CVE-2018-3564

CVE-2018-3564 affects the FastRPC driver in CAF Android builds using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The issue is a Use-After-Free when mapping on the remote processor fails, potentially impacting components such as DSP_Services. The description notes that thi...

CVE-2020-0042

The CVE-2020-0042 issue affects the FPC Fingerprint TEE in Android’s fpc_ta_hw_auth_qsee.c. The root cause is a missing bounds check that enables an out-of-bounds read. This could allow local information disclosure and requires system privileges if exploited, with no user interaction needed. Expl...

CVE-2025-36906

A heap buffer overflow vulnerability exists in the ConvertReductionOp function within darwinn_mlir_converter_aidl.cc . This flaw allows for an out-of-bounds write, which could lead to a local elevation of privilege (EoP) without requiring additional execution privileges or user interaction. This ...

CVE-2025-36930

A vulnerability in the GetHostAddress function within gxp_buffer.h allows for an out of bounds write due to a missing bounds check. This flaw affects Google Pixel devices, specifically impacting the TPU subcomponent. Successful exploitation could lead to local escalation of privilege without requ...

CVE-2025-48611

Summary of CVE-2025-48611 : The vulnerability is in the DeviceId.java code path (DeviceId class) where a missing bounds check can cause a desync in persistence, enabling local elevation of privilege without extra execution privileges or user interaction. This is consistently described across mult...

CVE-2026-0120

A critical remote code execution (RCE) vulnerability exists in the modem component of Google Pixel devices due to an incorrect bounds check leading to an out-of-bounds write . This flaw can be exploited without additional execution privileges or user interaction. Remediation is available through ...

CVE-2026-0149

A heap buffer overflow in RtpSession::rtpSendRtcpPacket leads to a possible OOB write , which could result in remote code execution (RCE) without requiring additional execution privileges or user interaction. This vulnerability affects the libpixelimsmedia component on Google Pixel devices. Secur...

CVE-2026-58710

A critical Remote Code Execution (RCE) vulnerability exists in the BigOcean component of Google Pixel devices. The flaw is located in the DecodeFilmGrainParams function within film_grain_dec.cc, where a missing bounds check allows for a possible out-of-bounds write . This vulnerability can be exp...

CVE-2014-9947

Technical details about CVE-2014-9947 are not provided in the connected documents. The initial description indicates a TrustZone information exposure in CAF Android builds, but there are no product, version, impact, or fix specifics to act on. Monitor for updates.

CVE-2014-9958

CVE-2014-9958 is an elevation of privilege in Qualcomm closed‑source components within Android kernel. The vulnerability affects Qualcomm components integrated in Android devices and is listed in the Android security bulletin with fixes provided by Qualcomm AMSS and Android patch updates (June 20...

CVE-2016-10232

CVE-2016-10232 is an elevation-of-privil... (shortened to fit)

CVE-2017-18154

CVE-2017-18154 describes a local elevation-of-privilege issue in Android’s media stack: a crafted binder request can trigger an arbitrary unmap in MediaServer on CAF-based Android (Android for MSM, Firefox OS for MSM, QRD Android) via the Linux kernel. Public details in NVD/Android bulletins indi...

CVE-2018-11908

Technical details (affected products, components, root cause, exploits, or fixes) are not publicly provided in the connected documents; monitor for updates.

CVE-2018-11914

Technical details for CVE-2018-11914 are not publicly available in the provided documents. Monitor for updates.

CVE-2018-11943

CVE-2018-11943 affects CAF Android builds using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The issue arises in processing the fastboot flash command, causing memory leaks or unexpected behavior due to handling of uninitialized data buffers. Public references in NVD/CVE r...

CVE-2018-3563

CVE-2018-3563 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF kernel prior to the 2018-04-05 security patch level. The root cause is an untrusted pointer dereference in the function apr_cb_func , which can lead to arbitrary code execution. The vulnerability ...

CVE-2018-5822

CVE-2018-5822 describes a buffer overwrite in WLAN firmware affecting Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android on CAF builds prior to the 2018-04-05 patch level. The issue arises from compromised WLAN FW and is mitigated by updating to the 2018-04-05 security patch level (or ...

CVE-2018-5823

CVE-2018-5823 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android on CAF Android kernels prior to the 2018-04-05 patch level. The vulnerability is due to improper buffer length validation in the extscan hotlist event, leading to a potential buffer overflow. The NVD/NVD-affiliate...

CVE-2018-5824

In CVE-2018-5824, Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android on CAF-based Linux kernels prior to the 2018-04-05 patch level are vulnerable to a buffer overflow when processing HTT_T2H_MSG_TYPE_RX_FLUSH or HTT_T2H_MSG_TYPE_RX_PN_IND messages if the firmware tid value is out of r...

CVE-2018-5835

CVE-2018-5835 describes a potential buffer overflow in the Android WLAN stack: when seq_len exceeds CSR_MAX_RSC_LEN, copying keyRSC in __wlan_hdd_cfg80211_add_key() may overflow. This affects Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The ...

CVE-2018-5860

CVE-2018-5860 affects the MDSS (multimedia display) driver in Android builds for MSM, Firefox OS for MSM, and QRD Android, provided by CAF on Linux-based kernels. The root cause is that a data structure may be used without proper initialization, as described in multiple sources. According to the ...

CVE-2018-5861

CVE-2018-5861 is documented as a heap-overflow risk in CAF Android bootloader code using the Linux kernel, affecting Android for MSM/QRD Android builds with Qualcomm bootloaders. The vulnerability arises from incomplete partition-size checks during loading of secure applications, with CVSS v3.0 i...

CVE-2018-9580

CVE-2018-9580 is an Elevation of Privilege in the HTC bootloader affecting Android kernel components. The issue is categorized as EoP with high risk (CVSS v3.0 base score 9.8) and high impact on confidentiality, integrity, and availability; exploitation details or vectors are not disclosed in the...

CVE-2021-0455

The CVE-2021-0455 issue is described as an out-of-bounds write in the Citadel chip firmware, caused by a missing bounds check. It grants local elevation of privilege with System execution privileges required, and requires no user interaction to exploit. In the provided materials, the vulnerabilit...

CVE-2025-36895

The Google Pixel smartphone contains an information disclosure vulnerability (CVE-2025-36895) affecting the WLAN subcomponent. The issue is associated with Android bug ID A-396454072 . To address this vulnerability, users are encouraged to update their devices to the 2025-09-05 security patch lev...

CVE-2025-36899

A security vulnerability in the Secure Element component of Google Pixel devices allows for an elevation of privilege (EoP). The issue is caused by test/debugging code left in a production build, which could lead to physical escalation of privilege without requiring additional execution privilege...

CVE-2025-36909

The Google Pixel smartphone is affected by an Information disclosure (ID) vulnerability identified as CVE-2025-36909 . The flaw resides in the WLAN subcomponent. Security patch levels of 2025-09-05 or later address this issue. While the specific root cause is not detailed, the vulnerability allow...

CVE-2026-0139

A vulnerability in the Modem component allows for an out of bounds write due to a missing bounds check. This flaw could lead to remote code execution (RCE) without requiring additional execution privileges or user interaction. The issue is addressed in the June 2026 security update for Pixel devi...

CVE-2026-0146

A high-severity Remote Code Execution (RCE) vulnerability exists in the Exynos MFC component due to a missing bounds check in the mfc_core_get_dec_metadata_sei_nal function of mfc_core_reg_api.c. This out of bounds write could allow an attacker to execute arbitrary code without additional privile...

CVE-2014-7919

CVE-2014-7919 affects Android in b/libs/gui/ISurfaceComposer.cpp, where a null pointer dereference can cause denial of service (process crash). Connected CNVD/NVD entries confirm the Android component and impact. No specific patch/version details or exploitation data are provided in the documents...

CVE-2014-9956

CVE-2014-9956 technical details are not publicly provided in the supplied documents; no concrete affected component/version/root cause/fix is disclosed here. Monitor for updates.

CVE-2016-10236

CVE-2016-10236 describes an information-disclosure vulnerability in the Qualcomm USB driver affecting Android devices with affected Android kernel components. The NVD entry characterizes the issue as a local information exposure in the Qualcomm USB driver, with Pixel and Pixel XL listed among aff...

CVE-2017-14869

CVE-2017-14869 affects Android for MSM, Firefox OS for MSM, QRD Android with CAF Linux kernel in the FOTA update path. The issue is that during FOTA partition updates, uninitialized data can be pushed to storage, potentially leaking information. The provided sources confirm affected platforms and...

CVE-2018-11827

CVE-2018-11827 affects CAF/Android builds (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux kernel. The issue: improper validation of an array index in the WMA roam synchronization handler can cause an out-of-bounds write. This is tied to Qualcomm WLAN/driver components in the af...

CVE-2018-11995

CVE-2018-11995 affects Android builds using CAF components with the Linux kernel. The vulnerability arises from a partition name-check variable that is not reset for every iteration, which can cause improper termination in the META image. The root cause is the variable’s retention across iteratio...

CVE-2018-5851

CVE-2018-5851 is a Qualcomm WLAN buffer-overflow vulnerability affecting Android devices (Pixel/Nexus) due to HTT_T2H_MSG_TYPE_TX_COMPL_IND processing with an out-of-range num_msdus. The issue can allow arbitrary code execution or a DoS. Public details map this CVE to Qualcomm WLAN in the May 201...

CVE-2025-36907

A heap-based buffer overflow exists in the draw_surface_image() function located in abl/android/lib/draw/draw.c on Google Pixel devices. This vulnerability allows for a local escalation of privilege via USB fastboot on devices with an unlocked bootloader. Exploitation requires user interaction an...

CVE-2025-36935

CVE-2025-36935 involves a memory corruption flaw in the function trusty_ffa_mem_reclaim inside shared-mem-smcall.c. The issue arises from uninitialized data and can enable local escalation of privilege without requiring extra execution privileges. Exploitation reportedly does not require user int...

CVE-2025-48610

CVE-2025-48610 stems from a logic error in mem_protect.c __pkvm_guest_relinquish_to_host, enabling a local information disclosure without required privileges or user interaction. Affected component: Android/Linux kernel KVM (pkvm) code path. Impact: potential leakage of configuration data. Exploi...

CVE-2026-0126

In WC-Radio, there is a confirmed vulnerability causing an out-of-bounds write due to a missing bounds check. This can lead to remote code execution with no privileges and no user interaction required. The issue is detailed across multiple feeds (NVD entry CVE-2026-0126, EUVD-2026-, and related O...

CVE-2026-0165

The libpixelimsmedia component in Google Android (specifically on Pixel devices) is vulnerable to an out-of-bounds read due to a missing bounds check in several functions of the RTCP packet decoder . This flaw can lead to remote information disclosure without requiring additional execution privil...

CVE-2018-11956

Technical details about CVE-2018-11956 are not provided in the connected documents. The sources present only the general issue without specifics (affected components, root cause, impact, or fixes). Monitor for updates.

CVE-2018-5888

CVE-2018-5888 affects Qualcomm bootloader components (Bootloader) with Elevation of Privilege (EoP) and Moderate severity. The CVE description references an out-of-bounds access while processing the system path in CAF Android MSM Linux kernel prior to the 2018-06-05 patch level; connected data al...

CVE-2018-5910

CVE-2018-5910: In CAF-built Android (Android for MSM, Firefox OS for MSM, QRD Android) kernels, memory corruption can occur due to an improper check of the callers count parameter in display handler code. The issue affects the Linux kernel components used by CAF in these Android releases. Root ca...

CVE-2025-36894

A denial-of-service (DoS) vulnerability exists in the Modem component of Google Pixel devices due to a missing null check . An attacker could exploit this to cause a remote denial of service without requiring additional execution privileges or user interaction. The issue is addressed in security ...

CVE-2025-36897

The Google Pixel smartphone is affected by a security vulnerability involving a missing bounds check in cd_CnMsgCodecUserApi.cpp. This flaw leads to a possible out-of-bounds write , which could result in remote code execution without requiring additional execution privileges or user interaction. ...

CVE-2026-0130

A heap buffer overflow in the RtcpChunk::decodeRtcpChunk function can lead to an out-of-bounds read . This vulnerability could allow for remote information disclosure without requiring additional execution privileges, though user interaction is required for exploitation. The issue specifically af...

CVE-2026-0170

A vulnerability in the Vp9DecodeFrameTag function of vp9hwd_headers.cc allows for a possible out-of-bounds write due to a missing bounds check. This flaw could lead to remote escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The issue specificall...

CVE-2018-11911

Affected software : Android releases (Android for MSM, Firefox OS for MSM, QRD Android) built with CAF Linux kernel. Root cause : improper configuration of a script, as described in CNVD-2018-25313. Impact : potential unprivileged access / privilege access control vulnerability. References in con...

CVE-2018-11913

Technical details for CVE-2018-11913 are not publicly provided in the connected documents. The available records reiterate a generic issue related to dev node configuration in CAF/Linux kernel builds. Monitor for updates from official advisories.