EUVD-2026-74024

In stpropnciprocessstd of stpropncistd.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58823

CVE-2026-58823 affects the Android platform, as indicated by the Android Security Bulletin reference (ASB-A-522376080, 2026-09-01). The vulnerability is a missing bounds check in the stpropnci_process_std function within stpropnci_std.cc, causing a memory safety issue. An attacker with local, low...

CVE-2026-55290

CVE-2026-55290 is an out-of-bounds heap read vulnerability in the setTo function of ResourceTypes.cpp in Android. The root cause is a missing bounds check , which can lead to local information disclosure without requiring additional execution privileges or user interaction. The vulnerability is t...

EUVD-2026-74020

In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74019

In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55285

CVE-2026-55285 is an out-of-bounds write vulnerability in the openLogicalChannel function across multiple files within Android , as indicated by its inclusion in the Android Security Bulletin 2026-09-01 . The root cause is a missing bounds check , which can lead to local privilege escalation with...

CVE-2026-55277

CVE-2026-55277 affects Android in the checkUiccListenConfigNeeded function within RoutingManager.cpp . The root cause is a missing bounds check that allows an out-of-bounds write , potentially leading to remote (proximal/adjacent) code execution with no additional privileges required and no user ...

CVE-2026-20518

In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10867524 / ALPS10876355; Issue ID:...

CVE-2026-20504

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...

CVE-2026-20503

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...

CVE-2026-20509

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011...

CVE-2026-20502

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196...

EUVD-2026-72210

In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10867524 / ALPS10876355; Issue ID:...

CVE-2026-20518

geniezone (a MediaTek system component) contains a missing bounds check that can lead to local information disclosure . Exploitation requires the attacker to already hold the System privilege and, per the vendor advisory, user interaction is needed. The CVSS 3.1 score is 4.4 (Medium) with a vecto...

EUVD-2026-72202

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011...

CVE-2026-20509

CVE-2026-20509 affects Power HAL in MediaTek devices, where a missing bounds check allows an out-of-bounds write , enabling a local attacker who already holds the System privilege to escalate further. No user interaction is required. The CVSS 3.1 score is 6.7 (Medium) with High impact to confiden...

CVE-2026-20504

CVE-2026-20504 affects the MediaTek Modem component, where a missing bounds check can cause a system crash, leading to a remote denial of service . Exploitation requires a User Equipment (UE) to connect to a rogue base station controlled by the attacker, with no additional privileges or user inte...

EUVD-2026-72197

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...

EUVD-2026-72196

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...

CVE-2026-20503

CVE-2026-20503 affects the Modem component in MediaTek devices. A missing bounds check can cause a system crash, leading to remote denial of service when a user equipment (UE) connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are r...