CVE-2026-0032

A logic error in multiple functions within the mem_protect.c file leads to a possible out-of-bounds write . This vulnerability allows for local escalation of privilege without requiring additional execution privileges or user interaction. Affected software includes Google Android and the hyperv-d...

CVE-2021-0459

CVE-2021-0459 affects Google Android kernel code, specifically fts_driver_test_write in fts_proc.c. It is due to a missing bounds check, causing an out-of-bounds read that can disclose local information. Exploitation requires local access and does not require user interaction, with the potential ...

CVE-2021-0460

CVE-2021-0460 affects Google's FingerTipS touchscreen driver in the Android kernel. The root cause is an integer overflow causing an out-of-bounds read in fts_driver_test_write, enabling a local attacker to disclose kernel data. Exploitation requires ability to execute low-privileged code; user i...

CVE-2023-4164

CVE-2023-4164 affects Google Pixel Watch. It describes a local information-disclosure vulnerability caused by a missing permission check that could expose health data without extra privileges. Public details confirm the issue but do not provide exploit specifics. Impact is focused on confidential...

CVE-2026-0140

A vulnerability exists in the libpixelimsmedia component on Google Pixel devices, where an integer overflow in the RtpPacket::decodePacket function can lead to an out-of-bounds read . This flaw could result in remote information disclosure without requiring additional execution privileges, though...

CVE-2014-9923

CVE-2014-9923 is described in the provided records as a buffer copy without checking the input size, located in NAS for CAF Android releases using the Linux kernel. The vulnerability path is not fully detailed beyond this memory-unsafe copy, and exploitation details are not provided in the suppli...

CVE-2014-9934

CVE-2014-9934 : A PKCS#1 v1.5 signature verification routine in all Android CAF releases using the Linux kernel may not check padding, potentially enabling signature forgery or bypass of integrity checks. The NVD entry reports a high impact (CVSS v3.0: HIGH, LOCAL attack vector with high confiden...

CVE-2014-9942

CVE-2014-9942 affects the boot path in all Android releases from CAF that use the Linux kernel. The root cause is a Use of Uninitialized Variable in the boot code, which could lead to memory corruption or unpredictable behavior. The NVD CVSSv3 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a...

CVE-2017-11032

The CVE-2017-11032 issue affects Android builds using CAF Linux kernels (Android MSM/CAF variants). It describes a double-free in the service_locator_send_msg() path when kmalloc fails to allocate memory for resp/req pointers, potentially enabling local privilege elevation. Affected components ar...

CVE-2017-11090

CVE-2017-11090 involves a buffer overread in the WLAN PMKID handling path (__wlan_hdd_cfg80211_set_pmksa) when a PMKID shorter than WLAN_PMKID_LEN is provided. Affected platforms include Android for MSM, Firefox OS for MSM, QRD Android, and CAF-based Android builds using the Linux kernel. The roo...

CVE-2017-13303

CVE-2017-13303 is a memory information-disclosure vulnerability in the Broadcom bcmdhd driver used by Android kernel. Affected component: Broadcom bcmdhd driver; root cause: information disclosure vulnerability in that driver. Impact per sources: partial confidentiality breach with no integrity/a...

CVE-2017-15831

CVE-2017-15831 describes a vulnerability in Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux, where the function wma_ndp_end_indication_event_handler() performs no input validation on an event_info value from firmware. This can cause an integer overflow and potentially ...

CVE-2017-18068

CVE-2017-18068 involves an improper buffer length calculation in wma_roam_scan_filter() that can cause a buffer overflow. Affected are Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF with the Linux kernel. The issue is classified as EoP/High-impact (CVSS v3.0: 7.8) with loca...

CVE-2017-18069

CVE-2017-18069 affects Android for MSM, Firefox OS for MSM, and QRD Android builds that use CAF Linux kernel, where an improper message length calculation in oem_cmd_handler() while processing a WLAN_NL_MSG_OEM netlink message leads to a buffer overread. Public data lists CVSS base scores around ...

CVE-2017-6258

CVE-2017-6258 describes an elevation-of-privilege vulnerability in NVIDIA libnvmmlite_audio.so when running in the Android media server. The issue may cause an out-of-bounds write and could lead to local code execution in a privileged process. Affected product is Android; remediation is tied to A...

CVE-2017-6286

The CVE-2017-6286 issue affects NVIDIA libnvomx in Android and involves a possible out-of-bounds write due to a missing bounds check, enabling local escalation of privilege. Affected component: NVIDIA libnvomx (Android). Impact: local privilege escalation with potential arbitrary code execution w...

CVE-2017-6289

The CVE-2017-6289 issue affects NVIDIA Tegra TZ/Tee components exposed to the Android SHIELD TV platform. The connected NVIDIA security bulletin describes a vulnerability in the Tegra kernel driver that could allow a local malicious application to execute arbitrary code within the Trusted Executi...

CVE-2017-6294

CVE-2017-6294 is an NVIDIA TLK TrustZone OS issue in the logging driver for Tegra X1 TZ (TLK TrustZone OS). The vulnerability could allow arbitrary code execution, DoS, or privilege escalation with local access. Affected: SHIELD TV on Android; vulnerable component is the TLK TrustZone OS logging ...

CVE-2018-11262

CVE-2018-11262 is a critical issue documented in Qualcomm bootloader components (Android bulletin entry) with an associated out-of-bounds write risk in GPT patching caused by the TotalPart count exceeding GPT Header MaxPtCnt. The connected records indicate this CVE affects Qualcomm bootloader in ...

CVE-2018-13893

CVE-2018-13893 affects Android platforms built on CAF Linux kernels, with the root cause described as out-of-bounds access when copying masks to userspace due to using an old value of the msg mask table count. The CVSS3 vector (LOCAL, LOW CIA/IIA, HIGH impact) indicates local access is required a...

CVE-2018-5842

CVE-2018-5842 describes a WLAN privilege/Arbitrary address write in Qualcomm WLAN on Android devices (CAF Android for MSM, Firefox OS for MSM, QRD Android) due to the WLAN firmware sending incorrect data to the WLAN driver. The root cause is a data handling flaw in the interaction between comprom...

CVE-2018-5846

CVE-2018-5846 affects the IPA driver in Android CAF (Android for MSM, Firefox OS for MSM, QRD Android) on Linux kernels. The issue is a Use-After-Free in the IPA driver that can occur when IPA IOCTLs IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_ADD/IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_DEL/IPA_IOC_NOTIFY_WAN_EM...

CVE-2018-5906

CVE-2018-5906 affects Android releases (CAF builds) using the Linux kernel, specifically the debugfs module. The root cause is a missing validation of input size before copying into a buffer, leading to a potential buffer overflow. The vulnerability is described across multiple sources (NVD, CVE ...

CVE-2020-0065

CVE-2020-0065 corresponds to an improper authorization in the receiver component of the Android Suite Daemon (MediaTek section, Android 2020-05-01/05 patch levels). According to NVD, it supports LOCAL access with LOW attack complexity but can affect confidentiality (HIGH) with no integrity/availa...

CVE-2021-0457

CVE-2021-0457 targets the FingerTipS touch screen driver in the Android kernel and describes an out-of-bounds write caused by a heap buffer overflow, enabling local privilege escalation to SYSTEM with no user interaction required. Public sources (NVD entry, ZDI advisory) corroborate a heap-based ...

CVE-2014-9950

Technical details for CVE-2014-9950 are not publicly available in the provided documents; monitor for updates.

CVE-2015-9011

CVE-2015-9011 is a privilege-escalation vulnerability reported in Qualcomm closed-source components affecting the Android kernel. The connected sources confirm the issue as elevation of privilege, with Android kernel involvement and no publicly disclosed exploit details in the provided documents....

CVE-2017-11027

CVE-2017-11027 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel; the vulnerability arises when flashing a UBI image, where the size is not validated against the minimum header size, leading to uninitialized data access. The NVD entry characterizes impact ...

CVE-2017-11029

The CVE-2017-11029 issue is a Qualcomm Camera elevation vulnerability in Android on MSM devices. The vulnerability stems from the Camera CPP module Linux driver directly accessing a user-space buffer, with an unchecked ioctl_ptr->len used to copy data into a kernel buffer, enabling kernel memo...

CVE-2017-11073

CVE-2017-11073 is a Qualcomm Networking subsystem vulnerability affecting Android on MSM/CAF/Linux kernel builds. The qcacld pktlog allows a local attacker to map memory to user space via /proc/ath_pktlog/cld, enabling potentially exposure or modification of memory. Public details specify LOCAL a...

CVE-2017-13169

CVE-2017-13169 is an information-disclosure vulnerability in the Android kernel camera server. Affected: Android kernel (kernel camera server). Root cause not explicitly detailed in provided documents. Impact: confidentiality leakage (per CVSS metrics: partial in v2, high in v3; no integrity/avai...

CVE-2017-13174

CVE-2017-13174 is documented in the Android kernel (EDL) as an Elevation of Privilege issue. Connected sources confirm it is part of the 2017-12-05 patch level kernel fixes, but no detailed affected versions or explicit remediation steps are provided beyond this bulletin reference.

CVE-2017-13175

CVE-2017-13175 is a vulnerability in NVIDIA’s Tegra OpenMax component, specifically OMX.Nvidia.audio.render. The issue arises because mediaserver could reference memory after it has been freed, potentially enabling a denial of service or, in some scenarios, privilege escalation. The vulnerability...

CVE-2017-13238

CVE-2017-13238 corresponds to an information-disclosure issue in the HTC Android bootloader (XBLRamDump in the Bootloader). In XBLRamDump mode a debug feature can dump memory contents, enabling local information disclosure for an attacker with physical access and without additional privileges or ...

CVE-2017-14896

The CVE affects Android devices using Qualcomm GUD mobicore driver (Android for MSM/CAF builds) where a memory allocation occurs without validating length, causing an undersized buffer and potential kernel memory overwrite. Root cause: missing length-field validation in the mobicore driver. Impac...

CVE-2017-15814

The connected CNVD-2018-06014 entry describes an information-disclosure vulnerability in Google's Android Qualcomm Camera_v2 driver, caused by insufficient input validation in the driver. The issue is tied to the Camera_v2 components on Android devices using Qualcomm hardware and enables local in...

CVE-2017-15843

CVE-2017-15843 describes a race condition in the Qualcomm bus driver, specifically msm_bus_floor_vote_context(), which can lead to a double-free in CAF Android-for-MSM builds on Linux kernels. The vulnerability affects Android releases that use the affected bus driver; CVSS data indicates Local a...

CVE-2017-18158

CVE-2017-18158 is a buffer overflow/array bounds issue in Android builds based on CAF with the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) that could occur while flashing images. Root cause: improper memory handling leading to overflows. Impact per documented data: local impac...

CVE-2017-18169

Technical details about CVE-2017-18169 (affected products, root cause, impact, fixes) are not provided in the connected documents; sources only note a kernel denial-of-service in ashmem during cache maintenance. Monitor for updates.

CVE-2017-6283

CVE-2017-6283 affects NVIDIA Security Engine where the RSA keyslot read/write lock permissions are cleared on chip reset, potentially enabling information disclosure. The issue is documented across NVIDIA advisories (Jetson TX1/TX2/TK1 and SHIELD TV) as part of a set of vulnerabilities in the Sec...

CVE-2017-6285

CVE-2017-6285 affects NVIDIA libnvrm within Android on Pixel/Nexus devices, caused by a missing bounds check that enables a local information-disclosure through an out-of-bounds read. The vulnerability is listed under NVIDIA components in the Pixel/Nexus 2018-03-01 bulletin; mitigation requires p...

CVE-2017-6288

CVE-2017-6288 affects NVIDIA libnvrm in Android. It describes an out-of-bounds read caused by a missing bounds check, enabling local information disclosure. The issue is identified as a Information Disclosure/DoS-like risk on Android devices (Pixel/Nexus contexts cited) with a reported MEDIUM bas...

CVE-2018-3571

Summary: CVE-2018-3571 affects the Qualcomm KGSL driver used in Android CAF/Linux kernel releases. The vulnerability is a Use-After-Free condition that can occur when printing information about sparse memory allocations. Impact (as described): Local attacker could potentially cause memory corrupt...

CVE-2018-6271

CVE-2018-6271 affects NVIDIA Tegra OpenMax driver (libnvomx). The issue arises from delivering extra data with buffers and inadequate validation, enabling potential denial of service or escalation of privileges. Affected products are Jetson TX1/TX2 running Linux for Tegra; NVIDIA lists CVE-2018-6...

CVE-2021-0453

CVE-2021-0453 corresponds to a vulnerability in the Titan-M firmware (and related Android kernel component) where uninitialized data can cause a disclosure of stack memory, leading to local information disclosure with system-level privileges required. The public descriptions consistently state th...

CVE-2021-0490

CVE-2021-0490 affects Android’s memory management driver (MediaTek memory management driver) and describes an out-of-bounds write due to a missing bounds check that could enable local elevation of privilege with no user interaction. The issue is documented across sources including NVD and the 202...

CVE-2021-0492

The CVE-2021-0492 entry concerns Android’s memory management driver, where an out-of-bounds write due to a missing bounds check could enable local privilege escalation without user interaction. Concrete details across connected sources identify the affected component as the memory management driv...

CVE-2021-0493

CVE-2021-0493 is an Android memory management driver vulnerability described as an out-of-bounds write caused by a missing bounds check. The affected component is the memory management driver in Android, with potential local escalation of privilege and no additional execution privileges needed. T...

CVE-2021-0496

CVE-2021-0496 is an Android memory management driver vulnerability caused by a use-after-free leading to local privilege escalation. Affected: Android devices with the memory management driver. Impact: local code execution with high integrity/availability impact; attacker requires local access, n...

CVE-2026-0038

A logic error in multiple functions of mem_protect.c within the Google Android operating system allows for the execution of arbitrary code. This vulnerability can lead to a local escalation of privilege without requiring additional execution privileges or user interaction. While some documents re...