CVE-2026-49882

CVE-2026-49882 is a heap buffer overflow in the rw_mfc_handle_read_op function of rw_mfc.cc, affecting Android (tracked as ASB-A-503553866 in the 2026-09-01 Android Security Bulletin). The flaw can lead to remote code execution over the network with low privileges required and no user interaction...

EUVD-2026-74004

In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45531

CVE-2026-45531 affects Android and is located in the read_boot_region function of fsck.c . The root cause is an out-of-bounds read resulting from a heap buffer overflow , which can lead to local privilege escalation without requiring additional execution privileges or user interaction. The vulner...

CVE-2026-45531

In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73997

In a2dpvendoropusdecoderdecodepacket of a2dpvendoropusdecoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45515

In a2dpvendoropusdecoderdecodepacket of a2dpvendoropusdecoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45515

CVE-2026-45515 affects the Android A2DP vendor Opus decoder (a2dp_vendor_opus_decoder.cc), where a heap buffer overflow in the a2dp_vendor_opus_decoder_decode_packet function allows an out-of-bounds write. This can lead to local escalation of privilege with no additional execution privileges requ...

CVE-2026-28662

In p2pprocessprovdiscbootstrapreq of p2ppd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28662

CVE-2026-28662 is a heap buffer overflow (CWE-122) in Android's Wi-Fi P2P component, specifically in the p2p_process_prov_disc_bootstrap_req function of p2p_pd.c. The out-of-bounds write can lead to remote code execution from a proximal/adjacent attacker with no user interaction and no additional...

EUVD-2026-73991

In p2pprocessprovdiscbootstrapreq of p2ppd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28618

CVE-2026-28618 is a heap buffer overflow in dec_frm_prepare of OpenAPV (oapv.c), the APV (Advanced Professional Video, RFC 9924) decoder in Android's Media Codecs component. A crafted APV bitstream with a frame height exceeding the allocated 64×64 plane triggers an out-of-bounds write, enabling r...

EUVD-2026-73967

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28618

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73917

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally...

CVE-2026-84000

CVE-2026-84000 is a heap-based buffer overflow in Microsoft Graphics Component that allows an authorized attacker to execute code locally. The vulnerability requires local access and low privileges but no user interaction, resulting in high impact to confidentiality, integrity, and availability (...

CVE-2026-83995

CVE-2026-83995 is a heap-based buffer overflow in Windows NTFS that allows an authorized attacker to escalate privileges locally. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) , with low attack complexity, low privileges required, and no user interaction needed, resulting in high impac...

EUVD-2026-73915

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-83992

CVE-2026-83992 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 base score of 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network reachability with low ...

EUVD-2026-73914

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

CVE-2026-83985

CVE-2026-83985 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized local attacker to elevate privileges . The vulnerability is rated CVSS 7.8 (HIGH) with full impact to confidentiality, integrity, and availability. Attack complexity is low, privileges required a...