CVEs
Browse the synced catalog, newest first.
- CVE-2026-57004In PresenceDecoderV1::DecodeDataElements of presence_decoder_v1.cc, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-56995In multiple locations, there is a possible way to corrupt host allocator metadata in shared memory due to memory corruption.Google Android
- CVE-2026-56980In createDataFlowAsync of data_flow_manager.cc, there is a possible way to trigger an out of bounds write in shared memory due to an…Google Android
- CVE-2026-56971In AudioSession::SendInternalEvent of AudioSession.cpp, there is a possible Double Free due to a logic error in the code.Google Android
- CVE-2026-56969In edgetpu_group_clear_responses of edgetpu_group.c, there is a possible Use After Free due to a logic error in the code.Google Android
- CVE-2026-56966In CommitToBuffer of hal_override_options.bundle.cc, there is a possible way to retain stale direct memory access mappings to secure…Google Android
- CVE-2026-56956In EncodeT140 of TextRtpPayloadEncoderNode.cpp, there is a possible Heap Buffer Overflow due to a logic error in the code.Google Android
- CVE-2026-56951In on_vkUpdateDescriptorSetWithTemplateSized2GOOGLE of vk_decoder_global_state.cpp, there is a possible way to leak host code pointers to…Google Android
- CVE-2026-56949In multiple locations, there is a possible way to modify authenticated coprocessor firmware in shared memory before loading due to a race…Google Android
- CVE-2026-56947In getCarrierRestrictionStatus of PhoneInterfaceManager.java, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-56946In smmu_unmap_visit_leaf of arm-smmu-v3.c, there is a possible way to release active direct memory access page references during unmapping…Google Android
- CVE-2026-56944In smmu_detach_dev of private/google-modules/iommu/arm-smmu-v3/drivers/iommu/arm/arm-smmu-v3/pkvm/arm-smmu-v3.c, there is a possible Use…Google Android
- CVE-2026-56943In multiple locations, there is a possible way to trigger an out of bounds read via an attestation comparison oracle due to an incorrect…Google Android
- CVE-2026-56938In port_shutdown of ipc.c, there is a possible Use After Free due to a race condition.Google Android
- CVE-2026-56935In km_os_regen_salt of storage.c, there is a possible way to recover deleted keys due to a logic error.Google Android
- CVE-2026-56934In arm_lpae_split_blk_unmap of drivers/iommu/io-pgtable-arm-common.c, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-56933In RecordApTx of efw_ap_transport.c, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-56930In smmu_find_ste of smmu.c, there is a possible way to retain stale translation lookaside buffer entries across stream identifiers due to…Google Android
- CVE-2026-56929In TrustyKeyMintManager::VerifyHat of trusty_keymint_manager.cc, there is a possible Security check bypass due to a logic error in the code.Google Android
- CVE-2026-56926In multiple functions of PssSubscriptionManager.java, there is a possible way to spoof subscription switch results and trigger a device…Google Android
- CVE-2026-56919In PackageSignatureChecker of SystemUIGoogleModule.java, there is a possible background activity launch due to a confused deputy.Google Android
- CVE-2026-56916In _vqueue_get_avail_buf_locked of trusty/kernel/lib/trusty/vqueue.c, there is a possible Double-read / TOCTOU due to a race condition.Google Android
- CVE-2026-56912In ac_remove_smmu_prot_internal of acfw_smmu.c, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-56911In handle_fips_hmac_req of hwcrypto_proxy.c, there is a possible heap buffer overflow due to missing bounds check.Google Android
- CVE-2026-56910In multiple locations, there is a possible way to trigger an out of bounds read and write in shared memory due to an incorrect bounds check.Google Android
- CVE-2026-56909In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify voltage control registers from non-secure software due to a…Google Android
- CVE-2026-56902In multiple locations, there is a possible information disclosure due to a logic error in the code.Google Android
- CVE-2026-56898In aes256_cmac_sw of aes.rs, there is a possible way to forge message authentication codes over multi-block messages due to improperly…Google Android
- CVE-2026-56897In multiple functions of attestation_object.c, there is a possible way to disclose uninitialized secure element stack memory in key…Google Android
- CVE-2026-56884In ac_set_ns_ipa_tbl of plat_trusty.c, there is a possible way to corrupt stream table entry configurations via unvalidated parameters due…Google Android