PT-2026-69843

Name of the Vulnerable Software and Affected Versions libdigidocpp versions 4.1.0 through 4.2.0 DigiDoc4 versions 4.7.0 through 4.8.1 DigiDoc on Android versions 2.7.0 through 2.7.1 DigiDoc on iOS versions 2.8.0 through 2.8.0 Description Improper verification of cryptographic signature and improp...

CVE-2026-59112: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority RIA libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiDoc on iOS. This issue affects libdigidocpp: from 4.1.0 before 4.2.1; DigiDoc4:...

PT-2026-69385

Name of the Vulnerable Software and Affected Versions Samsung Contacts versions prior to SMR Aug-2026 Release 1 Description Improper export of Android application components allows local attackers to delete files using the privileges of Samsung Contacts. Recommendations Update Samsung Contacts to...

CVE-2026-71391: Off-by-one Error

GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index boundary check in sfntvarysimpleglyph and sfntvarycompoundglyph uses a strict greater-than comparison instead of greater-than-or-equal, allowing a crafted TrueType variable font ...

CVE-2026-71392: Integer Overflow or Wraparound

GNU Emacs for Android is vulnerable to an integer overflow in the sfntreadcmapformat12 function in src/sfnt.c. When processing a crafted TrueType font file, an unguarded addition in the xmalloc allocation call wraps around on 32-bit builds, causing a heap buffer overflow write. An attacker can...

CVE-2026-21063: Improper Export of Android Application Components

Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function...

Linux Distros Unpatched Vulnerability : CVE-2026-71393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Emacs for Android is vulnerable to an integer overflow in sfntreadnametable in src/sfnt.c. The function computes an allocation size using a 32-bit length...

CVE-2026-66410: Improper Certificate Validation

Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or altered...

PT-2026-69420

Name of the Vulnerable Software and Affected Versions ECOVACS PRO App affected versions not specified Description Android and iOS applications of the ECOVACS PRO App fail to properly validate server certificates. This flaw allows communication to be intercepted and potentially modified...

PT-2026-69447

Name of the Vulnerable Software and Affected Versions GNU Emacs for Android affected versions not specified Description Improper validation of table header input occurs in the sfnt read table directory function within src/sfnt.c. An incorrect comparison variable during the read-length check allow...

PT-2026-69445

Name of the Vulnerable Software and Affected Versions GNU Emacs for Android affected versions not specified Description An integer overflow exists in the sfnt read cmap format 12 function within src/sfnt.c. On 32-bit builds, an unguarded addition during an xmalloc allocation call can wrap around...

PT-2026-69446

Name of the Vulnerable Software and Affected Versions GNU Emacs for Android affected versions not specified Description An integer overflow exists in the sfnt read name table function within src/sfnt.c. The issue occurs when the function calculates an allocation size using a 32-bit length value...

CVE-2026-71393: Integer Overflow or Wraparound

GNU Emacs for Android is vulnerable to an integer overflow in sfntreadnametable in src/sfnt.c. The function computes an allocation size using a 32-bit length value from a TrueType font file without overflow checking. On 32-bit targets, a crafted font causes the calculation to wrap, resulting in a...

PT-2026-69444

Name of the Vulnerable Software and Affected Versions GNU Emacs for Android affected versions not specified Description An off-by-one error exists in the gvar table parser within src/sfnt.c. The shared-coordinate index boundary check in the functions sfnt vary simple glyph and sfnt vary compound...

CVE-2026-71394: Improper Validation of Specified Quantity in Input

GNU Emacs for Android improperly validates the table header input in sfntreadtabledirectory in src/sfnt.c. Due to an incorrect comparison variable in the read-length check, a crafted font file that claims to contain more table directory entries than actually present causes the parser to return a...

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection

The rise of autonomous AI agents represents a major paradigm shift in how users interact with mobile devices. Frameworks such as MobileRun and Mobile-Use can autonomously navigate Android applications and execute complex multi-step tasks. To interpret user interfaces, these frameworks rely...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock-Galaxy 中文: READMEZH.md This is...

New release build.prop

Pixel Prop Builder: Streamlined OTA to Build.prop Conversion Effortlessly extract and manage system properties from Pixel OTA updates with this robust automation suite. Designed for developers and enthusiasts alike, it simplifies the process of accessing and customizing Android build properties. ...

SUSE CVE-2026-19137

Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

SUSE CVE-2026-19141

Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...