CVE-2026-56973

CVE-2026-56973 identifies a logic error in the GDMC component on Google Pixel devices. This flaw allows for a local elevation of privilege (EoP) requiring System execution privileges . Exploitation does not require user interaction. The vulnerability is addressed in security patch levels of 2026-...

EUVD-2026-78978

In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56973

In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78977

In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56972

In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56972

In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56972

A vulnerability in the Bootloader component of Google Pixel devices allows for a possible out-of-bounds write due to an incorrect bounds check. This flaw could lead to a local escalation of privilege (EoP) , requiring System execution privileges for exploitation. No user interaction is required. ...

CVE-2026-56964

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56964

A use-after-free vulnerability exists in multiple locations due to a race condition caused by improper synchronization during concurrent execution using a shared resource. This flaw could allow for local escalation of privilege by an attacker who obtains System execution privileges . Exploitation...

EUVD-2026-78974

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56950

A possible information disclosure vulnerability exists in the validate_ns_buf function within the mbu_class.rs file. This issue stems from improper input validation and could allow for local information disclosure. Exploitation of this vulnerability requires System execution privileges , and no u...

CVE-2026-56932

A memory corruption vulnerability exists in the Trusted Execution Environment due to improper input validation . This flaw could allow for a local escalation of privilege (EoP) requiring System execution privileges . The vulnerability does not require user interaction for exploitation. Affected P...

CVE-2026-56932

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78967

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56932

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56922

A permission bypass vulnerability exists in the CPM component due to a confused deputy issue. This flaw could allow for local escalation of privilege with System execution privileges required. Exploitation of this vulnerability does not require user interaction. Affected Google Pixel devices can ...

EUVD-2026-78963

In bigoworkerthread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56915

A race condition exists within the bigo_worker_thread of bigo.c , which can lead to a local escalation of privilege . Exploitation requires System execution privileges and does not require user interaction. No specific affected versions, remediation details, or exploit links are provided in the d...

CVE-2026-56907

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56907

A shared memory overwrite vulnerability exists in VPU due to improper input validation . This flaw could allow for a local escalation of privilege , requiring System execution privileges to exploit. Notably, no user interaction is required for exploitation. Details regarding specific affected ver...