EUVD-2026-79005

In DecodeFilmGrainParams of filmgraindec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58710

CVE-2026-58710 is an out-of-bounds write in DecodeFilmGrainParams of film_grain_dec.cc in Google Pixel devices, caused by a missing bounds check . It enables remote code execution with low privileges and no user interaction. The Pixel Security Bulletin classifies it under the BigOcean subcomponen...

EUVD-2026-79002

In Vp9DecEndOfStream of vp9hwdoutput.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58699

In Vp9DecEndOfStream of vp9hwdoutput.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58699

CVE-2026-58699 affects the Vp9DecEndOfStream function in vp9hwd_output.cc (Android VP9 hardware decoder output path). An incorrect bounds check allows an out-of-bounds read , which can be leveraged for local privilege escalation with only low privileges and no user interaction. The CNA-assigned C...

EUVD-2026-79000

In gmcphylp3exitrestoreregisters of phypower.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58695

In gmcphylp3exitrestoreregisters of phypower.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58695

CVE-2026-58695 is a local elevation of privilege vulnerability in Google Pixel devices, located in the CPM (Camera Processing Module) component. The root cause is a missing bounds check in the gmc_phy_lp3_exit_restore_registers function within phy_power.c, allowing an attacker with System executi...

CVE-2026-57035

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78994

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57035

This vulnerability affects Android (Pixel) devices, as referenced by the 2026-09-01 Pixel security bulletin . The root cause is a missing bounds check in multiple locations, leading to an out-of-bounds write . The impact is a local escalation of privilege , requiring System execution privileges a...

EUVD-2026-78993

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57014

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57014

CVE-2026-57014 is an out-of-bounds write in the NFC HAL component (phNxpNciHal_ext_process_nfc_init_rsp in phNxpNciHal_ext.cc), caused by a missing bounds check. It affects Android (Pixel) devices and allows a local attacker with low privileges to achieve escalation of privilege with full impact ...

EUVD-2026-78989

In Av1DecodeFrameTag of vp9hwdheaders.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56997

CVE-2026-56997 is an out-of-bounds write in the function Av1DecodeFrameTag of vp9hwd_headers.cc , caused by a missing bounds check. It affects Google Pixel devices, specifically the BigOcean subcomponent, and enables remote elevation of privilege with no user interaction and no additional executi...

CVE-2026-56989

CVE-2026-56989 is an out-of-bounds write in the Android platform (referenced in the Pixel Security Bulletin for 2026-09-01, tracked as OSV PUB-A-508704693 ) caused by a missing bounds check in multiple locations. It can lead to local escalation of privilege requiring System execution privileges ,...

EUVD-2026-78987

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56989

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56978

In getglobalconfigitemaddr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...