CVE-2026-0143

The CVE-2026-0143 issue is in LWIS (lwIS) device handling: in lwis_device_external_event_emit of lwis_event.c, a memory corruption via use-after-free is reported, enabling local escalation of privilege with System execution privileges, and no user interaction is required. Public documents from NV...

CVE-2026-0115

Technical details for CVE-2026-0115 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-0123

The CVE-2026-0123 entry concerns the EfwApTransport::ProcessRxRing function in efw_ap_transport.cc, where an out-of-bounds write can occur due to a missing bounds check. This vulnerability is described as enabling local elevation of privilege with no additional execution privileges required and n...

CVE-2025-36936

The CVE-2025-36936 entry concerns Tachyon Server, specifically the GetTachyonCommand function in tachyon_server_common.h. The issue is a potential out-of-bounds write caused by an integer overflow, enabling local elevation of privilege with no additional execution privileges required and no user ...

CVE-2026-58710

CVE-2026-58710 is an out-of-bounds write in DecodeFilmGrainParams of film_grain_dec.cc in Google Pixel devices, caused by a missing bounds check . It enables remote code execution with low privileges and no user interaction. The Pixel Security Bulletin classifies it under the BigOcean subcomponen...

CVE-2026-0110

CVE-2026-0110 describes a memory corruption issue in MM_DATA_IND of cn_NrSmMsgHdlrFromMM.cpp that can lead to a remote elevation of privilege with no additional execution privileges or user interaction required. The vulnerability is referenced across multiple sources (NVD, Red Hat, EUVD, CVE reco...

CVE-2026-58683

CVE-2026-58683 is a Critical remote code execution vulnerability in the IP Multimedia Subsystem (Telephone subcomponent) of Google Pixel devices. The root cause is an out-of-bounds write due to improper input validation , exploitable over the network with low privileges required and no user inter...

CVE-2026-0112

CVE-2026-0112 describes a use-after-free in vpu_open_inst of vpu_ioctl.c caused by a race condition, enabling local privilege escalation with no extra execution privileges or user interaction required. Multiple feeds (NVD/Red Hat/EUVD/PT Security/OSV) report the same description. The connected so...

CVE-2026-28616

CVE-2026-28616 is a vulnerability in the Android Setup Wizard component. Due to a confused deputy flaw, a local attacker can force the device to connect to a malicious network, enabling local escalation of privilege without requiring additional execution privileges or user interaction. The CVSS 3...

CVE-2026-56970

CVE-2026-56970 is a permission bypass vulnerability in Android (Pixel) devices, caused by a missing permission check in multiple locations. It enables local escalation of privilege with no additional execution privileges required and no user interaction. The CVSS 3.1 score is 7.8 (HIGH) with impa...

CVE-2026-56978

CVE-2026-56978 is an out-of-bounds read in the get_global_config_item_addr function of gc.c within the Bootloader component of Google Pixel devices, caused by a missing bounds check. It enables local privilege escalation with low privileges required and no user interaction, rated CVSS 7.8 (HIGH) ...

CVE-2026-56982

CVE-2026-56982 affects the VPU (Video Processing Unit) component on Android/Pixel devices, as referenced in the Android security bulletin dated 2026-09-01 (AOSP bug PUB-A-508716504 ). The root cause is a missing permission check , which enables a local privilege escalation requiring System execut...

CVE-2026-56986

CVE-2026-56986 is an out-of-bounds read due to type confusion in multiple files within Android (Pixel) , as referenced in the Google Pixel security bulletin for September 2026. The flaw enables local escalation of privilege with no additional execution privileges and no user interaction required,...

CVE-2026-56992

CVE-2026-56992 is a permission bypass in the AP ROM component of Google Pixel devices, caused by a confused deputy flaw in multiple files. It enables local escalation of privilege with System execution privileges required and no user interaction needed. Google classifies the severity as Critical ...

CVE-2026-58699

CVE-2026-58699 affects the Vp9DecEndOfStream function in vp9hwd_output.cc (Android VP9 hardware decoder output path). An incorrect bounds check allows an out-of-bounds read , which can be leveraged for local privilege escalation with only low privileges and no user interaction. The CNA-assigned C...

CVE-2026-58716

CVE-2026-58716 is a time-of-check to time-of-use (TOCTOU) race condition in the GSA (Google Secure Architecture) component of Google Pixel devices, classified as a Critical severity elevation of privilege (EoP). The vulnerability requires System execution privileges and no user interaction, enabl...

CVE-2026-58728

CVE-2026-58728 is a race condition in the ARM64_TLBI function of mmu.h within the Trusty secure execution environment on Pixel devices, leading to possible memory corruption and local elevation of privilege (rated Critical by Google). No user interaction or additional execution privileges are req...

CVE-2026-56985

CVE-2026-56985 is a type confusion vulnerability in the KeyMint component affecting Google Pixel devices, allowing an attacker to forge signatures and achieve local privilege escalation without additional execution privileges or user interaction. The Pixel security bulletin classifies it as Criti...

CVE-2026-58751

CVE-2026-58751 is a use-after-free vulnerability in multiple functions of arm-smmu-v3.c (the ARM System MMU v3 driver), caused by a logic error. The flaw allows local escalation of privilege to System execution privileges, with no user interaction required. The vulnerability is tracked in the And...

CVE-2026-56974

CVE-2026-56974 is a critical elevation-of-privilege vulnerability in libpixelimsmedia on supported Google Pixel devices, rooted in an out-of-bounds write in AudioRtpPayloadEncoderNode.cpp caused by improper input validation. The flaw could lead to remote code execution without additional privileg...

CVE-2026-56979

CVE-2026-56979 is a permission bypass in Android (referenced in the Pixel security bulletin for 2026-09-01) caused by a logic error in multiple code locations . An attacker with System execution privileges can achieve local escalation of privilege without user interaction. The vulnerability is ra...

CVE-2026-58678

CVE-2026-58678 is a Critical elevation-of-privilege (EoP) vulnerability in the Bootloader of supported Google Pixel devices. The root cause is a logic error that permits a permission bypass , enabling a local attacker with System execution privileges to escalate further without user interaction. ...

CVE-2026-58691

CVE-2026-58691 is a local escalation of privilege vulnerability in the GPCA subcomponent of Google Pixel devices, specifically in the FsmReleaseKey function of fsm.c . The root cause is improper input validation that permits a permission bypass. Exploitation requires only low privileges , no user...

CVE-2026-58698

CVE-2026-58698 is a confused deputy vulnerability in the ap_pmic_poll_msg_handler function of ap_pmic_ipc.c, allowing a local escalation of privilege when the attacker already holds System execution privileges . No user interaction is required. The flaw is tied to the Android Pixel security bulle...

CVE-2026-58701

CVE-2026-58701 affects the Trusty Trusted Execution Environment on Google Pixel devices. The vulnerable code is in the trusty_dputc function within generic-arm64-smcall.c , where a race condition can lead to an out-of-bounds write , enabling local elevation of privilege. Exploitation requires Sys...

CVE-2026-58726

CVE-2026-58726 is a local privilege escalation vulnerability in the GPCA subcomponent of Google Pixel devices. The flaw resides in the FsmReleaseKey function of fsm.c , where a missing permission check allows a permission bypass. Exploitation requires System-level execution privileges but no user...

CVE-2026-58765

CVE-2026-58765 is a permission bypass in the GPU component of Android/Pixel, caused by a logic error in the code. It allows a local escalation of privilege when the attacker already holds System execution privileges , with no user interaction required. The CVSS 3.1 score is 6.7 (Medium) , and CIS...

CVE-2026-58766

CVE-2026-58766 affects the ARM SMMUv3 driver (arm-smmu-v3.c) in the Linux kernel, as shipped in Android Pixel devices. The vulnerability stems from a logic error in multiple functions of that file, enabling a local privilege escalation requiring only low privileges and no user interaction . The C...

CVE-2026-58773

CVE-2026-58773 is a local elevation of privilege vulnerability in the kernel component of Google Pixel devices, specifically in the function link_load_gnss_image in link_device.c . A missing bounds check permits an out-of-bounds write , which can be exploited by a local attacker with System execu...

CVE-2026-56997

CVE-2026-56997 is an out-of-bounds write in the function Av1DecodeFrameTag of vp9hwd_headers.cc , caused by a missing bounds check. It affects Google Pixel devices, specifically the BigOcean subcomponent, and enables remote elevation of privilege with no user interaction and no additional executi...

CVE-2026-57006

CVE-2026-57006 is a logic error in acfw_ffa.c within the ACFW component of Google Pixel devices, which allows a possible secret read leading to local information disclosure. The Pixel September 2026 bulletin classifies it as Elevation of Privilege (EoP) with Critical severity, though the CNA-assi...

CVE-2026-57042

CVE-2026-57042 affects Android Pixel devices (tracked as PUB-A-522373674 ). The vulnerability exists in multiple functions of DreamPickerReceiver.kt , where a confused deputy flaw permits a permission bypass , enabling local escalation of privilege with System execution privileges required and no...

CVE-2026-58739

CVE-2026-58739 is a confused deputy vulnerability in platform_msg_handler_init of default_msg_handlers.c within the GDMC subcomponent of Google Pixel devices. It enables a local elevation of privilege requiring System execution privileges and no user interaction. The Pixel Update Bulletin rates i...

CVE-2026-58755

CVE-2026-58755 is a local privilege escalation vulnerability in the ARM SMMU-v3 driver (smmu_install_nested_ste in arm-smmu-v3.c) affecting Android Pixel devices , as referenced in the Pixel September 2026 security bulletin. The root cause is a logic error in the nested STE installation path. An ...

CVE-2026-56972

CVE-2026-56972 is an out-of-bounds write vulnerability in the Bootloader of Google Pixel devices, caused by an incorrect bounds check in multiple locations. It enables local escalation of privilege (EoP) when an attacker already holds System execution privileges ; no user interaction is required....

CVE-2026-57008

CVE-2026-57008 affects the Modem component in Android Pixel devices, as referenced in the Android Security Bulletin for 2026-09-01. The vulnerability is caused by improper input validation , enabling remote information disclosure with no additional execution privileges and no user interaction req...

CVE-2026-57035

This vulnerability affects Android (Pixel) devices, as referenced by the 2026-09-01 Pixel security bulletin . The root cause is a missing bounds check in multiple locations, leading to an out-of-bounds write . The impact is a local escalation of privilege , requiring System execution privileges a...

CVE-2026-58695

CVE-2026-58695 is a local elevation of privilege vulnerability in Google Pixel devices, located in the CPM (Camera Processing Module) component. The root cause is a missing bounds check in the gmc_phy_lp3_exit_restore_registers function within phy_power.c, allowing an attacker with System executi...

CVE-2026-58767

CVE-2026-58767 is a local privilege escalation vulnerability in multiple functions of arm-smmu-v3.c in the Android kernel, caused by a logic error . An attacker with System execution privileges can exploit it without user interaction to gain higher privileges, resulting in high impact to confiden...

CVE-2026-57012

CVE-2026-57012 affects the Setup Wizard component of Android (Pixel), where a missing permission check permits a remote package install , enabling remote privilege escalation without user interaction or additional execution privileges. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, ...

CVE-2026-57014

CVE-2026-57014 is an out-of-bounds write in the NFC HAL component (phNxpNciHal_ext_process_nfc_init_rsp in phNxpNciHal_ext.cc), caused by a missing bounds check. It affects Android (Pixel) devices and allows a local attacker with low privileges to achieve escalation of privilege with full impact ...

CVE-2026-58718

This vulnerability affects the ARM SMMUv3 driver in Android (Pixel), specifically in the smmu_detach_dev_nested function of arm-smmu-v3.c. The root cause is improper input validation , which can lead to a local escalation of privilege with System execution privileges required and no user interact...

CVE-2026-58731

CVE-2026-58731 affects multiple functions in physmem_extmem_linux.c within the Android Pixel platform, where an out-of-bounds read caused by uninitialized data can lead to local information disclosure . No additional execution privileges or user interaction are required. The CVSS 3.1 score is 5.5...

CVE-2026-58744

CVE-2026-58744 affects Android/Pixel devices (per the 2026-09-01 Pixel security bulletin ). The vulnerability is an improper input validation flaw in multiple locations that allows a local privilege escalation with low privileges required and no user interaction, resulting in high impact to confi...

CVE-2026-56975

CVE-2026-56975 affects the Cellular Modem component in Google Pixel devices (referenced in the Pixel September 2026 security bulletin ). The root cause is improper input validation , which can lead to a remote proximal/adjacent denial of service with low privileges required and no user interactio...

CVE-2026-58679

CVE-2026-58679 is a heap buffer overflow in the gf_ta_test_set_config function of gf_ta_test.c within the Goodix Fingerprint TA on Google Pixel devices. The logic error allows local escalation of privilege with no additional execution privileges or user interaction required. The Pixel security bu...

CVE-2026-58721

CVE-2026-58721 is a local information disclosure vulnerability in the GSA subcomponent of Google Pixel devices, caused by uninitialized memory use in multiple locations. Exploitation requires System execution privileges and no user interaction. Google classifies this as Critical severity in the P...

CVE-2026-58734

CVE-2026-58734 is a local elevation of privilege vulnerability in the GDMC subcomponent of Google Pixel devices. The flaw resides in the google_mba_recv_msg function of google_mba_poll.c, where an out-of-bounds write can be triggered by a race condition . Exploitation requires no additional execu...

CVE-2026-58747

CVE-2026-58747 is a permission bypass in the ARM SMMU v3 driver, specifically in the smmu_detach_dev function of arm-smmu-v3.c. A logic error allows a local attacker with System execution privileges to escalate privileges, resulting in high impact to confidentiality, integrity, and availability (...

CVE-2026-56973

CVE-2026-56973 is a local elevation of privilege in the GDMC subcomponent of Google Pixel devices, caused by a logic error in the code. An attacker with System execution privileges can exploit it to gain higher privileges, with no user interaction required. The vulnerability is rated Critical sev...