CVE-2026-58773

The Kernel component is vulnerable to an out-of-bounds write due to a missing bounds check in the link_load_gnss_image function of link_device.c. This flaw could lead to a local escalation of privilege , requiring System execution privileges . Exploitation does not require user interaction. For P...

CVE-2025-36912

A logic error in the cellular modem code of Google Pixel devices can lead to a remote denial of service (DoS) . This vulnerability does not require additional execution privileges or user interaction for exploitation. The issue is addressed in security patch levels of 2025-12-05 or later. No spec...

CVE-2025-36929

The TPU component on Google Pixel devices is vulnerable to an information leak in the AreFencesRegistered function of gxp_fence_manager.cc. This flaw is caused by improper input validation , which could allow for local information disclosure without requiring additional execution privileges or us...

CVE-2026-0118

A logic error in the oobconfig component of Google Pixel devices allows for a bypass of carrier restrictions. This vulnerability could lead to a local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The issue is addressed in devices running sec...

CVE-2025-36919

A double free vulnerability exists in the aocc_read function within aoc_channel_dev.c due to improper locking. This flaw affects the AoC subcomponent on Google Pixel devices and could lead to local elevation of privilege (EoP) without requiring additional execution privileges or user interaction....

CVE-2025-36920

A vulnerability in the hyp_alloc function of arch/arm64/kvm/hyp/nvhe/alloc.c allows for an out-of-bounds write due to improper input validation. This issue specifically impacts the pKVM component and could lead to local escalation of privilege (EoP) without requiring additional execution privileg...

CVE-2026-0121

A use-after-free read vulnerability exists in the VPU component due to a race condition . This flaw could allow for local information disclosure without requiring additional execution privileges or user interaction. This issue specifically affects Google Pixel devices. Remediation is provided thr...

CVE-2026-0129

A missing bounds check in the RtcpByePacket::decodeByePacket function can lead to remote information disclosure . This vulnerability affects the libpixelimsmedia component on Google Pixel devices. Exploitation requires user interaction and does not require additional execution privileges. The iss...

CVE-2026-0143

A use after free memory corruption vulnerability exists in the lwis_device_external_event_emit function within lwis_event.c of the LWIS component in Google Android . An attacker with System execution privileges could exploit this flaw to achieve a local escalation of privilege . No specific explo...

CVE-2026-55359

CVE-2026-55359 identifies a permission bypass vulnerability in the GPCA component of certain Google Pixel devices. The flaw originates from a logic error in the code, which could allow an attacker to achieve local escalation of privilege (EoP). Exploitation requires User execution privileges but ...

CVE-2026-56997

A vulnerability exists in the Av1DecodeFrameTag of vp9hwd_headers.cc due to a missing bounds check, which can result in an out-of-bounds write . This flaw could lead to remote escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The issue specifical...

CVE-2026-58728

A memory corruption vulnerability exists in the ARM64_TLBI function of mmu.h due to a race condition caused by concurrent execution using a shared resource with improper synchronization. This flaw could allow a local attacker to achieve elevation of privilege (EoP) without requiring additional ex...

CVE-2025-36892

Google Pixel devices are affected by a Denial of Service (DoS) vulnerability in the WLAN subcomponent, identified as CVE-2025-36892 . The issue stems from uncontrolled resource consumption . Security patch levels of 2025-09-05 or later address this vulnerability. Exploitation details are not prov...

CVE-2026-0114

A critical out-of-bounds write vulnerability exists in the Modem component of Google Pixel devices due to an incorrect bounds check. This flaw could allow for remote code execution (RCE) without requiring additional execution privileges or user interaction. The issue is addressed in security patc...

CVE-2026-0122

The Google Pixel smartphone contains a Critical security vulnerability (CVE-2026-0122 ) in the Baseband subcomponent. The flaw is caused by memory corruption leading to an out-of-bounds write , which could allow for remote code execution (RCE) without requiring additional execution privileges or ...

CVE-2026-0132

A heap buffer overflow in the Modem component of Google Pixel devices can lead to an out of bounds write . This vulnerability allows for remote code execution (RCE) without requiring additional execution privileges or user interaction. This issue is addressed in the security patch level of 2026-0...

CVE-2026-56942

A vulnerability exists in the ReadTileInfo function within vp9hwd_headers.cc due to a missing bounds check . This flaw can lead to an out-of-bounds write , potentially allowing for remote escalation of privilege without requiring additional execution privileges or user interaction. Evidence of pu...

CVE-2026-58766

A logic error in multiple functions of arm-smmu-v3.c enables a possible local escalation of privilege . This vulnerability allows for privilege elevation without requiring additional execution privileges or user interaction. Exploitation details are not provided in the documentation.

CVE-2025-36936

The CVE-2025-36936 entry concerns Tachyon Server, specifically the GetTachyonCommand function in tachyon_server_common.h. The issue is a potential out-of-bounds write caused by an integer overflow, enabling local elevation of privilege with no additional execution privileges required and no user ...

CVE-2026-0200

A heap buffer overflow in the Cellular Modem component leads to a possible out-of-bounds write . This vulnerability could allow for remote escalation of privilege without requiring additional execution privileges or user interaction. The issue is specifically identified in the Telephony subcompon...

CVE-2026-55332

A possible out-of-bounds write exists in multiple locations due to improper input validation . This vulnerability could allow for local escalation of privilege requiring System execution privileges . Exploitation does not require user interaction. While the impact is significant, no specific affe...

CVE-2026-56978

CVE-2026-56978 is a vulnerability in the Bootloader component of Google Pixel devices. It is caused by an out-of-bounds read within the get_global_config_item_addr function of gc.c due to a missing bounds check . This flaw could allow for a local escalation of privilege (EoP) without requiring ad...

CVE-2026-0137

A use after free vulnerability exists in the edgetpu_sync_fence_group_shutdown() function of edgetpu-dmabuf.c within the EdgeTPU Kernel Driver . This flaw allows for a local elevation of privilege (EoP) requiring System execution privileges . Exploitation does not require user interaction. Affect...

CVE-2026-0171

A logic error in the code of the BigWave component on Google Pixel devices allows for a possible out-of-bounds write in multiple locations. This vulnerability could lead to remote code execution without requiring additional execution privileges or user interaction. The issue is addressed in secur...

CVE-2026-0186

A logic error in the ac_init_one_sswrp function of init.c allows for a local elevation of privilege on Google Pixel devices. Exploitation requires System execution privileges , and no user interaction is required. This vulnerability is addressed in security patch levels of 2026-09-05 or later. No...

CVE-2026-0187

CVE-2026-0187 is a privilege escalation vulnerability affecting the GSA component on Google Pixel devices. The root cause is a logic error within the gsa_sw_pk_hash_compare function in image-auth-srv.c. An attacker with System execution privileges can exploit this flaw to achieve a local escalati...

CVE-2026-56974

The libpixelimsmedia component in Pixel devices is vulnerable to an out-of-bounds write due to improper input validation in Start of AudioRtpPayloadEncoderNode.cpp . This flaw could allow for remote code execution without requiring additional execution privileges, although user interaction is req...

CVE-2026-58691

A permission bypass vulnerability exists in the FsmReleaseKey function within fsm.c . The root cause is improper input validation , which can lead to local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. This vulnerability affects the GPCA comp...

CVE-2026-58846

A use after free vulnerability exists in the kvm_iommu_map_sg function within iommu.c . This flaw is caused by a missing permission check and could allow for local escalation of privilege without requiring additional execution privileges or user interaction. While specific software versions or pa...

CVE-2026-0158

A missing permission check in the Camera component allows an unauthorized way to access photos, leading to local information disclosure . This vulnerability requires no additional execution privileges and no user interaction for exploitation. For Google Pixel devices, this issue is addressed in s...

CVE-2026-56945

In VPU , a confused deputy vulnerability allows for a possible out-of-bounds write . This flaw could lead to a local escalation of privilege without requiring additional execution privileges or user interaction. No specific exploit links or remediation details are provided in the documents.

CVE-2026-56970

A permission bypass exists in multiple locations due to missing permission checks . This vulnerability allows for local escalation of privilege without requiring additional execution privileges or user interaction. While the specific software and versions are not detailed in the provided document...

CVE-2026-56972

A vulnerability in the Bootloader component of Google Pixel devices allows for a possible out-of-bounds write due to an incorrect bounds check. This flaw could lead to a local escalation of privilege (EoP) , requiring System execution privileges for exploitation. No user interaction is required. ...

CVE-2026-0177

A vulnerability exists in the do_sss_aes_gcm_256_op function of crypto-aes.c , where a missing bounds check leads to a possible out-of-bounds read . This flaw could result in local information disclosure . Exploitation requires System execution privileges , and no user interaction is necessary. F...

CVE-2026-28616

The Setup Wizard contains a confused deputy vulnerability that allows an attacker to force a connection to a malicious network. This flaw can lead to a local escalation of privilege without requiring additional execution privileges or user interaction. While the vulnerability is documented across...

CVE-2026-55301

A vulnerability exists in the Wave6VpuDecFlush function within wave6.c , caused by a missing bounds check . This oversight leads to a potential out-of-bounds write , which could allow for a local escalation of privilege without requiring additional execution privileges or user interaction. Exploi...

CVE-2026-55317

A vulnerability in the printf function of printf.c allows for a possible out-of-bounds write due to improper input validation. This flaw could lead to a local escalation of privilege (EoP), requiring System execution privileges for exploitation. No user interaction is required. This issue specifi...

CVE-2026-56923

A memory corruption vulnerability exists in the handle_unmap_req function of tipc_virtio_dev.c . This flaw is caused by a race condition (improper synchronization during concurrent execution using a shared resource), which could allow for local escalation of privilege without requiring additional...

CVE-2026-56985

CVE-2026-56985 affects Google Pixel devices, specifically impacting the KeyMint component. A type confusion vulnerability in multiple files allows an attacker to obtain signatures, potentially leading to a local escalation of privilege (EoP). Exploitation does not require additional execution pri...

CVE-2026-58699

A vulnerability exists in the Vp9DecEndOfStream function within vp9hwd_output.cc . The root cause is an incorrect bounds check that leads to a possible out-of-bounds read . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interactio...

CVE-2026-56907

A shared memory overwrite vulnerability exists in VPU due to improper input validation . This flaw could allow for a local escalation of privilege , requiring System execution privileges to exploit. Notably, no user interaction is required for exploitation. Details regarding specific affected ver...

CVE-2026-56986

A potential out-of-bounds read caused by type confusion exists in multiple files within the affected software. This vulnerability could facilitate a local escalation of privilege without requiring additional execution privileges or user interaction. While the specific product and component versio...

CVE-2026-57006

A logic error in the acfw_ffa.c component of the ACFW subcomponent enables a secret read vulnerability. This flaw could lead to local information disclosure , requiring System execution privileges for exploitation. No user interaction is required. Remediation for affected Pixel devices is include...

CVE-2026-57042

A permission bypass vulnerability exists in multiple functions of DreamPickerReceiver.kt due to a confused deputy flaw. This issue can lead to a local escalation of privilege requiring System execution privileges . The vulnerability does not require user interaction for exploitation. No specific ...

CVE-2026-58678

A logic error in the Bootloader component allows for a permission bypass , which could lead to a local escalation of privilege requiring System execution privileges . This vulnerability affects Google Pixel devices. Exploitation does not require user interaction. Security patch levels of 2026-09-...

CVE-2026-58701

A race condition in trusty_dputc of generic-arm64-smcall.c allows for a possible out-of-bounds write . This vulnerability could lead to a local escalation of privilege , requiring System execution privileges . No user interaction is required for exploitation. The issue affects the Trusty componen...

CVE-2026-58726

A permission bypass vulnerability exists in the FsmReleaseKey function of fsm.c due to a missing permission check . This flaw allows for a local escalation of privilege (EoP) on supported Google Pixel devices, specifically affecting the GPCA component. Exploitation requires System execution privi...

CVE-2026-0115

The Trusted Execution Environment is vulnerable to a key leak caused by side-channel information disclosure . This flaw allows for the disclosure of physical information without requiring additional execution privileges, though user interaction is necessary for exploitation. This vulnerability af...

CVE-2026-0123

The Google Pixel is affected by a vulnerability in the AOC subcomponent due to a missing bounds check in the EfwApTransport::ProcessRxRing function of efw_ap_transport.cc . This flaw allows for an out-of-bounds write , which could lead to local escalation of privilege (EoP). Exploitation requires...

CVE-2026-55304

A logic error within the addr_remap_address_map function in remap.c allows for a local escalation of privilege . Exploitation requires System execution privileges and does not require user interaction. Specific details regarding the affected software version or remediation steps are not provided ...