CVE-2026-56978

In getglobalconfigitemaddr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78981

In getglobalconfigitemaddr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56978

CVE-2026-56978 is an out-of-bounds read in the get_global_config_item_addr function of gc.c within the Bootloader component of Google Pixel devices, caused by a missing bounds check. It enables local privilege escalation with low privileges required and no user interaction, rated CVSS 7.8 (HIGH) ...

EUVD-2026-78977

In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56972

In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56972

CVE-2026-56972 is an out-of-bounds write vulnerability in the Bootloader of Google Pixel devices, caused by an incorrect bounds check in multiple locations. It enables local escalation of privilege (EoP) when an attacker already holds System execution privileges ; no user interaction is required....

CVE-2026-56958

In gfalgogetcacheddumpdata of gfalgo.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78972

In gfalgogetcacheddumpdata of gfalgo.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56958

CVE-2026-56958 is an out-of-bounds read vulnerability in the gf_algo_get_cached_dump_data function of gf_algo.c, caused by a missing bounds check . This defect resides in Qualcomm's Graphics Firmware (GPU) subsystem used in Android devices. The flaw allows local information disclosure with low pr...

CVE-2026-56942

In ReadTileInfo of vp9hwdheaders.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78969

In ReadTileInfo of vp9hwdheaders.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78960

In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56892

CVE-2026-56892 is an information disclosure vulnerability in the Secure World subcomponent of Google Pixel devices, caused by an incorrect bounds check in the ReadDataElement function of common.c. An attacker with low privileges on the device can exploit this locally without user interaction to a...

CVE-2026-56892

In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55365

CVE-2026-55365 is an out-of-bounds write in multiple functions of remap.c in the Bootloader component of Google Pixel devices, caused by an incorrect bounds check. It enables local escalation of privilege (EoP) with System execution privileges required and no user interaction. Google rates it Cri...

EUVD-2026-78953

In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55365

In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55343

In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-55343

CVE-2026-55343 is a critical out-of-bounds write vulnerability in the decodeAmr function of ImsMediaAudioPlayer.cpp , a component within libpixelimsmedia on Google Pixel devices . The missing bounds check allows an attacker to achieve remote code execution with low privileges and required user in...

CVE-2026-55331

CVE-2026-55331 affects Google Pixel devices in the IP Multimedia Subsystem (Telephony subcomponent). The root cause is an out-of-bounds write due to an incorrect bounds check, which can lead to remote code execution with no additional privileges and no user interaction required. The vulnerability...