CVE-2026-55294

CVE-2026-55294 is a heap buffer overflow in the function ihevcd_get_tu_data_size of ihevcd_utils.c within the Android platform. The out-of-bounds write enables local escalation of privilege with only low privileges required and no user interaction. It is rated CVSS 3.1 7.8 (HIGH) . The vulnerabil...

EUVD-2026-74019

In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74015

In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49932

This local privilege escalation vulnerability exists in the parseParts function of PduParser.java within the Android platform, as tracked under the September 2026 Android Security Bulletin. The root cause is an out-of-bounds read due to a heap buffer overflow , which can be exploited with low pri...

EUVD-2026-74014

In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49919

In ttfacecolrblendlayer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74011

In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49918

CVE-2026-49918 is an Android vulnerability caused by an out-of-bounds write due to an integer overflow in multiple functions. The flaw enables local privilege escalation with no additional execution privileges required and no user interaction needed for exploitation. The assigned CVSS 3.1 score i...

CVE-2026-49918

In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49887

In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74008

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49884

CVE-2026-49884 is an out-of-bounds write in the rw_mfc_handle_read_op function of rw_mfc.cc in Android , caused by an incorrect bounds check. The flaw enables local privilege escalation with no additional execution privileges required and no user interaction. CVSS 3.1 base score is 7.8 (HIGH) . C...

CVE-2026-49884

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74006

In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49881

In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49881

CVE-2026-49881 is a local privilege escalation vulnerability in the Android framework, specifically in the serviceClassExists method of InCallController.java. The root cause is a logic error that enables arbitrary code execution without requiring additional execution privileges or user interactio...

CVE-2026-49881

In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74004

In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45531

CVE-2026-45531 affects Android and is located in the read_boot_region function of fsck.c . The root cause is an out-of-bounds read resulting from a heap buffer overflow , which can lead to local privilege escalation without requiring additional execution privileges or user interaction. The vulner...

CVE-2026-45531

In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...