CVE-2021-0458

CVE-2021-0458 affects the FingerTipS touch screen driver in the Android kernel. The issue is an out-of-bounds read caused by an integer overflow in the driver, which can lead to local information disclosure with System privileges required. Exploitation does not require user interaction. Public de...

CVE-2021-0464

CVE-2021-0464 affects the Android kernel component sound_trigger_event_alloc in platform.h, with a heap buffer overflow causing an out-of-bounds write that could lead to local privilege escalation without user interaction. The linked Red Hat/NVD entries confirm the issue and classify it as Elevat...

CVE-2021-0494

CVE-2021-0494 affects the Android memory management driver on Android SoCs. The issue is an out-of-bounds write caused by an integer overflow, enabling local escalation of privilege with no user interaction required. The only details provided in the connected sources are that the vulnerability is...

CVE-2021-0495

CVE-2021-0495 : In Android, a memory management driver has an out-of-bounds write due to uninitialized data, enabling local elevation of privilege. Exploitation is Local with no user interaction required; no explicit exploit details or patch versions are provided in the connected documents.

CVE-2024-56191

The CVE-2024-56191 issue affects Google Pixel Watch, rooted in an integer overflow in dhd_process_full_gscan_result (dhd_pno.c). The vulnerability allows local elevation of privilege without additional execution privileges and does not require user interaction. Affected component/file: dhd_pno.c ...

CVE-2026-0028

CVE-2026-0028 affects the Linux kernel code path __pkvm_host_share_guest in mem_protect.c, where an integer overflow can cause an out-of-bounds write. This leads to local privilege escalation without user interaction. The existing references in the connected documents (Android kernel changes and ...

CVE-2015-9006

Technical details for CVE-2015-9006 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-9013

CVE-2015-9013 is described as an elevation-of-privilege vulnerability in Qualcomm closed‑source components used by Android, affecting the Android kernel. The connected docs identify the issue as a Qualcomm/Android kernel problem but do not provide concrete exploit details, affected versions beyon...

CVE-2016-10297

CVE-2016-10297 affects TrustZone in CAF Android kernels, describing a Time-of-Check Time-of-Use race condition. Impact is rated High for confidentiality, integrity, and availability; exploitation is local with high complexity and user interaction required. The connected documents do not provide a...

CVE-2016-10298

CVE-2016-10298 is an elevation-of-privilege vulnerability affecting Android kernel via Qualcomm closed-source components. Affected product: Android (kernel level). Root cause: flaw in Qualcomm closed-source components integrated with Android leading to unauthorized privilege escalation. Impact: c...

CVE-2016-10393

CVE-2016-10393 describes an integer-overflow in Android for MSM, Firefox OS for MSM, and QRD Android builds (CAF Linux kernel) when processing oversized clips. This causes the allocated buffer to be smaller than needed, enabling potential buffer overflow during subsequent operations. The vulnerab...

CVE-2016-11028

CVE-2016-11028 : A stack-based buffer overflow exists in the OTP TrustZone trustlet on Samsung mobile devices with Exynos AP chipsets (firmware up to 2016-09-13). Affected Samsung IDs are SVE-2016-7173 and SVE-2016-7174. The issue, described across multiple sources, does not provide explicit expl...

CVE-2016-11049

CVE-2016-11049 affects Samsung mobile devices with software up to 2016-01-16 on Shannon333/308/310 chipsets. The vulnerability arises from an error in managing key information, enabling retrieval and modification of IMEI. The issue is documented across multiple sources (NVD, Red Hat, CNVD, CVE re...

CVE-2017-11012

The CVE-2017-11012 issue is described across multiple sources as a stack-based buffer overflow in Qualcomm WLAN components used by Android on MSM platforms, triggered by processing a specially crafted QCA_NL80211_VENDOR_SUBCMD_ENCRYPTION_TEST cfg80211 vendor command. Connected CNVD entry attribut...

CVE-2017-11024

CVE-2017-11024 describes a race condition in the rmnet USB control driver within Android/CAF Linux-kernel based builds on MSM platforms, which can lead to a Use-After-Free condition. Affected: Android MSM, Firefox OS for MSM, and QRD Android releases using CAF Linux kernel. Impact is described as...

CVE-2017-11075

CVE-2017-11075 concerns a use-after-free in wdsp_glink_write() when cmd_pkt and reg_pkt are invoked from different userspace threads on Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds prior to the CAF kernel patch level 2018-04-05. Affected components include the Audio DSP dr...

CVE-2017-11085

CVE-2017-11085 affects Android on MSM platforms (CAF Linux kernel lineage) and is tied to the Qualcomm audio driver component msm-audio-effects-q6-v2.c. The root cause is an integer overflow in msm_audio_effects_virtualizer_handler that leads to a buffer overflow. This could enable memory corrupt...

CVE-2017-13246

CVE-2017-13246 affects the Android kernel network driver (Upstream kernel). It is described as an information‑disclosure vulnerability in the Network driver, with the Pixel/Nexus Android bulletin listing it under Kernel components as a Moderate‑severity issue. No concrete patch version or remedia...

CVE-2017-14884

CVE-2017-14884 affects Qualcomm WLAN components in Android CAF builds using the Linux kernel. Root cause: missing bounds check on data_len in WLANQCMBR_McProcessMsg, potentially causing a buffer overflow in WLANFTM_McProcessMsg. Impact: elevation of privilege on a locally exploited path within Qu...

CVE-2017-14887

CVE-2017-14887: In Android for MSM, Firefox OS for MSM, QRD Android, and all CAF Linux-kernel Android releases, processing messages of type eWNI_SME_MODIFY_ADDITIONAL_IES can trigger an integer overflow that may lead to a heap buffer overflow. Affected platforms include Android for MSM and relate...

CVE-2017-14892

CVE-2017-14892 affects Android for MSM, Firefox OS for MSM, and QRD Android builds prior to 2017-09-19. The issue stems from not properly validating the return value of q6asm_open_shared_io() in msm_pcm_hw_params(), which can lead to a dangling pointer access. The available sources describe the v...

CVE-2017-15817

CVE-2017-15817 is a Qualcomm WLAN remote code execution vulnerability in CAF Android builds using the Linux kernel. If an access point sends a challenge text longer than 128 bytes, the host driver can fail validation, potentially allowing remote code execution via WLAN. Affected: Qualcomm WLAN co...

CVE-2017-18052

CVE-2017-18052 affects Qualcomm WLAN in Android devices (CAF Linux kernel line) via the wma_mgmt_tx_bundle_completion_handler() function. The root cause is improper input validation for cmpl_params->num_reports, param_buf->desc_ids, and param_buf->status received from firmware, leading t...

CVE-2017-18057

CVE-2017-18057: In Android for MSM, Firefox OS for MSM, QRD Android, with CAF Linux kernels, improper input validation for vdev id in wma_nlo_scan_cmp_evt_handler() (received from firmware) can lead to an out-of-bounds memory read. Affected platforms and components are described in the NVD entry;...

CVE-2017-18058

CVE-2017-18058 describes an out-of-bounds memory read in Qualcomm WLAN when processing wow_buf_pkt_len in wma_wow_wakeup_host_event(), triggered by firmware input. Affected platforms include Android for MSM, Firefox OS for MSM, QRD Android, and CAF Linux-based Android releases. Root cause is impr...

CVE-2017-18070

CVE-2017-18070 describes a vulnerability in Qualcomm WLAN on Android (CAF) where, in the function wma_ndp_end_response_event_handler() , the local variable len_end_rsp (uint32) can overflow if event->num_ndp_end_rsp_per_ndi_list is very large. This overflow can lead to a heap overwrite of the ...

CVE-2017-6426

CVE-2017-6426 is a documented information-disclosure vulnerability in the Qualcomm SPMI driver (Android kernel). A local-attack requires user interaction and could let a malicious local app access data outside its permission levels. Affected are Pixel and Pixel XL devices per the CVE list. The so...

CVE-2017-9690

CVE-2017-9690 affects Qualcomm QBT1000 driver in Android devices (MSM/Linux kernel) via the qbt1000 ioctl handler. The vulnerability arises from an incorrect buffer size check that allows an integer overflow, which can lead to a buffer overflow and local elevation of privileges (EoP) within a pri...

CVE-2017-9701

Technical details about CVE-2017-9701 are not publicly available in the provided connected documents; the information comes from the initial description only. Monitor for updates.

CVE-2017-9709

CVE-2017-9709 is a privilege-escalation issue in telephony affecting Android for MSM/CAF Linux-kernel builds. Affected components are telephony-related in Android variants (Android for MSM, Firefox OS for MSM, QRD Android) with CAF kernel usage. The vulnerability is described as enabling elevatio...

CVE-2017-9719

CVE-2017-9719 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel with the MDSS HDMI CEC kernel driver. The issue is a buffer overflow in HDMI CEC parsing when the frame size is out of range, potentially enabling local code execution with high impact on conf...

CVE-2018-11265

CVE-2018-11265 concerns a buffer overflow in Qualcomm MProc when Android CAF/Linux kernel handles log_buf with a uint64_t; the log_buf pointer may access memory beyond bounds when incremented in memcpy. Multiple sources (NVD entry and CNVD/PRION-style mappings) associate this with Android on Pixe...

CVE-2018-11296

CVE-2018-11296 is a Qualcomm WLAN Host buffer overflow affecting Android on Pixel/Nexus devices, caused by a buffer overwrite while processing a firmware message in the WLAN handler. The vulnerability is in the Qualcomm WLAN Host within CAF/Linux-based builds. Impact is memory corruption potentia...

CVE-2018-11823

CVE-2018-11823 affects CAF Android releases (Android for MSM, Firefox OS for MSM, QRD Android) based on the Linux kernel. The vulnerability is a double-free in the power module triggered by freeing device memory during driver probe failure. Root cause described as improper memory handling in the ...

CVE-2018-11898

CVE-2018-11898 affects Qualcomm WLAN host components in CAF Android builds (Android for MSM/CAF Linux kernel). The issue is an out-of-bounds read when processing a start BSS request if the SSID length exceeds the maximum, leading to potential memory access violations. The NVD entry and related re...

CVE-2018-11960

CVE-2018-11960. A use-after-free condition in the Qualcomm HWEngines component (SPS driver) used in CAF Android builds (Linux kernel) can cause kernel errors. Affected context and wording in connected records indicate the issue arises within the SPS driver in Android CAF environments across affec...

CVE-2018-3586

CVE-2018-3586 describes an integer overflow that can overflow to a buffer overflow in the ADSPRPC heap manager used by CAF Qualcomm components on Android (Android for MSM, Firefox OS for MSM, QRD Android) running the Linux kernel. Affected: Qualcomm ADSPRPC heap manager within CAF Android builds....

CVE-2018-5825

CVE-2018-5825 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds with CAF Linux kernels prior to the 2018-04-05 patch level. The kernel IPA driver contains a Use-After-Free condition in the IPA subsystem, as described in the NVD record. The vulnerability is rated with CV...

CVE-2018-5854

CVE-2018-5854 is a stack-based buffer overflow affecting the Qualcomm bootloader used in CAF/Linux-based Android deployments (fastboot). The vulnerability is classified as an Elevation of Privilege (EoP) issue with High/Critical impact, occurring in the bootloader component and enabling local pri...

CVE-2018-5858

CVE-2018-5858 concerns an out-of-bounds access in the audio debugfs for Android CAF builds using the Linux kernel, affecting Android for MSM, Firefox OS for MSM, and QRD Android prior to the 2018-07-05 security patch level. The issue is triggered via the audio debugfs component of the kernel, wit...

CVE-2021-0452

The CVE-2021-0452 entry concerns the Titan M chip firmware. It describes a stack memory disclosure due to uninitialized data, enabling local information disclosure with system privileges required. Exploitation is described as local with no user interaction needed. The issue is tied to Android ker...

CVE-2025-48623

CVE-2025-48623 concerns the Linux kernel’s pkvm path in init_pkvm_hyp_vcpu, where an input validation error can cause an out-of-bounds write. The Red Hat/EUVD/NVD/NVD-enrichment entries corroborate a local privilege-escalation impact due to this improper validation, with no user interaction requi...

CVE-2014-9928

Technical details are not publicly available in the provided documents. Monitor for updates and new disclosures regarding CVE-2014-9928.

CVE-2015-9012

CVE-2015-9012 describes an elevation of privilege in Qualcomm closed‑source components within Android, affecting the Android kernel. The linked records consistently identify the issue as a privilege escalation vulnerability in Qualcomm components used by Android devices, with no public exploit de...

CVE-2016-0833

Technical details about CVE-2016-0833 are not publicly available in the supplied documents. Monitor for updates from official advisories.

CVE-2016-11025

CVE-2016-11025 affects Samsung mobile devices with Exynos AP chipsets (software through 2016-09-13). The issue is a heap-based memcpy overflow in the OTP service, pegged as high-severity with CVSS v3.1: CRITICAL (9.8) and network attack vector. The problem is linked to the OTP service boundary ch...

CVE-2017-11080

CVE-2017-11080 is a local buffer overflow vulnerability described for Android on MSM/CAF platforms (Linux kernel path) when processing a user-supplied sparse image and the sparse header block size equals 4294967296. The issue affects Qualcomm bootloader components as mapped in the CVE references,...

CVE-2017-11082

CVE-2017-11082 affects Qualcomm WLAN in Android on MSM (and related CAF/Linux kernel builds) where a race condition in the firmware loading routine could lead to a buffer overflow if multiple user-space threads update the WLAN firmware file via sysfs. The root cause is a race in the firmware load...

CVE-2017-13172

CVE-2017-13172 is a local, Elevation of Privilege vulnerability in the MediaTek Bluetooth driver used by Android kernels. The issue affects the Bluetooth subsystem of MediaTek components and enables privilege escalation without requiring user interaction; CVSSv3 base score 7.8 (HIGH). The NVD ent...

CVE-2017-13213

CVE-2017-13213 is a Broadcom bcmdhd driver Elevation of Privilege flaw affecting Android devices (Broadcom WiFi driver in the Android kernel). The public records describe a local-elevation vulnerability in the bcmdhd component, enabling an attacker with local access to escalate privileges on affe...