA, HIGH impact) indicates local access is required a...
CVE-2018-5846
CVE-2018-5846 affects the IPA driver in Android CAF (Android for MSM, Firefox OS for MSM, QRD Android) on Linux kernels. The issue is a Use-After-Free in the IPA driver that can occur when IPA IOCTLs IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_ADD/IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_DEL/IPA_IOC_NOTIFY_WAN_EM...
CVE-2020-0043
CVE-2020-0043 involves the FPC Fingerprint TEE on Android. In authorize_enrol of fpc_ta_hw_auth.c there is a missing bounds check causing an out-of-bounds read, leading to possible local information disclosure with system privileges and no user interaction required. Affected class: Android kernel...
CVE-2021-0460
CVE-2021-0460 affects Google's FingerTipS touchscreen driver in the Android kernel. The root cause is an integer overflow causing an out-of-bounds read in fts_driver_test_write, enabling a local attacker to disclose kernel data. Exploitation requires ability to execute low-privileged code; user i...
CVE-2025-36887
CVE-2025-36887 affects the function wl_cfgscan_update_v3_schedscan_results() in wl_cfgscan.c, where an out-of-bounds write results from an incorrect bounds check. This could enable local escalation of privilege with no extra execution privileges required and no user interaction. Multiple sources ...
CVE-2026-0140
CVE-2026-0140 describes a potential out-of-bounds read in RtpPacket::decodePacket caused by an integer overflow that could lead to remote information disclosure. Exploitation requires user interaction; no remote code execution is stated. Connected sources (NVD, ENISA EUVD, OSV, PT-OSSecurity, And...
CVE-2014-9944
CVE-2014-9944 affects the Secure File System in all Android CAF builds using the Linux kernel. The issue is described as an Integer Overflow that could lead to a Buffer Overflow. Available sources note the vulnerability at a high impact level (CVSSv3 base score 7.8; CVSSv2 9.3) with local attack ...
CVE-2014-9952
CVE-2014-9952 concerns the Android Secure File System in CAF builds using the Linux kernel, described as a capture‑replay vulnerability. Publicly provided details in the sources indicate the issue affects the Secure File System component and could impact confidentiality, integrity, and availabili...
CVE-2015-9011
CVE-2015-9011 is a privilege-escalation vulnerability reported in Qualcomm closed-source components affecting the Android kernel. The connected sources confirm the issue as elevation of privilege, with Android kernel involvement and no publicly disclosed exploit details in the provided documents....
CVE-2016-8485
CVE-2016-8485 is an information-disclosure vulnerability affecting Android kernel components that include Qualcomm closed-source elements. The issue, as described in the provided documents, could allow a remote-access scenario to indirectly reveal data via the kernel’s handling, resulting in a hi...
CVE-2017-11030
CVE-2017-11030 affects Android for MSM and related CAF/Linux-kernel builds, via the HDMI video driver function hdmi_edid_sysfs_rda_res_info() that allows an arbitrary write into kernel memory from userspace. The issue is tied to Android devices using these CAF/kernel HDMI components, potentially ...
CVE-2017-13247
CVE-2017-13247 affects the Pixel 2 bootloader (Android). The issue is a missing permission check in the bootloader that bypasses the carrier bootloader lock, enabling local elevation of privileges with user-privilege requirements. Exploitation is described as local with no user interaction requir...
CVE-2017-14878
CVE-2017-14878 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel. The issue is a length variable used to copy data that is only 8 bits, which can be exceeded and leads to a denial of service. Impact is Denial of Service (availability impact HIGH per CVSS)....
CVE-2017-15822
CVE-2017-15822 affects Qualcomm-based Android devices (MSM) including Firefox OS for MSM and QRD Android builds within CAF releases prior to the 2018-04-05 security patch level. Description: a buffer overflow may occur while processing an 802.11 management frame in the Linux kernel components use...
CVE-2017-15843
CVE-2017-15843 describes a race condition in the Qualcomm bus driver, specifically msm_bus_floor_vote_context(), which can lead to a double-free in CAF Android-for-MSM builds on Linux kernels. The vulnerability affects Android releases that use the affected bus driver; CVSS data indicates Local a...
CVE-2017-18158
CVE-2017-18158 is a buffer overflow/array bounds issue in Android builds based on CAF with the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) that could occur while flashing images. Root cause: improper memory handling leading to overflows. Impact per documented data: local impac...
CVE-2017-6288
CVE-2017-6288 affects NVIDIA libnvrm in Android. It describes an out-of-bounds read caused by a missing bounds check, enabling local information disclosure. The issue is identified as a Information Disclosure/DoS-like risk on Android devices (Pixel/Nexus contexts cited) with a reported MEDIUM bas...
CVE-2017-9691
CVE-2017-9691 is a Qualcomm MobiCore (Trustonic) driver issue via a race condition in the debug message output path on Android devices (MSM, Firefox OS for MSM, QRD Android). The vulnerability allows access to already freed memory, exposing potential confidentiality impact. The connected document...
CVE-2018-5842
CVE-2018-5842 describes a WLAN privilege/Arbitrary address write in Qualcomm WLAN on Android devices (CAF Android for MSM, Firefox OS for MSM, QRD Android) due to the WLAN firmware sending incorrect data to the WLAN driver. The root cause is a data handling flaw in the interaction between comprom...
CVE-2018-6271
CVE-2018-6271 affects NVIDIA Tegra OpenMax driver (libnvomx). The issue arises from delivering extra data with buffers and inadequate validation, enabling potential denial of service or escalation of privileges. Affected products are Jetson TX1/TX2 running Linux for Tegra; NVIDIA lists CVE-2018-6...
CVE-2018-9367
CVE-2018-9367 describes a potential out-of-bounds write in the MediaTek Cameratool CCAP component (function FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS within Meta_CCAP_Para.cpp). The underlying issue is improper input validation, which could enable local escalation of privilege with no additional exe...
CVE-2018-9368
Concretely affects MediaTek mtksocoaudio (debugfs) in the Android stack. The vulnerability is caused by a missing bounds check combined with weakened SELinux policies in the mtksocoaudio debugfs, enabling an arbitrary kernel memory write. Impact: local privilege escalation to a system/privileged ...
CVE-2019-2001
CVE-2019-2001 affects the Android kernel iomem implementation. The issue is that the permissions on /proc/iomem were world-readable, enabling local information disclosure without any execution privileges or user interaction. The vulnerability is a local information disclosure (ID) with impact on ...
CVE-2019-9469
CVE-2019-9469 affects the Android kernel Titan‑M component. A flaw in km_compute_shared_hmac (km4.c) allows an out‑of‑bounds write due to input validation issues, enabling local privilege escalation with no user interaction. CVSS data in NVD indicates LOCAL access, LOW attack complexity, with HIG...
CVE-2021-0459
CVE-2021-0459 affects Google Android kernel code, specifically fts_driver_test_write in fts_proc.c. It is due to a missing bounds check, causing an out-of-bounds read that can disclose local information. Exploitation requires local access and does not require user interaction, with the potential ...
CVE-2021-0525
CVE-2021-0525 affects the Android memory management driver. The underlying issue is a use-after-free that enables an out-of-bounds write, leading to local escalation of privilege with no additional execution privileges required and no user interaction. Exploitation status is not detailed in the p...