CVE-2026-49887

In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74009

In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49887

A permissions bypass in the maybeRemoveInvalidInstallerPackageName function of InstallRepository.kt allows for unauthorized app updates. This vulnerability can lead to a local escalation of privilege without requiring additional execution privileges or user interaction. This issue is addressed in...

CVE-2026-49887

In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74008

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49884

A vulnerability exists in rw_mfc.cc within the rw_mfc_handle_read_op function due to an incorrect bounds check . This flaw allows for a possible out of bounds write , which could lead to a local escalation of privilege without requiring additional execution privileges. Exploitation does not requi...

CVE-2026-49882

In rwmfchandlereadop of rwmfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49882

A heap buffer overflow vulnerability exists in the rw_mfc_handle_read_op function of rw_mfc.cc . This memory safety issue could potentially lead to remote code execution without requiring additional execution privileges or user interaction. While the specific software and version are not explicit...

EUVD-2026-74006

In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49881

A logic error in InCallController.java within the Android 17 Telecom service allows an unprivileged app to achieve arbitrary code execution as the UID 1000 system_server user without user interaction. The vulnerability occurs because serviceClassExists uses createPackageContext with CONTEXT_IGNOR...

CVE-2026-49879

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74005

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49879

A vulnerability exists in multiple functions of rw_t3t.cc where an integer overflow can lead to an out of bounds write . This flaw could allow for remote code execution without requiring additional execution privileges or user interaction. While technical details regarding specific affected versi...

CVE-2026-49879

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74004

In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74003

In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-45528

A vulnerability exists in the StorageManagerService.java component within the getManageSpaceActivityIntent function. This is caused by an unsafe PendingIntent , which could enable a LaunchAnyWhere chain. Successful exploitation could result in a local escalation of privilege without requiring add...

CVE-2026-45527

In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74001

In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45525

In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...