CVE-2018-11913

Technical details for CVE-2018-11913 are not publicly provided in the connected documents. The available records reiterate a generic issue related to dev node configuration in CAF/Linux kernel builds. Monitor for updates from official advisories.

CVE-2025-36896

A privilege escalation vulnerability exists in the WLAN component of Android on Google Pixel devices. This flaw allows for unauthorized access to system resources (EoP). The issue is addressed in security patch levels of 2025-09-05 or later. Users are encouraged to accept the latest system update...

CVE-2026-0144

A memory safety issue exists in the writeAocCommand function within AocAudioCodec.cpp due to a missing bounds check . This vulnerability allows for a remote denial of service (DoS) without requiring additional execution privileges or user interaction. This issue specifically affects the Telephony...

CVE-2018-11893

CVE-2018-11893 is a vulnerability in CAF-based Android WLAN code (Linux kernel) where processing a vendor scan request can overflow a buffer when the input length of request IEs exceeds the maximum. The issue is documented across multiple Android CAF releases (Android for MSM, Firefox OS for MSM,...

CVE-2018-5908

CVE-2018-5908 affects CAF Android builds using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The root cause is a missing buffer length validation in a display function, enabling a potential buffer overflow. CVSS indicates a local, low-complexity attack with HIGH impact acro...

CVE-2025-36905

A logic error in the gxp_mapping_create function within gxp_mapping.c allows for local privilege escalation on Google Pixel devices. This vulnerability enables an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. While the specific affecte...

CVE-2025-36908

A security vulnerability in the lwis component of Google Pixel devices allows for an out-of-bounds write due to an incorrect bounds check in the lwis_top_register_io function of lwis_device_top.c. This flaw can lead to local elevation of privilege (EoP) and requires System execution privileges fo...

CVE-2025-48638

CVE-2025-48638 affects Google Android’s pKVM (protected Kernel-based Virtual Machine) in the kernel, specifically in __pkvm_load_tracing within trace.c. The flaw is an out-of-bounds write caused by improper input validation, enabling local escalation of privilege with no additional execution priv...

CVE-2026-0116

A vulnerability in the MFC component of Google Pixel devices (specifically in the mfc_core_isr.c file) allows for an out-of-bounds write due to a missing bounds check in the le_mfc_handle_released_buf function. This flaw could enable remote code execution (RCE) without requiring additional execu...

CVE-2026-58683

A vulnerability exists in the IP Multimedia Subsystem of Pixel devices due to an out-of-bounds write caused by improper input validation. This flaw could allow an attacker to achieve remote code execution (RCE) without requiring additional execution privileges or user interaction. The issue is sp...

CVE-2025-36901

CVE-2025-36901 identifies an elevation of privilege (EoP) vulnerability in the WLAN component of Android on Google Pixel devices. The flaw, tracked as A-396462223 , affects devices running versions prior to 2025-09-05 . Exploitation of this vulnerability could allow an attacker to gain elevated p...

CVE-2025-36923

A heap buffer overflow vulnerability exists in NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecoder.cpp within the Modem component on Google Pixel devices. This flaw allows for an out of bounds write , which could result in remote (proximal/adjacent) escalation of privilege without requirin...

CVE-2026-56914

CVE-2026-56914 identifies a use-after-free vulnerability in the Google eXperience Processor caused by improper locking in multiple locations. This security flaw allows for local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. Affected Pixel dev...

CVE-2025-36890

Google Pixel devices are affected by CVE-2025-36890 , an Elevation of Privilege (EoP) vulnerability within the WLAN subcomponent. The root cause is an OOB write issue in the BCM WiFi driver occurring while handling a message from the firmware, specifically when the wl_notify_scan_status function ...

CVE-2025-36898

Google Pixel devices are affected by a logic error in the Pixel Sim Lock component, which can lead to a local elevation of privilege (EoP). An attacker can exploit this vulnerability without requiring additional execution privileges or user interaction. Remediation is available through security p...

CVE-2026-0127

A memory corruption vulnerability exists in the NrmmMsgCodec::DecodeUPUTransparentContext function within the cn_NrmmDecoder.cpp file of the Google Android operating system. This flaw leads to a possible out-of-bounds read , which can be exploited to trigger a remote denial of service (DoS) by cr...

CVE-2026-0134

A logic error in the PostWipeData function within recovery_ui.cpp can lead to data persistence after a factory reset. This vulnerability allows for local information disclosure without requiring additional execution privileges or user interaction. This issue affects Pixel devices and was addresse...

CVE-2026-0154

A memory corruption vulnerability exists in the Modem component of Google Pixel devices, triggered during the processing of SIP REFER requests . An attacker can exploit this flaw to execute arbitrary code remotely without requiring additional privileges or user interaction. The vulnerability is c...

CVE-2025-36889

A permission bypass vulnerability exists in the Camera2 subcomponent of Google Pixel devices. The root cause is a confused deputy issue located in onCreateTasks of CameraActivity.java , which could allow an attacker to perform local information disclosure without requiring additional execution pr...

CVE-2025-36932

In the Google tracepoint IPC component, specifically in tracepoint_msg_handler of cpm/google/lib/tracepoint/tracepoint_ipc.c, a memory overwrite can occur due to improper input validation. This has the potential for local elevation of privilege without requiring additional execution privileges or...

CVE-2026-0119

The Google Pixel smartphone is affected by a memory corruption vulnerability in the usim_SendMCCMNCIndMsg function within usim_Registration.c . This flaw leads to an out-of-bounds write , which could allow for physical escalation of privilege without requiring additional execution privileges or u...

CVE-2026-0145

A logic error in the keymint component allows for a Permission Bypass , potentially leading to local information disclosure . This vulnerability does not require additional execution privileges or user interaction for exploitation. For Pixel devices, this issue is addressed by security patch leve...

CVE-2025-36918

A security vulnerability exists in the AoC component of Google Pixel devices, specifically within the aoc_ipc_core.c file. Due to improper input validation in the aoc_service_read_message function, an out-of-bounds read can occur. This flaw could allow for a local escalation of privilege (EoP) wi...

CVE-2025-36925

A security vulnerability exists in the AOC component of Google Pixel devices due to a missing bounds check in the WAVES_send_data_to_dsp function of libaoc_waves.c. This flaw leads to a possible out-of-bounds write , which could result in a local elevation of privilege without requiring additiona...

CVE-2025-32332

The Google Android operating system is affected by a memory corruption vulnerability caused by a use after free condition in multiple locations. This flaw allows an attacker to achieve local escalation of privilege without requiring additional execution privileges or user interaction. While sever...

CVE-2025-36900

The Google Pixel smartphone is affected by a security vulnerability in the lwis_device_test.c component. Specifically, an integer overflow in the lwis_test_register_io function can lead to an out-of-bounds (OOB) write . This vulnerability could allow for local escalation of privilege , requiring ...

CVE-2025-36931

A vulnerability exists in the GetHostAddress function within gxp_buffer.h , where a missing bounds check can lead to an out-of-bounds write . This flaw can be exploited to achieve local escalation of privilege without requiring additional execution privileges or user interaction. This issue speci...

CVE-2026-0030

Google Android is affected by a local privilege escalation vulnerability in the mem_protect.c component. The root cause is an incorrect bounds check in the __host_check_page_state_range function, which can lead to an out-of-bounds write . This vulnerability can be exploited without user interacti...

CVE-2026-0117

A vulnerability exists in the MFC component of Google Pixel devices due to an incorrect bounds check in the mfc_dec_dqbuf function within the mfc_dec_v4l2.c file. This flaw allows for an out-of-bounds write , which could lead to a local escalation of privilege (EoP). Exploitation does not require...

CVE-2026-0135

A remote code execution (RCE) vulnerability exists in the Modem component of Google Pixel devices due to a missing bounds check leading to an out of bounds read . Attackers can exploit this by sending specially crafted wireless data to execute arbitrary code without requiring user interaction or ...

CVE-2026-0136

A missing bounds check in the Modem component leads to a possible out-of-bounds read . This vulnerability could result in a remote denial of service (DoS) without requiring additional execution privileges or user interaction. The issue affects Pixel devices, as detailed in the Google security bul...

CVE-2026-0155

A missing bounds check in ImsMediaBitReader::ReadByteBuffer leads to a possible out-of-bounds (OOB) read . This vulnerability can result in remote information disclosure without requiring additional execution privileges or user interaction. The flaw specifically affects the libpixelimsmedia compo...

CVE-2025-36891

A security vulnerability in the WLAN subcomponent of Google Pixel devices allows for Elevation of Privilege (EoP) . The issue is categorized as High severity. Users should update their devices to the September 2025 security patch level (2025-09-05 or later) to address this and other reported vuln...

CVE-2025-36904

A critical elevation of privilege (EoP) vulnerability exists in the WLAN component of Android on Google Pixel devices prior to the 2025-09-05 security patch level. The root cause is a critical OOB write in the Broadcom Wi-Fi driver within the wl_android_get_best_channels function. This occurs bec...

CVE-2025-36938

A logic error in the append_uint32_le() function within U-Boot allows for a possible fault injection . This vulnerability can lead to a physical escalation of privilege without requiring additional execution privileges or user interaction. This issue specifically affects the Pixel Tablet Dock sub...

CVE-2025-48613

The CVE-2025-48613 entry describes a vulnerability in VBMeta where an attacker can modify and resign VBMeta using a test key, assuming the original image was signed with the same key. This could enable local privilege escalation with no additional privileges or user interaction. Connected sources...

CVE-2026-0109

The Google Pixel smartphone is vulnerable to a Denial of Service (DoS) attack due to a failed precondition check in the dhd_tcpdata_info_get function within dhd_ip.c. This flaw specifically affects the Wifi subcomponent. An attacker can trigger a remote DoS without requiring additional execution ...

CVE-2026-0113

A security vulnerability exists in the Cellular Modem subcomponent of Google Pixel devices due to an out-of-bounds write in the ns_GetUserData function of ns_SmscbUtilities.c. The issue stems from an incorrect bounds check and could allow for remote escalation of privilege without requiring addit...

CVE-2026-0128

CVE-2026-0128 affects code in RtcpFbPacket::decodeRtcpFbPacket, where an integer overflow can trigger an out-of-bounds read. This could lead to remote information disclosure without extra privileges. Exploitation requires user interaction. The connected documents consistently describe the same is...

CVE-2026-0133

A missing permission check in the smmu_attach_dev function of arm-smmu-v3.c allows for the signing of malicious Android Runtime bootclass artifacts . This vulnerability can be exploited to achieve local escalation of privilege without requiring additional execution privileges or user interaction....

CVE-2026-55366

A logic error in the IP Multimedia Subsystem code allows for a possible authentication bypass . This vulnerability could lead to remote escalation of privilege without requiring additional execution privileges or user interaction. No specific affected versions or remediation details are provided ...

CVE-2026-56882

A logic error in the Cellular Modem component allows for a possible information disclosure , which could lead to remote code execution (RCE) without requiring additional execution privileges or user interaction. This vulnerability affects Telephony functions on certain devices. Remediation is ava...

CVE-2025-36916

A security vulnerability exists in the TPU component of Google Pixel devices due to a double fetch caused by a race condition in PrepareWorkloadBuffers of gxp_main_actor.cc. This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interacti...

CVE-2025-36924

A high-severity Elevation of Privilege (EoP) vulnerability exists in the Modem subcomponent of Google Pixel devices. The root cause is an incorrect bounds check within the ss_DecodeLcsAssistDataReqMsg(void) function of ss_LcsManagement.c, which leads to an out-of-bounds write . Successful exploit...

CVE-2026-0160

Google Android contains a buffer overflow vulnerability in the TextRtpPayloadDecoderNode::DecodeT140 function within TextRtpPayloadDecoderNode.cpp . The root cause is a missing bounds check , which could allow an attacker to perform an out-of-bounds write by sending specially crafted RTP text dat...

CVE-2026-55331

A high-severity Remote Code Execution (RCE) vulnerability exists in the IP Multimedia Subsystem (Telephony) due to an out-of-bounds write caused by an incorrect bounds check. This flaw allows an attacker to execute arbitrary code without requiring additional execution privileges or user interacti...

CVE-2026-0131

A vulnerability in the libpixelimsmedia component on Google Pixel devices allows for a local elevation of privilege (EoP). The root cause is an integer overflow within the RtpPacket::decodePacket function, which can lead to an out-of-bounds access . Exploitation requires user interaction and no a...

CVE-2026-0151

A remote code execution (RCE) vulnerability exists in the PowerVR-GPU subcomponent due to an integer overflow in the IntfGraphCreate function within intfgraph.c . This flaw can lead to an out of bounds write , allowing for code execution without additional privileges or user interaction. The issu...

CVE-2026-0189

A logic error in the ac_init_policy function of init.c enables a permission bypass in the Bootloader component. This vulnerability allows for local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. Affected Google Pixel devices can be mitigated b...

CVE-2026-0192

A privilege escalation vulnerability exists in the Bootloader due to a missing permission check . This flaw could allow a local attacker to escalate privileges to System execution privileges without requiring user interaction. The vulnerability is addressed in Google Pixel devices with security p...