CVE-2026-56975

CVE-2026-56975 is an improper input validation flaw in the Cellular Modem component of a Google Pixel device, as disclosed in the Pixel Security Bulletin 2026-09-01 . The vulnerability enables a remote (proximal/adjacent) denial of service with no additional execution privileges required and no u...

CVE-2026-56974

This vulnerability affects Google Pixel devices in the libpixelimsmedia component. The root cause is an out-of-bounds write in the Start function of AudioRtpPayloadEncoderNode.cpp, triggered by improper input validation. The CVE description states it could lead to remote code execution with no ad...

EUVD-2026-78979

In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-56974

In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-56974

In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

EUVD-2026-78978

In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56973

CVE-2026-56973 is a Critical -severity local elevation of privilege (EoP) in the GDMC subcomponent of Google Pixel devices, caused by a logic error in the code. An attacker with System execution privileges can exploit it without user interaction. The fix is included in the 2026-09-05 security pat...

CVE-2026-56973

In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78977

In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56970

In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56970

In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78976

In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78975

In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56967

CVE-2026-56967 affects the Cellular Modem component on Google Pixel devices . The vulnerability is a heap buffer overflow causing an out-of-bounds write, which can lead to remote code execution from a proximal/adjacent source. No additional execution privileges or user interaction are required fo...

CVE-2026-56964

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78974

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56960

CVE-2026-56960 affects Google Pixel devices, as indicated by the Android security bulletin reference (2026-09-01) and the associated OSV Android bug ID (PUB-A-508685685). The vulnerability is a use-after-free caused by a logic error in multiple code locations, enabling remote privilege escalation...

EUVD-2026-78973

In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56960

In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56945

In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...