CVE-2026-25259 Out-of-bounds Write in DSP Service

Memory corruption while processing multiple IOCTL command for escape operations...

CVE-2026-24092 Improper Validation of Syntactic Correctness of Input in Display

Memory Corruption when processing fastboot commands to set display mode...

CVE-2026-24092

Memory Corruption when processing fastboot commands to set display mode...

CVE-2026-24092 Improper Validation of Syntactic Correctness of Input in Display

Memory Corruption when processing fastboot commands to set display mode...

CVE-2026-24092

CVE-2026-24092 describes a memory corruption issue that occurs when processing fastboot commands to set the display mode. The available description does not specify the affected product/vendor/model, only noting a memory corruption vulnerability. The CVSS 3.1 score is 7.2 (High), with attack vect...

CVE-2026-24091

Technical details about CVE-2026-24091 are not publicly available in the provided documents. Monitor for updates and new connected documents for affected products, versions, and fixes.

CVE-2026-24091 Improper Validation of Syntactic Correctness of Input in Display

Memory corruption while processing fastboot commands with improperly formatted input...

CVE-2026-24091 Improper Validation of Syntactic Correctness of Input in Display

Memory corruption while processing fastboot commands with improperly formatted input...

CVE-2026-24091

Memory corruption while processing fastboot commands with improperly formatted input...

CVE-2026-24089 Improper Validation of Syntactic Correctness of Input in Kernel

Memory corruption while processing fastboot commands with invalid input...

CVE-2026-24089

Memory corruption while processing fastboot commands with invalid input...

CVE-2026-24089 Improper Validation of Syntactic Correctness of Input in Kernel

Memory corruption while processing fastboot commands with invalid input...

CVE-2026-24089

CVE-2026-24089 describes memory corruption that occurs when processing fastboot commands with invalid input. The NVD entry lists a CVSS v3.1 base score of 7.2 (HIGH) with physical attack vector, low attack complexity, no user interaction, requiring high privileges, and a changed scope. The impact...

CVE-2026-24087

Memory corruption while processing fastboot OEM commands...

CVE-2026-24087 Improper Validation of Syntactic Correctness of Input in Kernel

Memory corruption while processing fastboot OEM commands...

CVE-2026-24087 Improper Validation of Syntactic Correctness of Input in Kernel

Memory corruption while processing fastboot OEM commands...

CVE-2026-24087

Technical details (affected products/versions, root cause, exploitability, fixes) are not publicly available in the provided documents; monitor for updates.

MAL-2026-5132 Malicious code in rookie-security-test-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1af47f1485c4c5bd3c6ee3cb7330781c1892ebc8bea1c59b0a0045c49ab8c93d The OpenSSF Package Analysis project identified 'rookie-security-test-pkg' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

CVE-2026-49134

CodexBar prior to 0.32.0 is affected by a local privilege-escalation in the CLI installer due to a race condition in temporary file handling. The installer uses mktemp to create a privileged temporary file, writes a shell payload into it, and then executes it with administrator privileges via bas...

Malicious code in align_rest_api (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3b4fd5fe3e581dc76f4fbe187da4427e159ff73a717a99c2f519af87ca7b2c8 The OpenSSF Package Analysis project identified 'alignrestapi' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The packa...