CVE-2026-0118

In oobconfig, there is a possible bypass of carrier restrictions due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0117

A vulnerability exists in the MFC component of Google Pixel devices due to an incorrect bounds check in the mfc_dec_dqbuf function within the mfc_dec_v4l2.c file. This flaw allows for an out-of-bounds write , which could lead to a local escalation of privilege (EoP). Exploitation does not require...

CVE-2026-0117

In mfcdecdqbuf of mfcdecv4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0117

In mfcdecdqbuf of mfcdecv4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0117

In mfcdecdqbuf of mfcdecv4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0116

A vulnerability in the MFC component of Google Pixel devices (specifically in the mfc_core_isr.c file) allows for an out-of-bounds write due to a missing bounds check in the le_mfc_handle_released_buf function. This flaw could enable remote code execution (RCE) without requiring additional execu...

CVE-2026-0114

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0114

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0113

In nsGetUserData of nsSmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0113

In nsGetUserData of nsSmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0113

A security vulnerability exists in the Cellular Modem subcomponent of Google Pixel devices due to an out-of-bounds write in the ns_GetUserData function of ns_SmscbUtilities.c. The issue stems from an incorrect bounds check and could allow for remote escalation of privilege without requiring addit...

CVE-2026-0112

A race condition in the vpu_open_inst function of vpu_ioctl.c leads to a use after free vulnerability. This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. The vulnerability specifically affects the VPU subcomponent on Goog...

CVE-2026-0112

In vpuopeninst of vpuioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0111

In nsGetUserData of nsSmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0111

In nsGetUserData of nsSmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0111

In nsGetUserData of nsSmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0110

The Google Pixel is affected by CVE-2026-0110, which involves a memory corruption vulnerability in the MM_DATA_IND component of cn_NrSmMsgHdlrFromMM.cpp. This flaw resides in the Modem subcomponent and can lead to remote escalation of privilege (EoP) without requiring additional execution privile...

CVE-2026-0110

In MMDATAIND of cnNrSmMsgHdlrFromMM.cpp, there is a possible EoP due to memory corruption. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0109

In dhdtcpdatainfoget of dhdip.c, there is a possible Denial of Service due to a precondition check failure. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0109

The Google Pixel smartphone is vulnerable to a Denial of Service (DoS) attack due to a failed precondition check in the dhd_tcpdata_info_get function within dhd_ip.c. This flaw specifically affects the Wifi subcomponent. An attacker can trigger a remote DoS without requiring additional execution ...