CVE-2026-56941

In multiple functions of fpcteehal.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56941

CVE-2026-56941 is a use-after-free vulnerability in multiple functions of fpc_tee_hal.c (Fingerprint TEE HAL) within the Android platform. The root cause is a logic error leading to a use-after-free condition. The impact is local escalation of privilege with no additional execution privileges req...

EUVD-2026-78968

In multiple functions of fpcteehal.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78962

In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56914

CVE-2026-56914 is a use-after-free vulnerability caused by improper locking in multiple locations within the Google eXperience Processor kernel component on supported Google Pixel devices. The vulnerability allows a local elevation of privilege with High severity, requiring no additional executio...

CVE-2026-56914

In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78959

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56888

In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78958

In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56882

In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78957

In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56882

CVE-2026-56882 is a remote code execution vulnerability in the Cellular Modem (Telephony) component of Google Pixel devices, caused by a logic error in the code. The flaw enables information disclosure that can escalate to RCE without requiring additional privileges or user interaction. The vulne...

CVE-2026-55366

In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78952

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55359

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55359

CVE-2026-55359 is a Critical -severity elevation of privilege vulnerability in the GPCA component of Google Pixel devices, caused by a permission bypass due to a logic error. Exploitation requires local access with User privileges and does not need user interaction. CISA's SSVC assessment indicat...

CVE-2026-55351

In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78950

In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

EUVD-2026-78949

In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55332

In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...