CVE-2026-55323

A heap buffer overflow in the gf_base_update_finger_base function of gf_base.c allows for a possible out-of-bounds write . This vulnerability affects the Goodix Fingerprint TA on Pixel devices and could lead to local escalation of privilege (EoP) without requiring additional execution privileges ...

CVE-2026-55365

CVE-2026-55365 affects the Bootloader component on Google Pixel devices. The vulnerability is caused by an incorrect bounds check in multiple functions of remap.c , which leads to a possible out-of-bounds write . This flaw could allow for local escalation of privilege (EoP) with System execution ...

CVE-2026-56932

A memory corruption vulnerability exists in the Trusted Execution Environment due to improper input validation . This flaw could allow for a local escalation of privilege (EoP) requiring System execution privileges . The vulnerability does not require user interaction for exploitation. Affected P...

CVE-2026-56941

A use-after-free vulnerability exists in multiple functions within fpc_tee_hal.c due to a logic error in the code. This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. No specific exploit details or remediation steps are pr...

CVE-2026-56960

A logic error in the code across multiple locations results in a possible use-after-free vulnerability. This flaw could allow for remote escalation of privilege without requiring additional execution privileges or user interaction. While the specific software or component is not explicitly named ...

CVE-2026-56979

A logic error in the code across multiple locations leads to a permission bypass vulnerability. This flaw could allow for a local escalation of privilege where System execution privileges are required. The vulnerability is exploitable without any user interaction. Specific software versions or co...

CVE-2026-56982

A missing permission check in VPU allows for a potential permission bypass . This vulnerability could enable local escalation of privilege to System execution privileges without requiring user interaction. No specific affected versions, root cause details, or remediation steps are provided in the...

CVE-2026-58767

A logic error in multiple functions of arm-smmu-v3.c allows for a local escalation of privilege . An attacker with System execution privileges can exploit this vulnerability to escalate privileges further. No user interaction is required for exploitation. Specific details regarding affected versi...

CVE-2026-55351

A possible out-of-bounds write vulnerability exists in VPU caused by an integer overflow . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. No specific affected versions, root cause files, or remediation details are pro...

CVE-2026-56879

A memory corruption vulnerability exists in the gmc_mb_msg_handler function of the gmc_mba.c component. This flaw is caused by a confused deputy issue, which could allow for local escalation of privilege requiring System execution privileges . Exploitation does not require user interaction. While...

CVE-2026-56915

A race condition exists within the bigo_worker_thread of bigo.c , which can lead to a local escalation of privilege . Exploitation requires System execution privileges and does not require user interaction. No specific affected versions, remediation details, or exploit links are provided in the d...

CVE-2026-56989

A vulnerability exists in multiple locations where a missing bounds check allows for a possible out-of-bounds write . This flaw could lead to a local escalation of privilege requiring System execution privileges . Exploitation does not require user interaction . No specific software, versions, or...

CVE-2026-56992

A permission bypass vulnerability exists in the AP ROM of Google Pixel devices due to a confused deputy issue in multiple files. This flaw could allow for local escalation of privilege requiring System execution privileges . Exploitation does not require user interaction. Impact is categorized as...

CVE-2026-58716

CVE-2026-58716 describes a time-of-check to time-of-use (TOCTOU) vulnerability caused by a race condition in multiple locations. This flaw can lead to a local escalation of privilege on affected systems, specifically requiring System execution privileges for exploitation. No user interaction is r...

CVE-2026-58765

A logic error in the GPU code allows for a potential permission bypass . This vulnerability can lead to a local escalation of privilege requiring System execution privileges . Exploitation does not require user interaction . Specific exploit details are not provided in the documents.

CVE-2026-0112

A race condition in the vpu_open_inst function of vpu_ioctl.c leads to a use after free vulnerability. This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. The vulnerability specifically affects the VPU subcomponent on Goog...

CVE-2026-55343

A critical out-of-bounds write vulnerability exists in the decodeAmr function of ImsMediaAudioPlayer.cpp within the libpixelimsmedia component. The flaw is caused by a missing bounds check , which could allow an attacker to achieve remote code execution (RCE) without additional execution privileg...

CVE-2026-57012

A missing permission check within the Setup Wizard allows for a potential remote package install . This vulnerability can lead to a remote escalation of privilege without requiring additional execution privileges or user interaction. Exploitation details are not provided in the documents.

CVE-2026-58751

A use-after-free vulnerability exists in multiple functions of arm-smmu-v3.c due to a logic error in the code. This flaw could allow for local escalation of privilege , though it requires System execution privileges to exploit. Exploitation does not require user interaction. Specific details rega...

CVE-2026-58755

A logic error in the smmu_install_nested_ste function of arm-smmu-v3.c could lead to a local escalation of privilege . Exploitation of this vulnerability requires System execution privileges and does not require user interaction. No specific affected versions or remediation steps are provided in ...

CVE-2026-58848

A race condition exists in multiple functions of alloc.c , potentially allowing unauthorized read/write access . This vulnerability could lead to a local escalation of privilege without requiring additional execution privileges or user interaction. No specific exploit details are provided in the ...

CVE-2026-0197

A logic error in VPU code allows for a possible local information disclosure . Exploitation of this vulnerability requires System execution privileges , and no user interaction is necessary. No specific software versions, root causes, or remediation steps are provided in the documents.

CVE-2026-56922

A permission bypass vulnerability exists in the CPM component due to a confused deputy issue. This flaw could allow for local escalation of privilege with System execution privileges required. Exploitation of this vulnerability does not require user interaction. Affected Google Pixel devices can ...

CVE-2026-56967

A heap buffer overflow in the Cellular Modem can lead to an out-of-bounds write , potentially enabling remote (proximal/adjacent) code execution without requiring additional execution privileges or user interaction. This vulnerability affects Google Pixel devices, and security patch levels of 202...

CVE-2026-57008

A vulnerability in the Modem component allows for remote information disclosure due to improper input validation . Exploitation does not require additional execution privileges or user interaction. No specific details regarding the affected software versions, root cause components, or remediation...

CVE-2026-58698

A permission bypass vulnerability exists in the ap_pmic_poll_msg_handler function within the ap_pmic_ipc.c component. This issue is caused by a confused deputy scenario, which could allow an attacker to achieve a local escalation of privilege to System execution privileges . Exploitation of this ...

CVE-2026-58734

A vulnerability exists in the google_mba_recv_msg function within google_mba_poll.c , where a race condition can lead to an out-of-bounds write . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. The issue is specificall...

CVE-2026-0110

The Google Pixel is affected by CVE-2026-0110, which involves a memory corruption vulnerability in the MM_DATA_IND component of cn_NrSmMsgHdlrFromMM.cpp. This flaw resides in the Modem subcomponent and can lead to remote escalation of privilege (EoP) without requiring additional execution privile...

CVE-2026-56958

A missing bounds check in the gf_algo_get_cached_dump_data function of gf_algo.c leads to a possible out-of-bounds read . This vulnerability could result in local information disclosure without requiring additional execution privileges or user interaction. Exploitation details are not provided in...

CVE-2026-56964

A use-after-free vulnerability exists in multiple locations due to a race condition caused by improper synchronization during concurrent execution using a shared resource. This flaw could allow for local escalation of privilege by an attacker who obtains System execution privileges . Exploitation...

CVE-2026-58739

A confused deputy vulnerability exists in the platform_msg_handler_init function within default_msg_handlers.c. This flaw allows for a local escalation of privilege (EoP) where an attacker requires System execution privileges to exploit the issue. Exploitation does not require user interaction. T...

CVE-2026-58744

The software is susceptible to a local escalation of privilege due to improper input validation in multiple locations. This vulnerability allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. While the specific affected components or...

CVE-2026-0199

A vulnerability exists in the Goodix Fingerprint TA component due to an out-of-bounds write in gf_ta_test_set_config of gf_ta_test.c. This issue stems from improper input validation and could allow an attacker to achieve local escalation of privilege (EoP) without requiring additional execution p...

CVE-2026-57035

A missing bounds check in multiple locations leads to a possible out-of-bounds write . This vulnerability could facilitate local escalation of privilege , requiring System execution privileges for exploitation. No user interaction is required. Specific details regarding affected products, compone...

CVE-2026-58731

A vulnerability exists in multiple functions of physmem_extmem_linux.c where an out-of-bounds read can occur due to uninitialized data . This flaw could lead to local information disclosure without requiring additional execution privileges or user interaction. No specific software version, remedi...

CVE-2026-58695

A missing bounds check in the gmc_phy_lp3_exit_restore_registers function of phy_power.c allows for a possible escalation of privilege . This vulnerability affects the CPM subcomponent on Pixel devices. Successful exploitation requires System execution privileges , and no user interaction is requ...

CVE-2026-0159

A vulnerability exists in the Cellular Modem due to a missing bounds check , which can lead to an out-of-bounds write . This flaw could allow for remote code execution (RCE) without requiring additional execution privileges or user interaction. This issue is addressed in the September 2026 securi...

CVE-2026-57014

A vulnerability exists in the phNxpNciHal_ext_process_nfc_init_rsp function within phNxpNciHal_ext.cc due to a missing bounds check . This flaw allows for a possible out-of-bounds write , which could result in local escalation of privilege without requiring additional execution privileges or user...

CVE-2026-58718

A vulnerability exists in the smmu_detach_dev_nested function within arm-smmu-v3.c due to improper input validation . This flaw could allow for a local escalation of privilege requiring System execution privileges . Exploitation does not require user interaction. No specific exploit details or re...

CVE-2026-55318

A use-after-free vulnerability exists in the IP Multimedia Subsystem component of Google Pixel devices due to a race condition in multiple locations. This flaw could lead to remote code execution (RCE) without requiring additional execution privileges or user interaction. To address this issue, G...

CVE-2026-56973

CVE-2026-56973 identifies a logic error in the GDMC component on Google Pixel devices. This flaw allows for a local elevation of privilege (EoP) requiring System execution privileges . Exploitation does not require user interaction. The vulnerability is addressed in security patch levels of 2026-...

CVE-2026-56975

A denial of service vulnerability exists in the Cellular Modem component due to improper input validation . This flaw allows for remote (proximal/adjacent) denial of service without requiring additional execution privileges or user interaction. No specific details regarding the underlying root ca...

CVE-2026-58721

This vulnerability affects the GSA component on Pixel devices. It is caused by uninitialized memory use in multiple locations, which could lead to local information disclosure . Exploitation requires System execution privileges and does not require user interaction. The issue is addressed in secu...

CVE-2026-58747

A logic error in the smmu_detach_dev function within arm-smmu-v3.c allows for a possible permission bypass . This vulnerability could enable local escalation of privilege by an attacker with System execution privileges . No user interaction is required for exploitation. Exploitation details are n...

CVE-2026-55306

A denial of service vulnerability exists in the Cellular Modem component due to improper input validation . This flaw could allow an attacker to cause a remote denial of service without requiring additional execution privileges or user interaction. The issue is addressed in Google Pixel devices w...

CVE-2026-56881

A logic error in the enable_segment function of remap.c creates a permission bypass vulnerability. This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. While the specific product and version are not explicitly named in the ...

CVE-2026-56888

A potential permission bypass exists in multiple locations due to side channel information disclosure . This vulnerability could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Technical details regarding specific affected products or...

CVE-2026-56889

A possible permission bypass exists in multiple locations due to an integer overflow . This vulnerability could enable a local escalation of privilege to System execution privileges without requiring user interaction. No specific software, component, or remediation details are provided in the doc...

CVE-2026-56892

CVE-2026-56892 affects the Secure World component on Google Pixel devices. The vulnerability exists in the ReadDataElement function of common.c due to an incorrect bounds check , which can lead to local information disclosure. Exploitation requires no additional execution privileges and no user i...

CVE-2026-55302

A logic error in the code leads to a permission bypass in multiple locations on Google Pixel devices. This vulnerability allows for local escalation of privilege (EoP) and requires System execution privileges for exploitation. No user interaction is required. The issue is addressed in security pa...