CVE-2026-55332

In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55331

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55331

CVE-2026-55331 affects Google Pixel devices in the IP Multimedia Subsystem (Telephony subcomponent). The root cause is an out-of-bounds write due to an incorrect bounds check, which can lead to remote code execution with no additional privileges and no user interaction required. The vulnerability...

EUVD-2026-78948

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78947

In gfbaseupdatefingerbase of gfbase.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55323

In gfbaseupdatefingerbase of gfbase.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55323

CVE-2026-55323 is a heap buffer overflow (out-of-bounds write) in the Goodix Fingerprint TA (Trusted Application) on supported Pixel devices , specifically in the function gf_base_update_finger_base of gf_base.c. It allows local elevation of privilege with low privileges and no user interaction, ...

CVE-2026-55317

In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78945

In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55317

CVE-2026-55317 is an out-of-bounds write in the printf function of printf.c within the Bootloader component of Google Pixel devices, caused by improper input validation. The flaw allows local privilege escalation to System level without user interaction, though it requires the attacker to already...

EUVD-2026-79159

In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55301

In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55301

CVE-2026-55301 affects the Wave6 VPU driver (Wave6VpuDecFlush in wave6.c) in Android (Pixel) devices. The root cause is a missing bounds check that permits an out-of-bounds write, enabling local privilege escalation with no additional execution privileges and no user interaction required. The CVS...

CVE-2026-0200

CVE-2026-0200 is an out-of-bounds write in the Cellular Modem (Telephony subcomponent) of Google Pixel devices , caused by a heap buffer overflow . This flaw enables remote escalation of privilege without additional execution privileges or user interaction. It is classified as Critical severity a...

CVE-2026-0200

In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79157

In gftatestsetconfig of gftatest.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0199

CVE-2026-0199 is a local elevation of privilege vulnerability in the Goodix Fingerprint Trusted Application (TA) on Google Pixel devices. The root cause is an out-of-bounds write in the function gf_ta_test_set_config within gf_ta_test.c, resulting from improper input validation. No additional exe...

CVE-2026-0199

In gftatestsetconfig of gftatest.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0177

In dosssaesgcm256op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79148

In dosssaesgcm256op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...