97655 matches found
PT-2026-68682
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description A use after free issue exists in WebGL. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker...
PT-2026-68691
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description An uninitialized use in the GPU component allows a remote attacker who has already compromised the renderer process to retrieve potentially sensitive information from proces...
CVE-2026-70638: Integer Overflow or Wraparound
llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new1batch function multiplies sizeofllamaseqid by an attacker-controlled nseqmax parameter without overflow validation, causing heap buffer allocation to wrap and allocate...
CVE-2026-19157: Out-of-bounds Write
Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-19143: Improper Input Validation
Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentially perform a sandbox escape via a malicious file. Chromium security severity: High...
CVE-2026-19146: Use of Uninitialized Variable
Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...
PT-2026-68793
Name of the Vulnerable Software and Affected Versions llama.cpp versions b1886 through b7445 Description An integer overflow exists in the LLaMA-Android JNI wrapper. The new 1batch function multiplies the size of llama seq id by the n seq max parameter without validating for overflows. This can...
CVE-2026-19137: Use After Free
Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...
PT-2026-68794
Name of the Vulnerable Software and Affected Versions llama.cpp builds b1886 through b7445 Description A null pointer dereference occurs in the LLaMA-Android JNI wrapper. The bench 1model function does not validate the model context pointer before dereferencing it. An attacker can provide a...
PT-2026-68715
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description A use after free issue exists in WebGL, which could allow a remote attacker to potentially perform a sandbox escape by inducing the user to visit a crafted HTML page. A use...
PT-2026-68688
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description Insufficient validation of untrusted input in WebAPKs allows a local attacker to potentially perform a sandbox escape via a malicious file. A sandbox escape is a security...
CVE-2026-19170: Use After Free
Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...
PT-2026-68686
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description A use after free issue exists in Resources. This allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a...
CVE-2025-63822
SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control. An authenticated attacker can manipulate user identifier parameters to bypass authorization controls and gain unauthorized READ and WRITE access to other users' personal information. The API fails to validate that the...
Junk Cleaner clears the clutter from your Android
Your phone is full again, and the warning appears at exactly the wrong moment. Suddenly you can't update apps, record a video, or save another photo. The cause is rarely one giant file. Storage disappears in a steady drizzle of leftovers: temporary files an app creates and forgets, caches that gr...
Malicious code in tinkoff-statist-browser-typed-client-mb.reliability.android.events (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c12f5330c144cfe67198d49d442d702f5e40977e1d607ab651d33dffb2d073 index.js unconditionally requires./loader on module load. loader.js selects a platform-specific payload path for Linux/macOS/Windows, downloads a...
EUVD-2026-53123
The built-in PostgreSQL service on the mobile device suffers from misconfiguration flaws and command injection vulnerabilities. This service listens on a specific port, runs with root privileges, and is protected by weak credentials. The database supports the COPY FROM PROGRAM syntax, allowing...
CVE-2026-18907
Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename...
CVE-2026-18907 PathTravelsal Vulnerability in com.talpa.hibrowser
Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename...