PT-2026-5636

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10362725; Issue ID: MSV-5694...

PT-2026-5644

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2022-50952 Banco Guayaquil 8.0.0 Mobile iOS Cross-Site Scripting via Profile Name Input

Banco Guayaquil 8.0.0 mobile iOS application contains a persistent cross-site scripting vulnerability in the TextBox Name Profile input. Attackers can inject malicious script code through a POST request that executes on application review without user interaction...

PUB-A-463674877

In vpummap of vpuioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36911

In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote proximal/adjacent information disclosure of user's conversations and location with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48647

In cpmfwtpmsghandler of cpm/google/lib/tracepoint/cpmfwtpipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48647

In cpmfwtpmsghandler of cpm/google/lib/tracepoint/cpmfwtpipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48647

In cpmfwtpmsghandler of cpm/google/lib/tracepoint/cpmfwtpipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-3272

In cpm fwtp msg handler of cpm/google/lib/tracepoint/cpm fwtp ipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003896)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003896 advisory. In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege wi...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004392)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004392 advisory. In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with syste...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001602)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001602 advisory. In driveroverridestore of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with Syst...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001440)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001440 advisory. In bindertransaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004083)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004083 advisory. In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004040)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004040 advisory. In em28xxunregisterdvb of em28xx-dvb.c, there is a possible use after free issue. This could lead to local escalation of privilege with no additional execution...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001405)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001405 advisory. In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004158)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004158 advisory. In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004352 advisory. In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001514 advisory. In bindertransaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001488)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001488 advisory. In memzeroexplicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosure wit...