PT-2026-106147

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Multiple functions within nfa nfcee act.cc are susceptible to an out-of-bounds write, which occurs when data is written outside the intended memory boundary due ...

PT-2026-104705

Name of the Vulnerable Software and Affected Versions vdec affected versions not specified Description A type confusion issue in vdec allows for an out-of-bounds write, which occurs when a program writes data past the end of a buffer. This can lead to local escalation of privilege if a malicious...

PT-2026-106173

Name of the Vulnerable Software and Affected Versions sssd affected versions not specified Description A flaw allows a local user to cause a Denial of Service DoS by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the...

PT-2026-106145

Name of the Vulnerable Software and Affected Versions WifiPermissionsUtil.java affected versions not specified Description A missing permission check in the isSystem function of WifiPermissionsUtil.java allows for a possible sandbox escape. This issue can lead to local escalation of privilege...

PT-2026-104691

Name of the Vulnerable Software and Affected Versions apu affected versions not specified Description A memory corruption issue exists due to a use after free, which occurs when a program continues to use a pointer after it has been freed. This can lead to local escalation of privilege without...

PT-2026-104692

In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249024; Issue ID: MSV-9168...

PT-2026-104689

Name of the Vulnerable Software and Affected Versions battery affected versions not specified Description A missing bounds check in the battery component allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This can lead to local...

PT-2026-104690

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the display component allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundar...

PT-2026-104696

Name of the Vulnerable Software and Affected Versions aidl affected versions not specified Description A memory corruption issue exists in aidl caused by a use-after-free condition, which occurs when a program continues to use a pointer after it has been freed. This flaw could allow a malicious...

PT-2026-104695

Name of the Vulnerable Software and Affected Versions aidl affected versions not specified Description A missing permission check in aidl allows for a local escalation of privilege. This issue can be exploited by a malicious actor who has already obtained System privilege, and it requires no user...

PT-2026-104697

Name of the Vulnerable Software and Affected Versions Android AIDL affected versions not specified Description A memory corruption issue exists in aidl caused by a use-after-free condition, which occurs when a program continues to use a pointer after it has been freed. This flaw could allow a...

PT-2026-104684

Name of the Vulnerable Software and Affected Versions apu affected versions not specified Description Improper input validation in apu can lead to memory corruption, which may allow a local escalation of privilege without requiring additional execution privileges or user interaction...

PT-2026-104682

Name of the Vulnerable Software and Affected Versions neuropilot affected versions not specified Description A missing bounds check in neuropilot allows for an out of bounds write, which is a condition where data is written outside the intended memory boundary. This flaw could enable local...

CVE-2026-63268: Exposure of Sensitive Information to an Unauthorized Actor

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

CVE-2026-63267: Server-Side Request Forgery (SSRF)

LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions...

CVE-2026-58856: Improper Restriction of Operations within the Bounds of a Memory Buffer

In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-78862: Undefined Security Weakness

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board PCB...

CVE-2026-45524: Missing Authorization

In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55286: Improper Restriction of Operations within the Bounds of a Memory Buffer

In stpropnciprocess of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58880: Concurrent Execution using Shared Resource with Improper Synchronization

In handleappvalresponse of btifrc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...