Google vulnerabilities
9,028 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-58805In multiple locations, there is a possible way to zero arbitrary secure memory via unvalidated image body addresses due to a missing…
- CVE-2026-58804In ExecuteGraphCommand of multiple files, there is a possible way to trigger an out of bounds write via an oversized scratch memory…
- CVE-2026-58803In bytes_are_equal of lib.rs, there is a possible way to recover authentication keys due to side channel information disclosure.
- CVE-2026-58801In smmu_domain_config_s1 of arm-smmu-v3.c, there is a possible way to access stale stream table entries across reassigned stream…
- CVE-2026-58800In IMG_vkCreateImageView of image_view.c, there is a possible way to trigger a use after free due to memory corruption.
- CVE-2026-58799In multiple functions of rmmi_utility.c, there is a possible way to trigger an out of bounds write due to a missing bounds check.
- CVE-2026-58798In multiple functions of cn_Tai.cpp, there is a possible way to trigger an out of bounds write due to memory corruption.
- CVE-2026-58797In register_dump_dpa of sswrp_pcie.c, there is a possible Logic error due to a logic error in the code.
- CVE-2026-58796In multiple functions of AndroidManifest.xml, there is a possible way to trigger unauthorized firmware updates via exported broadcast…
- CVE-2026-58791In pic_timing of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.
- CVE-2026-58790In CMD_ENC_SET_PARAM of encoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.
- CVE-2026-58789In s_gen_tile_param of multiple files, there is a possible way to trigger an out of bounds write in tile parameter arrays due to an…
- CVE-2026-58788In stpropnci_process_std of stpropnci_std.cc, there is a possible way to trigger an out of bounds write into global state due to a missing…
- CVE-2026-58787In chppWifiRangingEventNotification of clients/wifi.c, there is a possible Heap Buffer Overflow due to a logic error in the code.
- CVE-2026-58786In cnm_memset of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.
- CVE-2026-58785In update_user_consent of main.rs, there is a possible elevation of privilege due to uninitialized data.
- CVE-2026-58783In multiple locations, there is a possible denial of service due to a logic error in the code.
- CVE-2026-58782In multiple locations, there is a possible denial of service due to a logic error in the code.
- CVE-2026-58781In HostLinkBase::chreIpiHandler of host_link.cc, there is a possible out-of-bounds write due to a missing bounds check.
- CVE-2026-58780In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check.
- CVE-2026-58779In multiple locations, there is a possible permission bypass due to a logic error in the code.
- CVE-2026-58778In multiple locations, there is a possible use-after-free due to a race condition.
- CVE-2026-58769In multiple locations, there is a possible out-of-bounds read due to a missing bounds check.
- CVE-2026-58762In ac_get_prot_config of plat_trusty.c, there is a possible memory corruption due to improper input validation.
- CVE-2026-58757In mfc_alloc_enc_roi_buffer of mfc_buf.c, there is a possible out-of-bounds write due to a heap buffer overflow.
- CVE-2026-58752In aoc_unlocked_ioctl_handle_ion_fd of aoc.c, there is a possible type confusion due to improper input validation.
- CVE-2026-58740In BitmapImageBuffer of bitmap_image_buffer.h, there is a possible out-of-bounds write due to an integer overflow.
- CVE-2026-58736In NotifySipResponse of SessionEx.cpp, there is a possible way to corrupt memory via a dangling connection pointer in the pending response…
- CVE-2026-58729In multiple files, there is a possible out-of-bounds write due to a missing bounds check.
- CVE-2026-58722In chppProcessDiscoverAllResponse of system/chre/chpp/clients/discovery.c, there is a possible Heap Buffer Overflow due to a logic error…