CVE-2026-58699

A vulnerability exists in the Vp9DecEndOfStream function within vp9hwd_output.cc . The root cause is an incorrect bounds check that leads to a possible out-of-bounds read . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interactio...

EUVD-2026-78990

In acfwffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57006

In acfwffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57006

A logic error in the acfw_ffa.c component of the ACFW subcomponent enables a secret read vulnerability. This flaw could lead to local information disclosure , requiring System execution privileges for exploitation. No user interaction is required. Remediation for affected Pixel devices is include...

CVE-2026-56986

A potential out-of-bounds read caused by type confusion exists in multiple files within the affected software. This vulnerability could facilitate a local escalation of privilege without requiring additional execution privileges or user interaction. While the specific product and component versio...

CVE-2026-56986

In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56986

In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78985

In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78981

In getglobalconfigitemaddr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56978

In getglobalconfigitemaddr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56978

In getglobalconfigitemaddr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56978

CVE-2026-56978 is a vulnerability in the Bootloader component of Google Pixel devices. It is caused by an out-of-bounds read within the get_global_config_item_addr function of gc.c due to a missing bounds check . This flaw could allow for a local escalation of privilege (EoP) without requiring ad...

EUVD-2026-78972

In gfalgogetcacheddumpdata of gfalgo.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56958

In gfalgogetcacheddumpdata of gfalgo.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56958

In gfalgogetcacheddumpdata of gfalgo.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56958

A missing bounds check in the gf_algo_get_cached_dump_data function of gf_algo.c leads to a possible out-of-bounds read . This vulnerability could result in local information disclosure without requiring additional execution privileges or user interaction. Exploitation details are not provided in...

CVE-2026-0177

In dosssaesgcm256op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79148

In dosssaesgcm256op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0177

In dosssaesgcm256op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0177

A vulnerability exists in the do_sss_aes_gcm_256_op function of crypto-aes.c , where a missing bounds check leads to a possible out-of-bounds read . This flaw could result in local information disclosure . Exploitation requires System execution privileges , and no user interaction is necessary. F...