CVE-2026-55285

In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55285

In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55285

A missing bounds check in the openLogicalChannel function across multiple files results in a possible out-of-bounds write . This vulnerability could lead to local escalation of privilege without requiring additional execution privileges or user interaction. While specific versions are not listed ...

CVE-2026-55277

In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55277

In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55277

A missing bounds check in the checkUiccListenConfigNeeded function of RoutingManager.cpp leads to a possible out of bounds write . This vulnerability could allow an attacker to achieve remote (proximal/adjacent) code execution without requiring additional execution privileges or user interaction....

CVE-2026-49895

A possible out of bounds read exists in the get_eht_operation_channel_width function of ieee802_11_common.c due to an incorrect bounds check. This vulnerability could lead to remote (proximal/adjacent) information disclosure without requiring additional execution privileges or user interaction. T...

CVE-2026-49895

In getehtoperationchannelwidth of ieee80211common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74008

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49884

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49884

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49884

A vulnerability exists in rw_mfc.cc within the rw_mfc_handle_read_op function due to an incorrect bounds check . This flaw allows for a possible out of bounds write , which could lead to a local escalation of privilege without requiring additional execution privileges. Exploitation does not requi...

EUVD-2026-74000

In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45521

In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45521

In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45521

A missing permission check in the openFile function of AppFuseBridge.java allows for local information disclosure on affected Android devices. This vulnerability can be exploited without additional execution privileges or user interaction. The issue is addressed in the 2026-09-01 (and 2026-09-05)...

EUVD-2026-73994

In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28666

In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28666

A security vulnerability in the Android Framework component, specifically within multiple functions of LocalImageResolver.java , allows for a Remote Persistent Denial of Service (DoS) due to a DNG image rendering check bypass . Exploitation of this flaw could lead to remote escalation of privileg...

CVE-2026-28666

In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...