EUVD-2026-74027

In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58848

CVE-2026-58848 affects multiple functions in alloc.c within the Android kernel , where a race condition permits unauthorized read/write access. An attacker with local, low privileges can exploit this to achieve local escalation of privilege without user interaction. The vulnerability is rated CVS...

EUVD-2026-74026

In kvmiommumapsg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58846

A use-after-free vulnerability exists in the kvm_iommu_map_sg function of iommu.c in the Android/Linux kernel, caused by a missing permission check . An attacker with local privileges (no user interaction required) can exploit this to achieve local privilege escalation with full impact on confide...

EUVD-2026-74025

In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58839

CVE-2026-58839 affects Android (per the 2026-09-01 Android Security Bulletin). The flaw resides in forEachLine within MountRegistry.cpp , where a buffer overflow causes an out-of-bounds read , enabling local privilege escalation without user interaction or additional execution privileges. The CVS...

EUVD-2026-74024

In stpropnciprocessstd of stpropncistd.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58823

CVE-2026-58823 affects the Android platform, as indicated by the Android Security Bulletin reference (ASB-A-522376080, 2026-09-01). The vulnerability is a missing bounds check in the stpropnci_process_std function within stpropnci_std.cc, causing a memory safety issue. An attacker with local, low...

EUVD-2026-74022

In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required...

CVE-2026-58820

In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required...

CVE-2026-58820

CVE-2026-58820 is an Android vulnerability (tracked as ASB-A-522366268 in the Android Security Bulletin) involving a memory safety issue due to integer overflow in multiple locations. The flaw can lead to local escalation of privilege with no additional execution privileges required. The CVSS 3.1...

CVE-2026-55294

CVE-2026-55294 is a heap buffer overflow in the function ihevcd_get_tu_data_size of ihevcd_utils.c within the Android platform. The out-of-bounds write enables local escalation of privilege with only low privileges required and no user interaction. It is rated CVSS 3.1 7.8 (HIGH) . The vulnerabil...

EUVD-2026-74021

In ihevcdgettudatasize of ihevcdutils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74019

In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55285

CVE-2026-55285 is an out-of-bounds write vulnerability in the openLogicalChannel function across multiple files within Android , as indicated by its inclusion in the Android Security Bulletin 2026-09-01 . The root cause is a missing bounds check , which can lead to local privilege escalation with...

EUVD-2026-74017

In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55273

CVE-2026-55273 is a vulnerability in Android , specifically in the AppendCommentLine function of AnnotationProcessor.cpp . The root cause is improper input validation , described as a possible supply chain risk, which can lead to local escalation of privilege with only low privileges required and...

EUVD-2026-74015

In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49932

This local privilege escalation vulnerability exists in the parseParts function of PduParser.java within the Android platform, as tracked under the September 2026 Android Security Bulletin. The root cause is an out-of-bounds read due to a heap buffer overflow , which can be exploited with low pri...

CVE-2026-49927

CVE-2026-49927 affects Android , as referenced by the September 2026 Android Security Bulletin. The root cause is an integer overflow in multiple locations that can lead to an out-of-bounds write , enabling local privilege escalation with only low privileges required and no user interaction. The ...