Google vulnerabilities
9,028 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-58705In handleEvent of gscan.cpp, there is a possible way to trigger an out of bounds write on the heap due to a missing bounds check.
- CVE-2026-58702In createIntent of TimerAgent.java, there is a possible permission bypass due to a confused deputy.
- CVE-2026-58697In codec3p_secure of codec3p_secure, there is a possible Heap Buffer Overflow due to a missing bounds check.
- CVE-2026-58696In multiple locations, there is a possible out-of-bounds write due to a heap buffer overflow.
- CVE-2026-58690In multiple functions of bitmap_image_buffer.h, there is a possible way to trigger an out of bounds write on the trusted execution…
- CVE-2026-58684In smmu_config_l3tt of smmu.c, there is a possible permission bypass due to a logic error in the code.
- CVE-2026-58681In multiple locations, there is a possible out-of-bounds write due to an integer overflow.
- CVE-2026-58680In cpm_mbox_power_ctrl_sswrp of cpm_mbox.c, there is a possible permission bypass due to a precondition check failure.
- CVE-2026-58677In get_secure_boot_mode of auth.rs, there is a possible way to bypass root signature verification via fault injection due to a logic error.
- CVE-2026-57048In authenticate of verify_image, there is a possible Signature verification logic bypass due to a logic error in the code.
- CVE-2026-57047In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out-of-bounds write due to a missing bounds check.
- CVE-2026-57043In tipc_dev_probe of tipc_virtio_dev.c, there is a possible way to corrupt memory via an off-by-one cleanup loop on probe failure due to a…
- CVE-2026-57037In getChppAppState of chpp_init.cc, there is a possible way to trigger an out of bounds read and corrupt task control structures due to a…
- CVE-2026-57036In send_vdu_directive of gdmc/gsp/dev/bmsm/plat/lga/vdu.c, there is a possible Logic error due to a logic error in the code.
- CVE-2026-57013In access_control_enable of multiple files, there is a possible way to release secure coprocessors from reset via unclaimed firewall…
- CVE-2026-57010In EncodeLastScanBufferElement of data_manager.cc, there is a possible out-of-bounds write due to a logic error in the code.
- CVE-2026-57009In GC2AvcDec of GC2AvcDec.cpp, there is a possible Logic error due to a logic error in the code.
- CVE-2026-57005In EuiccPort.buildUiccAccessRule of EuiccPort.java, there is a possible Confused Deputy due to a confused deputy.
- CVE-2026-57004In PresenceDecoderV1::DecodeDataElements of presence_decoder_v1.cc, there is a possible out-of-bounds write due to a missing bounds check.
- CVE-2026-56995In multiple locations, there is a possible way to corrupt host allocator metadata in shared memory due to memory corruption.
- CVE-2026-56980In createDataFlowAsync of data_flow_manager.cc, there is a possible way to trigger an out of bounds write in shared memory due to an…
- CVE-2026-56971In AudioSession::SendInternalEvent of AudioSession.cpp, there is a possible Double Free due to a logic error in the code.
- CVE-2026-56969In edgetpu_group_clear_responses of edgetpu_group.c, there is a possible Use After Free due to a logic error in the code.
- CVE-2026-56966In CommitToBuffer of hal_override_options.bundle.cc, there is a possible way to retain stale direct memory access mappings to secure…
- CVE-2026-56956In EncodeT140 of TextRtpPayloadEncoderNode.cpp, there is a possible Heap Buffer Overflow due to a logic error in the code.
- CVE-2026-56951In on_vkUpdateDescriptorSetWithTemplateSized2GOOGLE of vk_decoder_global_state.cpp, there is a possible way to leak host code pointers to…
- CVE-2026-56949In multiple locations, there is a possible way to modify authenticated coprocessor firmware in shared memory before loading due to a race…
- CVE-2026-56947In getCarrierRestrictionStatus of PhoneInterfaceManager.java, there is a possible permission bypass due to a confused deputy.
- CVE-2026-56946In smmu_unmap_visit_leaf of arm-smmu-v3.c, there is a possible way to release active direct memory access page references during unmapping…
- CVE-2026-56944In smmu_detach_dev of private/google-modules/iommu/arm-smmu-v3/drivers/iommu/arm/arm-smmu-v3/pkvm/arm-smmu-v3.c, there is a possible Use…