CVE-2026-58710

CVE-2026-58710 is an out-of-bounds write in DecodeFilmGrainParams of film_grain_dec.cc in Google Pixel devices, caused by a missing bounds check . It enables remote code execution with low privileges and no user interaction. The Pixel Security Bulletin classifies it under the BigOcean subcomponen...

EUVD-2026-79003

In trustydputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58701

CVE-2026-58701 affects the Trusty Trusted Execution Environment on Google Pixel devices. The vulnerable code is in the trusty_dputc function within generic-arm64-smcall.c , where a race condition can lead to an out-of-bounds write , enabling local elevation of privilege. Exploitation requires Sys...

CVE-2026-58701

In trustydputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58699

CVE-2026-58699 affects the Vp9DecEndOfStream function in vp9hwd_output.cc (Android VP9 hardware decoder output path). An incorrect bounds check allows an out-of-bounds read , which can be leveraged for local privilege escalation with only low privileges and no user interaction. The CNA-assigned C...

EUVD-2026-79002

In Vp9DecEndOfStream of vp9hwdoutput.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58699

In Vp9DecEndOfStream of vp9hwdoutput.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78998

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58683

CVE-2026-58683 is a Critical remote code execution vulnerability in the IP Multimedia Subsystem (Telephone subcomponent) of Google Pixel devices. The root cause is an out-of-bounds write due to improper input validation , exploitable over the network with low privileges required and no user inter...

CVE-2026-58683

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57035

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78994

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57035

This vulnerability affects Android (Pixel) devices, as referenced by the 2026-09-01 Pixel security bulletin . The root cause is a missing bounds check in multiple locations, leading to an out-of-bounds write . The impact is a local escalation of privilege , requiring System execution privileges a...

CVE-2026-57014

CVE-2026-57014 is an out-of-bounds write in the NFC HAL component (phNxpNciHal_ext_process_nfc_init_rsp in phNxpNciHal_ext.cc), caused by a missing bounds check. It affects Android (Pixel) devices and allows a local attacker with low privileges to achieve escalation of privilege with full impact ...

EUVD-2026-78993

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57014

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56997

In Av1DecodeFrameTag of vp9hwdheaders.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78989

In Av1DecodeFrameTag of vp9hwdheaders.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56997

CVE-2026-56997 is an out-of-bounds write in the function Av1DecodeFrameTag of vp9hwd_headers.cc , caused by a missing bounds check. It affects Google Pixel devices, specifically the BigOcean subcomponent, and enables remote elevation of privilege with no user interaction and no additional executi...

CVE-2026-56989

CVE-2026-56989 is an out-of-bounds write in the Android platform (referenced in the Pixel Security Bulletin for 2026-09-01, tracked as OSV PUB-A-508704693 ) caused by a missing bounds check in multiple locations. It can lead to local escalation of privilege requiring System execution privileges ,...