EUVD-2026-78999

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58683

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78998

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58683

CVE-2026-58683 is a Critical remote code execution vulnerability in the IP Multimedia Subsystem (Telephone subcomponent) of Google Pixel devices. The root cause is an out-of-bounds write due to improper input validation , exploitable over the network with low privileges required and no user inter...

CVE-2026-58683

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58679

In gftatestsetconfig of gftatest.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58679

CVE-2026-58679 is a heap buffer overflow in the function gf_ta_test_set_config within gf_ta_test.c, caused by a logic error . Based on the reference to the Android Pixel Security Bulletin (September 2026) , the vulnerability affects Google Pixel devices. The flaw can lead to local escalation of p...

EUVD-2026-78997

In gftatestsetconfig of gftatest.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58678

In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58678

CVE-2026-58678 is a permission bypass in the Bootloader of Google Pixel devices, caused by a logic error in the code. The vulnerability allows local escalation of privilege , requiring System execution privileges, with no user interaction needed for exploitation. It was disclosed in the Android P...

EUVD-2026-78996

In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57042

In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78995

In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57042

CVE-2026-57042 is a permission bypass vulnerability in the Android component DreamPickerReceiver.kt , caused by a confused deputy issue across multiple functions. The flaw enables local escalation of privilege where the attacker must already possess System execution privileges, and no user intera...

CVE-2026-57035

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57035

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57035

This vulnerability affects Android (Pixel) devices, as referenced by the 2026-09-01 Pixel security bulletin . The root cause is a missing bounds check in multiple locations, leading to an out-of-bounds write . The impact is a local escalation of privilege , requiring System execution privileges a...

EUVD-2026-78994

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57014

CVE-2026-57014 is an out-of-bounds write in the NFC HAL component (phNxpNciHal_ext_process_nfc_init_rsp in phNxpNciHal_ext.cc), caused by a missing bounds check. It affects Android (Pixel) devices and allows a local attacker with low privileges to achieve escalation of privilege with full impact ...

CVE-2026-57014

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...