CVE-2026-20537

A memory corruption vulnerability exists in aidl due to a use after free condition (CWE-416 ). This flaw could allow a malicious actor with System privilege to achieve local escalation of privilege . Exploitation does not require user interaction. Remediation is available via Patch ID: ALPS111852...

EUVD-2026-92187

In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038...

CVE-2026-20536

A memory corruption vulnerability exists in aidl due to a use after free condition. If a malicious actor has already obtained System privilege , they could leverage this flaw to achieve local escalation of privilege . Exploitation does not require user interaction. Remediation is available via Pa...

EUVD-2026-92188

In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185216; Issue ID: MSV-9039...

CVE-2026-20535

A vulnerability in aidl allows for a local escalation of privilege due to a missing permission check . An attacker who has already obtained System privilege can exploit this flaw to further escalate privileges without requiring user interaction. Remediation is available via Patch ID: ALPS11185216...

CVE-2026-20533

A vulnerability exists in the display component that allows for a local escalation of privilege due to an integer overflow (CWE-190). If a malicious actor has already obtained System privilege , they can exploit this flaw without user interaction. Remediation is available via Patch ID: ALPS112966...

EUVD-2026-92190

In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11296678; Issue ID: MSV-9167...

CVE-2026-20532

A double free vulnerability exists in apu , which can lead to an application crash . This vulnerability allows for a local denial of service without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249024 (Issue ID: MSV-9168). No informat...

EUVD-2026-92191

In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249024; Issue ID: MSV-9168...

CVE-2026-20531

A memory corruption vulnerability exists in apu due to a use after free condition. This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249016 (Issue ID: MSV-9169). No specific e...

EUVD-2026-92192

In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249016; Issue ID: MSV-9169...

EUVD-2026-92193

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11292777; Issue ID: MSV-9195...

CVE-2026-20530

A vulnerability in the display component allows for an out-of-bounds write due to a missing bounds check . This flaw could enable a local escalation of privilege for a malicious actor who has already obtained System privilege . No user interaction is required for exploitation. Remediation is avai...

CVE-2026-20529

A vulnerability exists in battery functionality due to a missing bounds check , leading to a possible out-of-bounds write . A malicious actor who has already obtained System privilege could leverage this flaw to achieve local escalation of privilege . Exploitation does not require user interactio...

EUVD-2026-92194

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11276677; Issue ID: MSV-9217...

CVE-2026-20528

The ccci component is vulnerable to an out-of-bounds write and read caused by a missing bounds check. This flaw could result in local information disclosure , memory corruption , crashes , or privilege escalation if an attacker already possesses System privilege . Exploitation requires user inter...

CVE-2026-20544

A missing bounds check in meta results in a possible out-of-bounds write . This vulnerability could allow an attacker with physical access to the device to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Pat...

CVE-2026-20588

In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607...

EUVD-2026-92197

In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607...

CVE-2026-20588

A missing bounds check in mtee can lead to a local escalation of privilege . This vulnerability could be exploited by a malicious actor who has already obtained System privilege , and no user interaction is required. Remediation is available via Patch ID: ALPS11383899 (Issue ID: MSV-9607). No spe...