EUVD-2026-5529

In vpummap of vpuioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0106

The Android VPU driver is vulnerable to a local privilege escalation (EoP) due to a missing bounds check in the vpu_mmap component of the vpu_ioctl function. This flaw allows an attacker to perform an arbitrary address mmap , potentially granting a low-privileged userland context arbitrary read/w...

CVE-2026-0106: Improper Restriction of Operations within the Bounds of a Memory Buffer

In vpummap of vpuioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...