CVEs
Browse the synced catalog, newest first.
- CVE-2026-59619In getCodecQp of GC2AV1Enc.cpp, there is a possible way to trigger an out of bounds read during quantization table lookup due to a missing…Google Android
- CVE-2026-59618In smfc_v4l2_s_selection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent shared memory…Google Android
- CVE-2026-59616In prev_run_vcore of hwcodec_firmware, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-59614In multiple functions of oem_svc_setup.c, there is a possible way to dump secure cache lines into non-secure memory on warm reset due to a…Google Android
- CVE-2026-59613In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to improper input…Google Android
- CVE-2026-59612In buffering_period of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-59611In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap due to improper input…Google Android
- CVE-2026-50079Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for SafetyBlackBerry QNX Hypervisor
- CVE-2026-59609In fence_manager_extract_iif of fence_manager.c, there is a possible way to corrupt kernel memory via fence identifier reuse due to a use…Google Android
- CVE-2026-59608In tone_mapping_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-59607In TzPipelineInputExtractor of TzPipelineInputExtractor.cpp, there is a possible Logic check bypass due to a logic error in the code.Google Android
- CVE-2026-59606In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify global reset registers from non-secure software due to a…Google Android
- CVE-2026-59604In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic error.Google Android
- CVE-2026-59603In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abort during message…Google Android
- CVE-2026-59601In CalculateSampleRate of cldma_alcedo.cc, there is a possible Heap Buffer Overflow due to a logic error in the code.Google Android
- CVE-2026-59599Android on supported Pixel devices before security patch level 2026-11-05 allows elevation of privilege in the hypervisor subcomponent in…Google Android
- CVE-2026-59598In platform_rio_ncp_wdt_handler of edgetpu_rio.c, there is a possible Use After Free due to a use after free.Google Android
- CVE-2026-59597In bindDataService of DataServiceManager.java, there is a possible way to retain privileged tunnel management permissions across…Google Android
- CVE-2026-59596In multiple functions of mpu.c, there is a possible way to execute code from non-secure memory in the security coprocessor due to an…Google Android
- CVE-2026-59595In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mutual recursion due to a…Google Android
- CVE-2026-59594In spm_alloc of encoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow.Google Android
- CVE-2026-59593In tile_info of av1_decoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow.Google Android
- CVE-2026-59589In s_av1_dec_metadata_scalability of av1_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-59587In stpropnci_prop_st_build_set_custom_polling_cmd of stpropnci_prop_st.cc, there is a possible way to trigger an out of bounds write into…Google Android
- CVE-2026-59586In multiple locations, there is a possible way to recover cryptographic keys and forge authentication tags due to improperly used crypto.Google Android
- CVE-2026-59585In SetDisplayName of RegInfoContact.cpp, there is a possible denial of service due to a missing null check.Google Android
- CVE-2026-59583In FormCredentials of SipAuHelper.cpp, there is a possible way to disclose authentication credentials in cleartext via a scheme downgrade…Google Android
- CVE-2026-59582In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due to an integer…Google Android
- CVE-2026-59580In trusty_context_switch of services/spd/trusty/trusty.c, there is a possible Secure world register state leak due to a logic error in the…Google Android
- CVE-2026-59579In getUserDataPayload of GC2UserData.cpp, there is a possible Logic error due to a logic error in the code.Google Android