EUVD-2026-74019

In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55285

CVE-2026-55285 is an out-of-bounds write vulnerability in the openLogicalChannel function across multiple files within Android , as indicated by its inclusion in the Android Security Bulletin 2026-09-01 . The root cause is a missing bounds check , which can lead to local privilege escalation with...

CVE-2026-55277

CVE-2026-55277 affects Android in the checkUiccListenConfigNeeded function within RoutingManager.cpp . The root cause is a missing bounds check that allows an out-of-bounds write , potentially leading to remote (proximal/adjacent) code execution with no additional privileges required and no user ...

CVE-2026-49932

This local privilege escalation vulnerability exists in the parseParts function of PduParser.java within the Android platform, as tracked under the September 2026 Android Security Bulletin. The root cause is an out-of-bounds read due to a heap buffer overflow , which can be exploited with low pri...

EUVD-2026-74015

In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49927

CVE-2026-49927 affects Android , as referenced by the September 2026 Android Security Bulletin. The root cause is an integer overflow in multiple locations that can lead to an out-of-bounds write , enabling local privilege escalation with only low privileges required and no user interaction. The ...

EUVD-2026-74014

In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74011

In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49918

In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49895

CVE-2026-49895 is an out-of-bounds read in get_eht_operation_channel_width within ieee802_11_common.c, caused by an incorrect bounds check. The flaw resides in Android's Wi-Fi component (Project Mainline) and affects Android 14, 15, and 16 . An attacker in a proximal/adjacent position can exploit...

EUVD-2026-74010

In getehtoperationchannelwidth of ieee80211common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49895

In getehtoperationchannelwidth of ieee80211common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49884

CVE-2026-49884 is an out-of-bounds write in the rw_mfc_handle_read_op function of rw_mfc.cc in Android , caused by an incorrect bounds check. The flaw enables local privilege escalation with no additional execution privileges required and no user interaction. CVSS 3.1 base score is 7.8 (HIGH) . C...

EUVD-2026-74008

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49884

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74005

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49879

CVE-2026-49879 affects Android , specifically multiple functions in rw_t3t.cc , where an integer overflow leads to an out-of-bounds write, potentially enabling remote code execution with low privileges required and no user interaction. The CVSS 3.1 score is 8.8 (HIGH) . CISA's SSVC assessment ind...

CVE-2026-49879

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74004

In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45531

In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...