Google vulnerabilities
9,028 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-59604In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic error.
- CVE-2026-59603In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abort during message…
- CVE-2026-59601In CalculateSampleRate of cldma_alcedo.cc, there is a possible Heap Buffer Overflow due to a logic error in the code.
- CVE-2026-59599Android on supported Pixel devices before security patch level 2026-11-05 allows elevation of privilege in the hypervisor subcomponent in…
- CVE-2026-59598In platform_rio_ncp_wdt_handler of edgetpu_rio.c, there is a possible Use After Free due to a use after free.
- CVE-2026-59597In bindDataService of DataServiceManager.java, there is a possible way to retain privileged tunnel management permissions across…
- CVE-2026-59596In multiple functions of mpu.c, there is a possible way to execute code from non-secure memory in the security coprocessor due to an…
- CVE-2026-59595In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mutual recursion due to a…
- CVE-2026-59594In spm_alloc of encoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow.
- CVE-2026-59593In tile_info of av1_decoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow.
- CVE-2026-59589In s_av1_dec_metadata_scalability of av1_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.
- CVE-2026-59587In stpropnci_prop_st_build_set_custom_polling_cmd of stpropnci_prop_st.cc, there is a possible way to trigger an out of bounds write into…
- CVE-2026-59586In multiple locations, there is a possible way to recover cryptographic keys and forge authentication tags due to improperly used crypto.
- CVE-2026-59585In SetDisplayName of RegInfoContact.cpp, there is a possible denial of service due to a missing null check.
- CVE-2026-59583In FormCredentials of SipAuHelper.cpp, there is a possible way to disclose authentication credentials in cleartext via a scheme downgrade…
- CVE-2026-59582In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due to an integer…
- CVE-2026-59580In trusty_context_switch of services/spd/trusty/trusty.c, there is a possible Secure world register state leak due to a logic error in the…
- CVE-2026-59579In getUserDataPayload of GC2UserData.cpp, there is a possible Logic error due to a logic error in the code.
- CVE-2026-59578In s_check_valid_tile_param_custom_tile of av1_encoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.
- CVE-2026-59575In stpropnci_cb_observe_mode_suspend of stpropnci_prop_android.cc, there is a possible way to trigger an out of bounds write into global…
- CVE-2026-59574In notifyPollingLoopFrames of hal_fwlog.cc, there is a possible way to trigger an out of bounds read and write when formatting firmware…
- CVE-2026-59573In max_num_ref_frames of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.
- CVE-2026-58813In mmap of mman.c, there is a possible way to trigger an out of bounds read and write via mapping size truncation due to an incorrect…
- CVE-2026-58812In decode of fw_vp9_dec_pic.c, there is a possible Logic error due to a logic error in the code.
- CVE-2026-58811In smmu_get_mair_idx of smmu.c, there is a possible way to apply incorrect memory attributes to direct memory access mappings due to a…
- CVE-2026-58810In multiple functions of simd_ctx.c, there is a possible way to disclose secure vector predicate and fault registers to non-secure callers…
- CVE-2026-58809In smmu_domain_config_s1 of arm-smmu-v3.c, there is a possible OOB Write due to a missing bounds check.
- CVE-2026-58808In multiple locations, there is a possible way to dump secure cache lines into non-secure memory on warm reset due to a missing permission…
- CVE-2026-58807In Retry_MtsMessageInPending of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via leaked message objects…
- CVE-2026-58806In get_sswrp_state of cpm_mbox_srv/main.c, there is a possible Logic error due to a logic error in the code.