CVE-2026-49884

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74006

In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49881

CVE-2026-49881 is a logic error in the serviceClassExists method of InCallController.java within Android, potentially allowing arbitrary code execution and local escalation of privilege . No additional execution privileges are required, and no user interaction is needed for exploitation. The vuln...

CVE-2026-49881

In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74004

In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45531

CVE-2026-45531 affects the read_boot_region function in fsck.c within Android, where a heap buffer overflow can cause an out-of-bounds read. This flaw may enable local privilege escalation without requiring additional execution privileges or user interaction. The vulnerability is tracked in the A...

CVE-2026-45531

In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45528

In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

EUVD-2026-74003

In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-45528

CVE-2026-45528 affects Android , specifically the getManageSpaceActivityIntent method in StorageManagerService.java. An unsafe PendingIntent creates a LaunchAnyWhere chain , enabling a local escalation of privilege with no additional execution privileges required. User interaction is needed for e...

EUVD-2026-73999

In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45520

CVE-2026-45520 is a vulnerability in the onAttach method of BiometricsSettingsBase.java within the Android platform. The root cause is a confused deputy flaw that enables an authentication bypass , resulting in local escalation of privilege with no additional execution privileges required and no ...

CVE-2026-45520

In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73997

In a2dpvendoropusdecoderdecodepacket of a2dpvendoropusdecoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45515

In a2dpvendoropusdecoderdecodepacket of a2dpvendoropusdecoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45515

CVE-2026-45515 affects the Android A2DP vendor Opus decoder , specifically the function a2dp_vendor_opus_decoder_decode_packet in a2dp_vendor_opus_decoder.cc. The root cause is an out-of-bounds write due to a heap buffer overflow, which can lead to local escalation of privilege . No additional ex...

EUVD-2026-73995

In LimitRealloc of malloclimit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28668

In LimitRealloc of malloclimit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28668

CVE-2026-28668 is a use-after-free vulnerability in the LimitRealloc function of malloc_limit.cpp, caused by a logic error. The flaw allows a local privilege escalation with no additional execution privileges required and no user interaction needed for exploitation. The issue is associated with t...

EUVD-2026-73994

In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...