CVEs
Browse the synced catalog, newest first.
- CVE-2026-58781In HostLinkBase::chreIpiHandler of host_link.cc, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-58780In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check.Google Android
- CVE-2026-58779In multiple locations, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58778In multiple locations, there is a possible use-after-free due to a race condition.Google Android
- CVE-2026-58769In multiple locations, there is a possible out-of-bounds read due to a missing bounds check.Google Android
- CVE-2026-58762In ac_get_prot_config of plat_trusty.c, there is a possible memory corruption due to improper input validation.Google Android
- CVE-2026-58757In mfc_alloc_enc_roi_buffer of mfc_buf.c, there is a possible out-of-bounds write due to a heap buffer overflow.Google Android
- CVE-2026-58752In aoc_unlocked_ioctl_handle_ion_fd of aoc.c, there is a possible type confusion due to improper input validation.Google Android
- CVE-2026-58740In BitmapImageBuffer of bitmap_image_buffer.h, there is a possible out-of-bounds write due to an integer overflow.Google Android
- CVE-2026-58736In NotifySipResponse of SessionEx.cpp, there is a possible way to corrupt memory via a dangling connection pointer in the pending response…Google Android
- CVE-2026-58729In multiple files, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-58722In chppProcessDiscoverAllResponse of system/chre/chpp/clients/discovery.c, there is a possible Heap Buffer Overflow due to a logic error…Google Android
- CVE-2026-58705In handleEvent of gscan.cpp, there is a possible way to trigger an out of bounds write on the heap due to a missing bounds check.Google Android
- CVE-2026-58702In createIntent of TimerAgent.java, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-58697In codec3p_secure of codec3p_secure, there is a possible Heap Buffer Overflow due to a missing bounds check.Google Android
- CVE-2026-58696In multiple locations, there is a possible out-of-bounds write due to a heap buffer overflow.Google Android
- CVE-2026-58690In multiple functions of bitmap_image_buffer.h, there is a possible way to trigger an out of bounds write on the trusted execution…Google Android
- CVE-2026-58684In smmu_config_l3tt of smmu.c, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58681In multiple locations, there is a possible out-of-bounds write due to an integer overflow.Google Android
- CVE-2026-58680In cpm_mbox_power_ctrl_sswrp of cpm_mbox.c, there is a possible permission bypass due to a precondition check failure.Google Android
- CVE-2026-58677In get_secure_boot_mode of auth.rs, there is a possible way to bypass root signature verification via fault injection due to a logic error.Google Android
- CVE-2026-57048In authenticate of verify_image, there is a possible Signature verification logic bypass due to a logic error in the code.Google Android
- CVE-2026-57047In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-57043In tipc_dev_probe of tipc_virtio_dev.c, there is a possible way to corrupt memory via an off-by-one cleanup loop on probe failure due to a…Google Android
- CVE-2026-57037In getChppAppState of chpp_init.cc, there is a possible way to trigger an out of bounds read and corrupt task control structures due to a…Google Android
- CVE-2026-57036In send_vdu_directive of gdmc/gsp/dev/bmsm/plat/lga/vdu.c, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-57013In access_control_enable of multiple files, there is a possible way to release secure coprocessors from reset via unclaimed firewall…Google Android
- CVE-2026-57010In EncodeLastScanBufferElement of data_manager.cc, there is a possible out-of-bounds write due to a logic error in the code.Google Android
- CVE-2026-57009In GC2AvcDec of GC2AvcDec.cpp, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-57005In EuiccPort.buildUiccAccessRule of EuiccPort.java, there is a possible Confused Deputy due to a confused deputy.Google Android