EUVD-2026-79005

In DecodeFilmGrainParams of filmgraindec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58710

In DecodeFilmGrainParams of filmgraindec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58710

In DecodeFilmGrainParams of filmgraindec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58710

CVE-2026-58710 is an out-of-bounds write in DecodeFilmGrainParams of film_grain_dec.cc in Google Pixel devices, caused by a missing bounds check . It enables remote code execution with low privileges and no user interaction. The Pixel Security Bulletin classifies it under the BigOcean subcomponen...

EUVD-2026-79004

In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58704

CVE-2026-58704 is a high-severity (CVSS 8.0) privilege escalation vulnerability in the Cellular Modem of Google Pixel devices, caused by a logic error that allows an attacker to bypass permission checks. The flaw enables remote proximal/adjacent escalation of privilege with low privileges require...

CVE-2026-58704

In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58704

In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58683

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78998

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58683

CVE-2026-58683 is a Critical remote code execution vulnerability in the IP Multimedia Subsystem (Telephone subcomponent) of Google Pixel devices. The root cause is an out-of-bounds write due to improper input validation , exploitable over the network with low privileges required and no user inter...

CVE-2026-58683

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58679

In gftatestsetconfig of gftatest.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58679

In gftatestsetconfig of gftatest.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58679

CVE-2026-58679 is a heap buffer overflow in the gf_ta_test_set_config function of gf_ta_test.c within the Goodix Fingerprint TA on Google Pixel devices. The logic error allows local escalation of privilege with no additional execution privileges or user interaction required. The Pixel security bu...

EUVD-2026-78997

In gftatestsetconfig of gftatest.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58678

In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78996

In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58678

In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58678

CVE-2026-58678 is a Critical elevation-of-privilege (EoP) vulnerability in the Bootloader of supported Google Pixel devices. The root cause is a logic error that permits a permission bypass , enabling a local attacker with System execution privileges to escalate further without user interaction. ...