← Back

Android

android

Vendor: Google • 8,153 CVEs

CVEs (8,153)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Android
May 13, 2026
Aug 16, 2017
N/A· v4
7.0 HIGH· v3
7.6 HIGH· v2
In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a buffer overflow.
1Google
1Android
May 13, 2026
Aug 16, 2017
N/A· v4
4.7 MEDIUM· v3
2.6 LOW· v2
In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a user supplies a value too large, then an out-of-bounds read occurs.
1Google
1Android
May 13, 2026
Aug 16, 2017
N/A· v4
4.7 MEDIUM· v3
2.6 LOW· v2
In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a user-supplied buffer is casted to a structure without checking if the source buffer is large enough.
1Google
1Android
May 13, 2026
Aug 16, 2017
N/A· v4
4.7 MEDIUM· v3
2.6 LOW· v2
In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, kernel heap memory can be exposed to userspace.
1Google
1Android
May 13, 2026
Aug 16, 2017
N/A· v4
7.0 HIGH· v3
7.6 HIGH· v2
In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the correct range, an error message is printed, but code execution c...Show more
In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the correct range, an error message is printed, but code execution continues in the same way as for a correct length value.Show less
1Google
1Android
May 13, 2026
Aug 16, 2017
N/A· v4
4.7 MEDIUM· v3
2.6 LOW· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data can be leaked to userspace by an audio driver.
1Google
1Android
May 13, 2026
Aug 11, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
In all Qualcomm products with Android release from CAF using the Linux kernel, while processing fastboot boot command when verified boot feature is disabled, with length greater than boot image buffer, a buffer overflow...Show more
In all Qualcomm products with Android release from CAF using the Linux kernel, while processing fastboot boot command when verified boot feature is disabled, with length greater than boot image buffer, a buffer overflow can occur.Show less
1Google
1Android
May 13, 2026
Aug 11, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Out of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with Android releases from CAF using the Linux kernel by an unsanitized userspace-controlled parameter.
1Google
1Android
May 13, 2026
Aug 11, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the Linux kernel can lead to exposure of kernel memory.
1Google
1Android
May 13, 2026
Aug 11, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A userspace process can cause a Denial of Service in the camera driver in all Qualcomm products with Android releases from CAF using the Linux kernel.
1Google
1Android
May 13, 2026
Aug 11, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the variable set for determining the size of the buffer is not used to indicate the si...Show more
In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the variable set for determining the size of the buffer is not used to indicate the size of the buffer.Show less
1Google
1Android
May 13, 2026
Aug 11, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potentially occur in a camera driver.
1Google
1Android
May 13, 2026
Aug 9, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A elevation of privilege vulnerability in the Upstream Linux file system. Product: Android. Versions: Android kernel. Android ID: A-36817013.
1Google
1Android
May 13, 2026
Aug 9, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A elevation of privilege vulnerability in the Upstream Linux linux kernel. Product: Android. Versions: Android kernel. Android ID: A-36007735.
1Google
1Android
May 13, 2026
Aug 9, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A elevation of privilege vulnerability in the Qualcomm proprietary component. Product: Android. Versions: Android kernel. Android ID: A-32524214. References: QC-CR#2044821.
1Google
1Android
May 13, 2026
Aug 9, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A elevation of privilege vulnerability in the Qualcomm ipa driver. Product: Android. Versions: Android kernel. Android ID: A-35467471. References: QC-CR#2029392.
1Google
1Android
May 13, 2026
Aug 9, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A remote code execution vulnerability in the Android media framework (avc decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37079296.
1Google
1Android
May 13, 2026
Aug 9, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A elevation of privilege vulnerability in the MediaTek video driver. Product: Android. Versions: Android kernel. Android ID: A-36074857. References: M-ALPS03275524.
1Google
1Android
May 13, 2026
Aug 9, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A elevation of privilege vulnerability in the MediaTek gpu driver. Product: Android. Versions: Android kernel. Android ID: A-32458601. References: M-ALPS03007523.
1Google
1Android
May 13, 2026
Aug 9, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A remote code execution vulnerability in the Broadcom networking driver. Product: Android. Versions: Android kernel. Android ID: A-37168488. References: B-RB#116402.