EUVD-2026-78975

In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78974

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56932

CVE-2026-56932 is a memory corruption vulnerability in the Trusted Execution Environment (TEE) of Google Pixel devices, caused by improper input validation . An attacker with System-level privileges can exploit it for local privilege escalation (EoP) without user interaction. The Pixel Update Bul...

CVE-2026-56932

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78967

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56920

CVE-2026-56920 is a Critical remote code execution vulnerability in the VPU (Video Processing Unit) component of Google Pixel devices. The flaw is an out-of-bounds write in the function s_decode_vui_param within fw_hevc_dec_header.c, caused by a logic error during HEVC video decoding. Exploitatio...

CVE-2026-56920

In sdecodevuiparam of fwhevcdecheader.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78964

In sdecodevuiparam of fwhevcdecheader.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56915

CVE-2026-56915 is a local privilege escalation vulnerability in the bigo_worker_thread function of bigo.c , caused by a race condition . It affects Android (Pixel) devices, as indicated by the 2026-09-01 Pixel security bulletin reference and the associated Google OSV entry (PUB-A-508686178). Expl...

CVE-2026-56907

CVE-2026-56907 affects the VPU (Video Processing Unit) component in Google Pixel devices, as tracked in the Pixel security bulletin of 2026-09-01 and OSV entry PUB-A-510463247 . The root cause is a shared memory overwrite due to improper input validation , which can lead to local privilege escala...

CVE-2026-56882

In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78957

In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56882

CVE-2026-56882 affects the Cellular Modem (Telephony) component of Google Pixel devices. A logic error in the code enables information disclosure that can escalate to remote code execution with low privileges and no user interaction . The CVSS 3.1 base score is 8.8 (High) with impacts of High acr...

CVE-2026-56879

In gmcmbmsghandler of gmcmba.c, there is a possible memory corruption due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55359

CVE-2026-55359 is a permission bypass caused by a logic error in the GPCA subcomponent of Google Pixel devices. It allows a local escalation of privilege from a low-privilege user account to full device compromise, with no user interaction required. The Pixel Update Bulletin rates it as Critical ...

EUVD-2026-78950

In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-55343

In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-55343

CVE-2026-55343 is a critical out-of-bounds write vulnerability in the decodeAmr function of ImsMediaAudioPlayer.cpp , a component within libpixelimsmedia on Google Pixel devices . The missing bounds check allows an attacker to achieve remote code execution with low privileges and required user in...

CVE-2026-55332

In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55331

CVE-2026-55331 affects Google Pixel devices in the IP Multimedia Subsystem (Telephony subcomponent). The root cause is an out-of-bounds write due to an incorrect bounds check, which can lead to remote code execution with no additional privileges and no user interaction required. The vulnerability...