CVE-2026-58699

CVE-2026-58699 affects the Vp9DecEndOfStream function in vp9hwd_output.cc (Android VP9 hardware decoder output path). An incorrect bounds check allows an out-of-bounds read , which can be leveraged for local privilege escalation with only low privileges and no user interaction. The CNA-assigned C...

CVE-2026-58698

CVE-2026-58698 is a confused deputy vulnerability in the ap_pmic_poll_msg_handler function of ap_pmic_ipc.c, allowing a local escalation of privilege when the attacker already holds System execution privileges . No user interaction is required. The flaw is tied to the Android Pixel security bulle...

CVE-2026-58695

CVE-2026-58695 is a local elevation of privilege vulnerability in Google Pixel devices, located in the CPM (Camera Processing Module) component. The root cause is a missing bounds check in the gmc_phy_lp3_exit_restore_registers function within phy_power.c, allowing an attacker with System executi...

CVE-2026-58691

CVE-2026-58691 is a local escalation of privilege vulnerability in the GPCA subcomponent of Google Pixel devices, specifically in the FsmReleaseKey function of fsm.c . The root cause is improper input validation that permits a permission bypass. Exploitation requires only low privileges , no user...

CVE-2026-58683

CVE-2026-58683 is a Critical remote code execution vulnerability in the IP Multimedia Subsystem (Telephone subcomponent) of Google Pixel devices. The root cause is an out-of-bounds write due to improper input validation , exploitable over the network with low privileges required and no user inter...

CVE-2026-58679

CVE-2026-58679 is a heap buffer overflow in the gf_ta_test_set_config function of gf_ta_test.c within the Goodix Fingerprint TA on Google Pixel devices. The logic error allows local escalation of privilege with no additional execution privileges or user interaction required. The Pixel security bu...

CVE-2026-58678

CVE-2026-58678 is a Critical elevation-of-privilege (EoP) vulnerability in the Bootloader of supported Google Pixel devices. The root cause is a logic error that permits a permission bypass , enabling a local attacker with System execution privileges to escalate further without user interaction. ...

CVE-2026-57042

CVE-2026-57042 affects Android Pixel devices (tracked as PUB-A-522373674 ). The vulnerability exists in multiple functions of DreamPickerReceiver.kt , where a confused deputy flaw permits a permission bypass , enabling local escalation of privilege with System execution privileges required and no...

CVE-2026-57035

This vulnerability affects Android (Pixel) devices, as referenced by the 2026-09-01 Pixel security bulletin . The root cause is a missing bounds check in multiple locations, leading to an out-of-bounds write . The impact is a local escalation of privilege , requiring System execution privileges a...

CVE-2026-57014

CVE-2026-57014 is an out-of-bounds write in the NFC HAL component (phNxpNciHal_ext_process_nfc_init_rsp in phNxpNciHal_ext.cc), caused by a missing bounds check. It affects Android (Pixel) devices and allows a local attacker with low privileges to achieve escalation of privilege with full impact ...

CVE-2026-57012

CVE-2026-57012 affects the Setup Wizard component of Android (Pixel), where a missing permission check permits a remote package install , enabling remote privilege escalation without user interaction or additional execution privileges. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, ...

CVE-2026-57008

CVE-2026-57008 affects the Modem component in Android Pixel devices, as referenced in the Android Security Bulletin for 2026-09-01. The vulnerability is caused by improper input validation , enabling remote information disclosure with no additional execution privileges and no user interaction req...

CVE-2026-57006

CVE-2026-57006 is a logic error in acfw_ffa.c within the ACFW component of Google Pixel devices, which allows a possible secret read leading to local information disclosure. The Pixel September 2026 bulletin classifies it as Elevation of Privilege (EoP) with Critical severity, though the CNA-assi...

CVE-2026-56997

CVE-2026-56997 is an out-of-bounds write in the function Av1DecodeFrameTag of vp9hwd_headers.cc , caused by a missing bounds check. It affects Google Pixel devices, specifically the BigOcean subcomponent, and enables remote elevation of privilege with no user interaction and no additional executi...

CVE-2026-56992

CVE-2026-56992 is a permission bypass in the AP ROM component of Google Pixel devices, caused by a confused deputy flaw in multiple files. It enables local escalation of privilege with System execution privileges required and no user interaction needed. Google classifies the severity as Critical ...

CVE-2026-56989

CVE-2026-56989 is an out-of-bounds write in the Android platform (referenced in the Pixel Security Bulletin for 2026-09-01, tracked as OSV PUB-A-508704693 ) caused by a missing bounds check in multiple locations. It can lead to local escalation of privilege requiring System execution privileges ,...

CVE-2026-56988

CVE-2026-56988 is a use-after-free vulnerability caused by a race condition in multiple functions of bluetooth_cco.cc , an Android Bluetooth component. It allows local escalation of privilege with System execution privileges required and no user interaction. The CVSS v3.1 score is 6.4 (Medium) wi...

CVE-2026-56986

CVE-2026-56986 is an out-of-bounds read due to type confusion in multiple files within Android (Pixel) , as referenced in the Google Pixel security bulletin for September 2026. The flaw enables local escalation of privilege with no additional execution privileges and no user interaction required,...

CVE-2026-56985

CVE-2026-56985 is a type confusion vulnerability in the KeyMint component affecting Google Pixel devices, allowing an attacker to forge signatures and achieve local privilege escalation without additional execution privileges or user interaction. The Pixel security bulletin classifies it as Criti...

CVE-2026-56982

CVE-2026-56982 affects the VPU (Video Processing Unit) component on Android/Pixel devices, as referenced in the Android security bulletin dated 2026-09-01 (AOSP bug PUB-A-508716504 ). The root cause is a missing permission check , which enables a local privilege escalation requiring System execut...