Google CVEs
9,110 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-14372Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote attacker to potentially perform a sandbox escap
- CVE-2025-14174Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memo
- CVE-2025-36938In U-Boot of append_uint32_le(), there is a possible fault injection due to a logic error in the code.
- CVE-2025-36937In AudioDecoder::HandleProduceRequest of audio_decoder.cc, there is a possible out of bounds write due to an incorrect bounds check.
- CVE-2025-36936In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to an integer overflow.
- CVE-2025-36935In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible memory corruption due to uninitialized data.
- CVE-2025-36934In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition.
- CVE-2025-36932In tracepoint_msg_handler of cpm/google/lib/tracepoint/tracepoint_ipc.c, there is a possible memory overwrite due to improper input validati
- CVE-2025-36931In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check.
- CVE-2025-36930In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check.
- CVE-2025-36929In AreFencesRegistered of gxp_fence_manager.cc, there is a possible information leak due to improper input validation.
- CVE-2025-36928In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check.
- CVE-2025-36927In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to a missing bounds check.
- CVE-2025-36925In WAVES_send_data_to_dsp of libaoc_waves.c, there is a possible out of bounds write due to a missing bounds check.
- CVE-2025-36924In ss_DecodeLcsAssistDataReqMsg(void) of ss_LcsManagement.c, there is a possible out of bounds write due to an incorrect bounds check.
- CVE-2025-36923In NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow.
- CVE-2025-36922In bigo_map of bigo_iommu.c, there is a possible information disclosure due to a use after free.
- CVE-2025-36921In ProtocolPsUnthrottleApn() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check.
- CVE-2025-36919In aocc_read of aoc_channel_dev.c, there is a possible double free due to improper locking.
- CVE-2025-36918In aoc_service_read_message of aoc_ipc_core.c, there is a possible out of bounds read due to improper input validation.
- CVE-2025-36917In SwDcpItg of up_L2commonPdcpSecurity.cpp, there is a possible denial of service due to an incorrect bounds check.
- CVE-2025-36916In PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race condition.
- CVE-2025-36912In cellular modem, there is a possible denial of service due to a logic error in the code.
- CVE-2025-36889In onCreateTasks of CameraActivity.java, there is a possible permission bypass due to a confused deputy.
- CVE-2025-48625In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race
- CVE-2025-48608In isValidMediaUri of SettingsProvider.java, there is a possible cross user media read due to a missing permission check.
- CVE-2025-48606In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation without a mechanism to
- CVE-2025-48569In multiple locations, there is a possible permanent denial of service due to resource exhaustion.
- CVE-2025-48639In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjacking/overlay attack.
- CVE-2025-48638In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation.