CVE-2026-56967

CVE-2026-56967 is a heap buffer overflow in the Cellular Modem component of Google Pixel devices, enabling remote code execution (RCE) from an adjacent network with low privileges and no user interaction. Google classifies it as Critical severity (CVSS 3.1 base score 8.0 HIGH ), with high impact ...

EUVD-2026-78974

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56932

CVE-2026-56932 is a memory corruption vulnerability in the Trusted Execution Environment (TEE) of Google Pixel devices, caused by improper input validation . An attacker with System-level privileges can exploit it for local privilege escalation (EoP) without user interaction. The Pixel Update Bul...

CVE-2026-56932

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78967

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56920

CVE-2026-56920 is a Critical remote code execution vulnerability in the VPU (Video Processing Unit) component of Google Pixel devices. The flaw is an out-of-bounds write in the function s_decode_vui_param within fw_hevc_dec_header.c, caused by a logic error during HEVC video decoding. Exploitatio...

CVE-2026-56920

In sdecodevuiparam of fwhevcdecheader.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78964

In sdecodevuiparam of fwhevcdecheader.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56915

CVE-2026-56915 is a local privilege escalation vulnerability in the bigo_worker_thread function of bigo.c , caused by a race condition . It affects Android (Pixel) devices, as indicated by the 2026-09-01 Pixel security bulletin reference and the associated Google OSV entry (PUB-A-508686178). Expl...

CVE-2026-56907

CVE-2026-56907 affects the VPU (Video Processing Unit) component in Google Pixel devices, as tracked in the Pixel security bulletin of 2026-09-01 and OSV entry PUB-A-510463247 . The root cause is a shared memory overwrite due to improper input validation , which can lead to local privilege escala...

CVE-2026-56882

In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78957

In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56882

CVE-2026-56882 affects the Cellular Modem (Telephony) component of Google Pixel devices. A logic error in the code enables information disclosure that can escalate to remote code execution with low privileges and no user interaction . The CVSS 3.1 base score is 8.8 (High) with impacts of High acr...

CVE-2026-56879

In gmcmbmsghandler of gmcmba.c, there is a possible memory corruption due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55359

CVE-2026-55359 is a permission bypass caused by a logic error in the GPCA subcomponent of Google Pixel devices. It allows a local escalation of privilege from a low-privilege user account to full device compromise, with no user interaction required. The Pixel Update Bulletin rates it as Critical ...

EUVD-2026-78950

In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-55343

In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-55343

CVE-2026-55343 is a critical out-of-bounds write vulnerability in the decodeAmr function of ImsMediaAudioPlayer.cpp , a component within libpixelimsmedia on Google Pixel devices . The missing bounds check allows an attacker to achieve remote code execution with low privileges and required user in...

CVE-2026-55332

In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55331

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...