CVE-2014-9945

CVE-2014-9945 describes an Improper Authorization vulnerability in the TrustZone component on Android releases from CAF that use the Linux kernel. The issue affects TrustZone/CAF Android builds and is described as potentially existing within the TrustZone security boundary. From the CVSS data, th...

CVE-2014-9948

CVE-2014-9948 is described as an Improper Validation of Array Index vulnerability in TrustZone across CAF Android releases that use the Linux kernel. The affected component is TrustZone; the root cause is improper validation of an array index. The CVSS3 metrics indicate a HIGH-severity, with a ba...

CVE-2016-10237

CVE-2016-10237 concerns Android/CAF Linux kernel handling of shared content protection memory, passed as the secure camera memory buffer to a trusted application (TA). The description indicates the TA would not detect the issue and would treat the shared memory as secure, reflecting a mislabeling...

CVE-2017-0431

CVE-2017-0431 is described as an elevation-of-privilege vulnerability affecting Qualcomm closed-source components within Android kernel space. The details indicate a Qualcomm AMSS/Qualcomm component issue with Android IDs and a vendor-internal severity (listed as Critical for the Qualcomm-related...

CVE-2017-11018

CVE-2017-11018 describes an out-of-bounds array access in the Linux kernel camera driver used by Android on MSM platforms (Qualcomm Camera). Connected sources identify the vulnerability as an elevation of privilege in Qualcomm Camera on Google Pixel/Nexus devices, with potential for local privile...

CVE-2017-11093

CVE-2017-11093 affects Android MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel for Display; the issue is a buffer over-read caused by missing upper-bound validation when reading the EDID field num_of_cea_blocks, potentially exposing kernel memory and causing information dis...

CVE-2017-13170

CVE-2017-13170 is an elevation of privilege in the MediaTek display driver used by Android. The issue affects the Android kernel via the MediaTek display driver component and is described as a local EoP vulnerability with potential to gain privileged execution. The Android 2017-12-01/2017-12-05 s...

CVE-2017-13222

CVE-2017-13222 is an information-disclosure vulnerability in the Android Upstream/kernel layer affecting the Android kernel. The connected records confirm it is a kernel/Upstream information disclosure issue (Android ID A-38159576) with no public exploitation details provided in the documents. Th...

CVE-2017-14873

CVE-2017-14873 affects Android devices using MSM CAF Linux kernels with the Qualcomm graphics driver. The issue is described as a kernel memory overwrite in the pp_pgc_get_config() function, enabling a local escalation of privileges or memory corruption as indicated by the CVSS in public records....

CVE-2017-14889

CVE-2017-14889 affects Android for MSM, Firefox OS for MSM, and QRD Android builds derived from CAF Linux kernels. The root cause is a missing range check on the array index into the WMI descriptor pool, which could allow arbitrary address execution in the process mgmt completion handler. Reporte...

CVE-2017-14903

CVE-2017-14903 describes a buffer over-read in SENDACTIONFRAME IOCTL processing on Android for MSM/CAF Linux kernel branches (Android devices using Qualcomm/CAF). The vulnerability stems from insufficient payload length handling (payload length

CVE-2017-15850

CVE-2017-15850 affects Android for MSM, Firefox OS for MSM, and QRD Android on CAF builds using the Linux kernel; described impact is that userspace can read values from audio codec registers. The connected documents do not provide concrete root-cause details or a remediation/fix. No exploitation...

CVE-2017-15854

CVE-2017-15854 concerns a local vulnerability in Qualcomm WLAN firmware used on Android CAF builds (Android for MSM, Firefox OS for MSM, QRD Android). The issue arises when fix_param->num_chans from firmware is too large, causing an integer overflow in wma_radio_chan_stats_event_handler() for ...

CVE-2017-15861

CVE-2017-15861 describes an elevation-risk issue in Qualcomm WLAN on Android CAF with Linux kernel where wma_roam_synch_event_handler uses a firmware-provided vdev_id to index an array without validation. This could potentially lead to out-of-bounds access affecting confidentiality, integrity, an...

CVE-2017-17771

CVE-2017-17771 affects the MSM camera path (msm_isp_prepare_v4l2_buf) in Android for MSM, Firefox OS for MSM, and QRD Android prior to 2017-02-12. The issue is an array out-of-bounds condition in the buffer preparation routine. The root cause is within the Qualcomm MSM media/camera stack, impacti...

CVE-2017-18062

CVE-2017-18062 affects Qualcomm Wma in Android devices (Wma driver) with CAF-based Android/Linux stacks. Root cause: potential buffer overflow in wma_process_utf_event() while handling UTF events, leading to local elevation of privilege (EoP). Documented impact: EoP with high confidentiality, int...

CVE-2017-18063

CVE-2017-18063 affects Android for MSM (CAF Linux kernel) with WLAN firmware; the issue is improper input validation for nlo_event in wma_nlo_match_evt_handler(), which can cause out-of-bounds memory access. Affected products are Android builds for MSM/CAF and related devices using the Linux kern...

CVE-2017-18281

CVE-2017-18281 describes a vulnerability in the Android Video component used by CAF (Linux kernel-based) where a boolean variable is typecast to int before reading, causing an out-of-bounds read. Affected is Android releases that rely on CAF with the Linux kernel. According to NVD, the CVSS metri...

CVE-2017-8273

CVE-2017-8273: In Qualcomm CAF Android builds, a buffer overflow can occur while processing the fastboot boot command when verified boot is disabled, if the command length exceeds the boot image buffer. This affects the bootloader component and is described with a high-severity, local attack surf...

CVE-2018-11266

CVE-2018-11266 affects Android builds (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel. The root cause is improper input validation that can allow access to already freed dci client entries when closing a dci client. Public details in NVD/CVE records indicate a l...

CVE-2018-11278

CVE-2018-11278 affects CAF Venus HW in Android for MSM, Firefox OS for MSM, and QRD Android builds. The vulnerability occurs when Venus HW decodes input bit stream buffers: it searches for a start code, and if the start code is not found in the entire buffer, the implementation may over-fetch bey...

CVE-2018-11281

CVE-2018-11281 describes a use-after-free condition in CAF-based Android variants (Android for MSM, Firefox OS for MSM, QRD Android) due to unsafe handling of IPA_IOC_MDFY_RT_RULE IOCTL header entries. If called for entries that were previously deleted, the header is used without proper validatio...

CVE-2018-11294

CVE-2018-11294 affects Qualcomm CAF Android WLAN components (WLAN HOST). The issue arises in the WLAN firmware handling, where information for 4 Access Categories (AC) is provided but only the first 3 ACs are copied due to improper conditional logic. This truncation potentially affects the WLAN A...

CVE-2018-11860

CVE-2018-11860 affects CAF Android builds using the Linux kernel, where a buffer overflow could occur while processing the ndp event due to a missing length check. The vulnerability is described as a local issue with high impact (per CVSS: 7.2/7.8), but the connected documents do not provide spec...

CVE-2018-11868

CVE-2018-11868 describes a buffer overflow in the nan response event handler due to lack of length validation for values received from firmware. The issue affects Android releases (Android for MSM, Firefox OS for MSM, QRD Android) derived from CAF using the Linux kernel, with the root cause being...

CVE-2018-11883

CVE-2018-11883 affects CAF-based Android WLAN implementations (Android for MSM, Firefox OS for MSM, QRD Android) running in the Linux kernel. The issue arises in the policy manager unit test: if the mode parameter in the WLAN function is out of bounds, it can trigger an out-of-bounds access when ...

CVE-2018-11919

Technical details (affected products, root cause, impact, and fixes) are not publicly available in the provided documents. Monitor for updates.

CVE-2018-11963

CVE-2018-11963 affects Android platforms based on CAF’s Linux kernel, with the issue localized to the camera JPEG driver. The root cause is a buffer overread caused by non-null terminated strings during processing of vsprintf, potentially enabling a local attacker with access to expose or corrupt...

CVE-2018-11985

CVE-2018-11985 affects Android releases (Android for MSM, Firefox OS for MSM, QRD Android) built with CAF Linux kernel. The vulnerability is a heap overflow caused by an integer overflow when allocating heap with a user-supplied size, arising from roundup to native pointer. CVSS2/3 indicate MEDIU...

CVE-2018-3577

CVE-2018-3577 affects Qualcomm WLAN within Android CAF builds (Android for MSM, etc.) prior to the 2018-06-05 patch level. The issue arises while processing fragments: when fragment count is very large, an integer overflow can cause a buffer overflow. The vulnerability is documented in multiple s...

CVE-2018-5853

CVE-2018-5853 describes a race condition in a driver used by CAF Android for MSM (Linux kernel variants) including Android for MSM, Firefox OS for MSM, and QRD Android. The issue potentially leads to a use-after-free condition. Impact details in the provided sources indicate local attack requirem...

CVE-2018-5899

CVE-2018-5899 affects Android CAF builds (Android for MSM, Firefox OS for MSM, QRD Android) with the Linux kernel used in these releases. A use-after-free occurs in the TDLS path: netbuf is freed in ol_tx_completion_handler and subsequently accessed by NBUF_UPDATE_TX_PKT_COUNT. This use-after-fre...

CVE-2018-5919

CVE-2018-5919 affects the Qualcomm QCACLD-2.0 WLAN host driver in Android CAF/Linux kernels (Android for MSM, QRD Android). The issue is a use-after-free in the WLAN host driver that can cause the device to reboot. Public remediation references include a CodeAurora patch (commit 81a80c9973833f7cd...

CVE-2018-9519

CVE-2018-9519 affects Android, specifically the Easel component (easelcomm_hw_build_scatterlist). The issue is a race-condition–driven out-of-bounds write in the kernel that can lead to local escalation of privileges with System privileges required; no user interaction is needed. The available do...

CVE-2019-9470

CVE-2019-9470 is an Android kernel vulnerability affecting the dma_sblk_start path in abc-pcie.c. The issue is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with system execution privileges required; no user interaction is needed. Publicly documen...

CVE-2021-0497

CVE-2021-0497 describes a memory corruption vulnerability in the Android memory management driver caused by a use-after-free. This can enable local escalation of privilege without user interaction. Affected component is the Android memory management driver on Android SoCs with Android ID A-183461...

CVE-2025-36927

CVE-2025-36927 concerns a potential out-of-bounds write in GetTachyonCommand within tachyon_server_common.h. The issue arises from a missing bounds check, enabling local escalation of privilege without additional execution privileges or user interaction, as described across multiple connected rec...

CVE-2015-9015

Technical details for CVE-2015-9015 are not publicly available in the provided documents; monitor for updates.

CVE-2016-10231

CVE-2016-10231 is an elevation-of-privilege vulnerability in the Qualcomm sound codec driver affecting the Android kernel. The issue could allow a local attacker with access to the device to execute code with kernel privileges. Public references in the connected records tie it to the Qualcomm sou...

CVE-2016-10235

CVE-2016-10235 is a denial-of-service vulnerability in the Qualcomm Wi‑Fi driver affecting Android kernels. The NVD entry assigns CVSSv3 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, no privileges required, and no user interaction; impact is only on availability (PARTIA...

CVE-2016-5345

CVE-2016-5345: Buffer overflow in the Qualcomm radio driver on Android One devices allows a local unprivileged user to gain privileges via a crafted app (Android internal bug 32639452; Qualcomm internal bug CR1079713). Affected software is Android with Qualcomm radio driver; vulnerability details...

CVE-2016-8482

CVE-2016-8482 is documented as an elevation of privilege in the NVIDIA GPU driver affecting Android kernels. The available details indicate a memory handling issue (referencing memory after it has been freed) in the NVIDIA Tegra kernel/driver components, leading to potential privilege escalation ...

CVE-2017-11005

CVE-2017-11005 describes a Use-After-Free in the Android MSM stack (including CAF/Linux kernel paths) during deinitialization. The issue affects Android/CAF-derived builds and related MSM variants (Firefox OS for MSM, QRD Android) and is listed with high to critical impact in the NVD metrics (CVS...

CVE-2017-11031

CVE-2017-11031 affects Android on MSM, Firefox OS for MSM, and QRD Android builds that use CAF with the Linux kernel. The issue arises from the VIDIOC_G_SDE_ROTATOR_FENCE ioctl command, which can trigger a use-after-free condition. The available sources describe the vulnerability but do not provi...

CVE-2017-11081

CVE-2017-11081 affects Android for MSM, Firefox OS for MSM and QRD Android on CAF Linux kernel branches. The vulnerability resides in the hdd_parse_setrmcenable_command and hdd_parse_setrmcactionperiod_command APIs, where buffers defined in this API can hold at most 32 bytes, but data longer than...

CVE-2017-13161

CVE-2017-13161 is an Elevation of Privilege affecting the Broadcom wireless driver in Android kernels used by Pixel/Nexus devices. The vulnerability is categorized as EoP with a moderate severity in the Pixel bulletin, and is listed under Broadcom components. The documented impact states that an ...

CVE-2017-13225

CVE-2017-13225 describes a heap buffer overflow in MTK Media (MTK MTK Media) within libMtkOmxVdec.so that could enable local elevation of privilege and code execution in a privileged Android process. Exploitation is described as requiring user interaction, with the impact stated as remote-like pr...

CVE-2017-14895

CVE-2017-14895 affects Android for MSM/CAF builds using the Linux kernel. After a subsystem reset, the iwpriv interface does not report accurate information. The vulnerability is triggered locally (LOCAL) with low attack complexity and requires no authentication, potentially impacting confidentia...

CVE-2017-8258

CVE-2017-8258 corresponds to an array out-of-bounds access in the camera driver of Qualcomm components on CAF Android releases using the Linux kernel. The vulnerability affects Qualcomm camera driver access within the kernel space and could potentially be triggered by interactions with the camera...

CVE-2017-8264

CVE-2017-8264 affects the camera driver in all Qualcomm products with Android CAF builds on the Linux kernel. The issue results from a userspace process that can cause a Denial of Service in the Qualcomm camera driver. The available documents do not specify the exact vulnerable component version,...