CVE-2017-13213

CVE-2017-13213 is a Broadcom bcmdhd driver Elevation of Privilege flaw affecting Android devices (Broadcom WiFi driver in the Android kernel). The public records describe a local-elevation vulnerability in the bcmdhd component, enabling an attacker with local access to escalate privileges on affe...

CVE-2017-13226

CVE-2017-13226 is a MediaTek MTK elevation-of-privilege vulnerability affecting the Android kernel. The connected records identify MTK as the component and describe an EoP issue with MediaTek MTK in Android devices (notably Pixel/Nexus in related bulletins). The documents do not disclose the exac...

CVE-2017-13306

CVE-2017-13306 is an elevation-of-privilege vulnerability in the Upstream kernel mnh driver affecting Android kernel components. The issue is categorized as EoP with a moderate severity in Android security bulletins, implying a privilege escalation path within the kernel module rather than user-s...

CVE-2017-15829

CVE-2017-15829 is a Qualcomm Graphics_Linux component vulnerability reported as a race condition in the GPU driver that can lead to a Use-After-Free. The issue is listed as Elevation of Privilege (EoP) and is associated with Qualcomm’s graphics stack on CAF Android builds using the Linux kernel. ...

CVE-2017-15844

CVE-2017-15844 affects CAF Android builds using the Linux kernel. During processing of the function that writes device values into flash, uninitialized memory can be written to flash. This can lead to information disclosure (CONFIDENTIALITY impact) with a local attacker, no user interaction requi...

CVE-2017-15862

CVE-2017-15862 is a Qualcomm WLAN vulnerability reported across Android CAF/Linux kernel builds. The issue arises in the function wma_unified_link_radio_stats_event_handler(), where the firmware-provided count of radio channels is not properly validated, potentially triggering an integer overflow...

CVE-2017-18053

CVE-2017-18053 affects Android for MSM/CAF Linux kernel environments and Qualcomm WLAN (Wma) via wma_p2p_lo_event_handler, where improper input validation of fix_param->vdev_id leads to potential out-of-bounds memory reads from firmware. Affected component is the WLAN stack (Wma), with impact ...

CVE-2017-18066

CVE-2017-18066 affects Android for MSM, Firefox OS for MSM, and QRD Android builds with CAF Linux kernels. The issue is a use-after-free in msm_core_ioctl(), a memory-management bug in MSM CORE, leading to potential elevation of privilege or other memory-corruption impacts. The CVSS data (3.0) in...

CVE-2017-6280

The CVE-2017-6280 entry concerns the NVIDIA driver and is described as an out-of-bounds read vulnerability that could disclose information. The public records show an NVIDIA component entry with this CVE, a CVSSv3 base score of 7.5 (HIGH) and a CVSSv2 base score of 5.0 (MEDIUM) from NVD, indicati...

CVE-2018-11260

CVE-2018-11260 affects Android CAF WLAN components in Android releases built on the CAF Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The issue is described as an integer overflow during processing of an FILS connection request, which can lead to a buffer overflow when the key ...

CVE-2018-11278

CVE-2018-11278 affects CAF Venus HW in Android for MSM, Firefox OS for MSM, and QRD Android builds. The vulnerability occurs when Venus HW decodes input bit stream buffers: it searches for a start code, and if the start code is not found in the entire buffer, the implementation may over-fetch bey...

CVE-2018-11832

CVE-2018-11832: A heap overflow in the PMIC function due to missing input-size validation affects CAF Android builds (Android for MSM, Firefox OS for MSM, QRD Android). Root cause: lack of input size validation before copying to a buffer. Impact: heap overflow as described in the CVE; exploitatio...

CVE-2018-11851

CVE-2018-11851 relates to a buffer-length calculation input validation flaw in CAF Qualcomm WLAN driver components, causing a possible out-of-bounds write to kernel stack. The vulnerability is documented as a local, impactful issue with high severity (NVD CVSS v2/3 vectors indicate LOCAL access, ...

CVE-2018-11863

The CVE-2018-11863 issue affects Android variants built on CAF Linux kernel. The root cause is a missing input length check when processing firmware data to determine the length of the WMA roam synch buffer, which can lead to a buffer overwrite during memcpy. The vulnerability is categorized unde...

CVE-2018-11878

CVE-2018-11878 affects Qualcomm WLAN HOST components in Android CAF/Linux-based WLAN stack. Description: a memory access error during processing of a WLAN driver command could allow a local attacker to exploit (per CVSS metrics: Local access, low complexity, with High impact on confidentiality, i...

CVE-2018-11886

CVE-2018-11886 affects Qualcomm WLAN host in Android CAF/linux-kernel WLAN stack. Root cause: missing validation when calculating MPDU data length leads to an integer overflow, then a buffer overflow in the WLAN function. Impact per sources is consistent with local, low-privilege exploitation and...

CVE-2018-11918

CVE-2018-11918 affects CAF Android kernel builds (Android for MSM, Firefox OS for MSM, QRD Android) where memory allocated during probe is released by the kernel on error. The description and connected records confirm the issue resides in the Linux kernel handling of probe failures, with no expli...

CVE-2018-12014

CVE-2018-12014 describes a null pointer dereference in the NAT module of the Linux kernel used in CAF Android releases (Android for MSM, Firefox OS for MSM, QRD Android) via a freed pointer without a NULL assignment. In the NVD listing, the vulnerability is characterized as a local vulnerability ...

CVE-2018-3572

CVE-2018-3572 is supported by multiple connected records that confirm a vulnerability in Qualcomm audio drivers on Android devices (CAF Android for MSM, Firefox OS for MSM, QRD Android) using the Linux kernel. The root cause is an out-of-bounds risk where an index for a DSP buffer is not checked ...

CVE-2018-3574

CVE-2018-3574 describes a vulnerability in CAF Android kernel userspace cache maintenance for ION buffers where the ION_FLAG_SECURE flag is not set, causing the kernel to perform cache maintenance on memory that does not belong to HLOS. The provided sources (NVD entry and Debian/Ubuntu security t...

CVE-2018-5820

CVE-2018-5820 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android on CAF builds using Linux kernel prior to the 2018-04-05 patch level. The issue arises in wma_tbttoffset_update_event_handler(), where a firmware-supplied parameter is used to allocate a local buffer without prope...

CVE-2018-5890

CVE-2018-5890 affects Android CAF builds (Android for MSM, Firefox OS for MSM, QRD Android) where fdt_totalsize of the current device tree is reported as 0, bypassing a check for a valid device tree. Described impact: bypass of device-tree validation before patch level 2018-06-05. Patch level 201...

CVE-2018-9514

CVE-2018-9514 is a kernel vulnerability affecting Android devices, caused by a Use After Free in sdcardfs_open (file.c) that could enable local escalation of privilege without user interaction. The issue is within the Android kernel and is listed in the 2018-10 Android security bulletin; patch gu...

CVE-2018-9567

CVE-2018-9567 affects Pixel devices: a bug in verified boot causes the certificate fingerprint to appear identical despite different signing keys, enabling local privilege escalation with no user interaction. The Android Security Bulletin (Dec 2018) indicates patches at the 2018-12-01 and 2018-12...

CVE-2019-9467

CVE-2019-9467 affects Google's Android Bootloader (Bootloader/Android kernel component). The issue is a kernel command injection caused by missing command sanitization in the Bootloader, which can enable local privilege escalation to SYSTEM. Exploitation requires local access with high privileges...

CVE-2019-9471

CVE-2019-9471 affects Android kernel code abc-pcie.c, specifically in set_outbound_iatu, where a missing bounds check can cause an out-of-bounds write. This leads to local elevation of privilege with system execution privileges required; exploitation does not require user interaction. Public refe...

CVE-2020-0223

CVE-2020-0223 is an Android kernel vulnerability (kernel audio component) described as an unbounded write into kernel global memory via a user-controlled buffer size. Affects Android kernel with Audio subcomponent; root cause is uncontrolled buffer handling that can lead to elevation of privilege...

CVE-2021-0461

CVE-2021-0461 (Android kernel, iaxxx-core sensor) : The issue arises in iaxxx_core_sensor_change_state within iaxxx-module.c, where a missing bounds check can cause an out-of-bounds write. This leads to local escalation of privilege with System execution privileges required, and exploitation does...

CVE-2021-0528

CVE-2021-0528 describes a vulnerability in the Android memory management driver (MediaTek MTK chipset) where a double free leads to memory corruption, enabling local privilege escalation with no extra user interaction. The issue is categorized as a local privilege escalation (local access, no use...

CVE-2025-36902

In CVE-2025-36902, the vulnerable component is syna_tcm2_sysfs.c, specifically the syna_cdev_ioctl_store_pid() function. It reports a heap buffer overflow causing an out-of-bounds write, which could enable local escalation of privilege with System execution privileges required. Exploitation requi...

CVE-2025-36927

CVE-2025-36927 concerns a potential out-of-bounds write in GetTachyonCommand within tachyon_server_common.h. The issue arises from a missing bounds check, enabling local escalation of privilege without additional execution privileges or user interaction, as described across multiple connected rec...

CVE-2026-0124

CVE-2026-0124 is described in connected sources as an out-of-bounds write due to a missing bounds check that enables local Elevation of Privilege without user interaction. In the Pixel security bulletin, it is listed under Pixel vulnerabilities as a Bootloader issue (EoP, Critical). The Red Hat a...

CVE-2014-9945

CVE-2014-9945 describes an Improper Authorization vulnerability in the TrustZone component on Android releases from CAF that use the Linux kernel. The issue affects TrustZone/CAF Android builds and is described as potentially existing within the TrustZone security boundary. From the CVSS data, th...

CVE-2014-9948

CVE-2014-9948 is described as an Improper Validation of Array Index vulnerability in TrustZone across CAF Android releases that use the Linux kernel. The affected component is TrustZone; the root cause is improper validation of an array index. The CVSS3 metrics indicate a HIGH-severity, with a ba...

CVE-2014-9949

CVE-2014-9949 is described as a TrustZone vulnerability in Android CAF builds that use the Linux kernel. The issue is an Untrusted Pointer Dereference in TrustZone, with impact articulated as high in the CVSS metrics (LOCAL exploit, low attack complexity, user interaction required, and high confi...

CVE-2015-9005

CVE-2015-9005 affects TrustZone on CAF Android builds via the Linux kernel, describing an Integer Overflow that could lead to a Buffer Overflow. The available sources do not provide concrete technical details (no root-cause, patch/version info, or explicit exploit data). The CVSS metrics indicate...

CVE-2017-11025

CVE-2017-11025 affects Android on MSM (and related CAF/Linux-based Android builds) with a race condition in audio_effects_shared_ioctl() that can lead to memory corruption. The vulnerability is associated with Qualcomm Audio and is categorized in connected sources as an elevation-of-privilege iss...

CVE-2017-13170

CVE-2017-13170 is an elevation of privilege in the MediaTek display driver used by Android. The issue affects the Android kernel via the MediaTek display driver component and is described as a local EoP vulnerability with potential to gain privileged execution. The Android 2017-12-01/2017-12-05 s...

CVE-2017-14873

CVE-2017-14873 affects Android devices using MSM CAF Linux kernels with the Qualcomm graphics driver. The issue is described as a kernel memory overwrite in the pp_pgc_get_config() function, enabling a local escalation of privileges or memory corruption as indicated by the CVSS in public records....

CVE-2017-14890

The CVE-2017-14890 entry covers a buffer overwrite in Qualcomm WLAN via wma_send_bcn_buf_ll() during SWBA event handling, caused by improper validation of vdev_map in Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels prior to the 2018-04-05 patch level. ...

CVE-2017-15824

CVE-2017-15824 affects Android CAF-based builds (Android for MSM, Firefox OS for MSM, QRD Android) prior to 2018-06-05. Root cause: UpdateDeviceStatus() writes an uninitialized local stack buffer to flash via WriteToPartition(), enabling a potential memory leak and information disclosure. Impact ...

CVE-2017-15825

CVE-2017-15825 is associated with Qualcomm component BIOS/Boot in Android CAF builds using the Linux kernel. The vulnerability involves an out-of-bounds memory access during GPT update processing, described as a local issue with partial confidentiality, integrity, and availability impact. The CVE...

CVE-2017-15857

CVE-2017-15857 is an out-of-bounds access vulnerability in the camera driver of Android CFAs (Android for MSM, Firefox OS for MSM, QRD Android) linked to an error when copying region params from user space in the Linux kernel. Affected product area: camera subsystem/kernell driver in Android rele...

CVE-2017-17771

CVE-2017-17771 affects the MSM camera path (msm_isp_prepare_v4l2_buf) in Android for MSM, Firefox OS for MSM, and QRD Android prior to 2017-02-12. The issue is an array out-of-bounds condition in the buffer preparation routine. The root cause is within the Qualcomm MSM media/camera stack, impacti...

CVE-2017-17860

Technical details about CVE-2017-17860 are not publicly available in the provided Connected documents; no affected products, versions, root cause, impact, or fixes are disclosed here. Monitor for updates.

CVE-2017-18055

The CVE-2017-18055 issue is a buffer overflow in Qualcomm WLAN/Wma. Root cause: improper input validation of wmi_event->num_vdev_mac_entries in wma_pdev_set_hw_mode_resp_evt_handler(), as the event is received from firmware. Affected software/hardware: Android on MSM platforms (CAF/Linux kerne...

CVE-2017-18147

CVE-2017-18147 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds from CAF using the Linux kernel prior to the 2018-04-05 patch level. In MMCP, a downlink message is not properly validated, enabling potential network-based impact without authentication. CVSS metrics indi...

CVE-2017-6263

NVIDIA driver on Android contains a use-after-free vulnerability caused by improper use of the list_for_each kernel macro, potentially enabling local code execution and privilege escalation. Severity is high; exploitation is local and requires no user interaction per the provided data. The issue ...

CVE-2017-6287

CVE-2017-6287 affects NVIDIA libnvrm in Android, caused by a missing bounds check that enables an out-of-bounds read and local information disclosure. Multiple sources (NVD, CNVD, Prion/N-CVE references) describe it as a moderate-severity information-disclosure issue in the media framework compon...

CVE-2017-9718

Technical details for CVE-2017-9718 are not publicly available in the provided connected documents. The description mentions a race condition in a multimedia driver but does not specify affected products, versions, root cause, or fixes. Monitor for updates.