Browse CVEs

HIGH 8.8 CVE-2026-0154 In Modem, there is a possible way to trigger a modem crash during a SIP REFER request due to memory corruption. This could lead to remote code execut… Android Mitigation only Fix from $1,9502026-06-16 HIGH 8.8 CVE-2026-0160 In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to a missing bounds check. Thi… Android Mitigation only Fix from $1,9502026-06-16 HIGH 8.8 CVE-2026-0164 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional executio… Android Mitigation only Fix from $1,9502026-06-16 MEDIUM 5.7 CVE-2026-0165 In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote info… Android Mitigation only Fix from $1,6002026-06-16 HIGH 8.8 CVE-2026-0146 In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds write due to a missing bounds check. This could lead to… Android Mitigation only Fix from $1,9502026-06-16 HIGH 8.8 CVE-2026-0147 In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out of bounds write due to a missing bounds check. This could l… Android Mitigation only Fix from $1,9502026-06-16 MEDIUM 6.5 CVE-2026-0144 In writeAocCommand of AocAudioCodec.cpp, there is a possible memory safety issue due to a missing bounds check. This could lead to remote denial of s… Android Mitigation only Fix from $1,6002026-06-16 HIGH 7.8 CVE-2026-0138 In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of… Android Mitigation only Fix from $1,9502026-06-16 MEDIUM 6.5 CVE-2026-0136 In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,6002026-06-16 CRITICAL 9.8 CVE-2026-0126 In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execu… Android Mitigation only Fix from $2,3002026-06-16 HIGH 7.8 CVE-2026-28580 In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. This could lead to local escalation of privilege w… Android No fix yet Fix from $1,9502026-06-01 HIGH 8.8 CVE-2026-5279 Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted H… Chrome 146.0.7680.177+ Fix from $1,9502026-04-01 CRITICAL 9.8 CVE-2026-0110 In MM_DATA_IND of cn_NrSmMsgHdlrFromMM.cpp, there is a possible EoP due to memory corruption. This could lead to remote escalation of privilege with … Android Mitigation only Fix from $2,3002026-03-10 HIGH 7.8 CVE-2025-48611 In DeviceId of DeviceId.java, there is a possible desync in persistence due to a missing bounds check. This could lead to local escalation of privile… Android Mitigation only Fix from $1,9502026-03-10 HIGH 7.8 CVE-2025-36927 In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local esca… Android Mitigation only Fix from $1,9502025-12-11 HIGH 7.8 CVE-2025-36928 In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502025-12-11 HIGH 7.8 CVE-2025-36930 In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priv… Android Mitigation only Fix from $1,9502025-12-11 HIGH 7.8 CVE-2025-36931 In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priv… Android Mitigation only Fix from $1,9502025-12-11 HIGH 8.0 CVE-2025-36924 In ss_DecodeLcsAssistDataReqMsg(void) of ss_LcsManagement.c, there is a possible out of bounds write due to an incorrect bounds check. This could lea… Android Mitigation only Fix from $1,9502025-12-11 MEDIUM 6.5 CVE-2025-36917 In SwDcpItg of up_L2commonPdcpSecurity.cpp, there is a possible denial of service due to an incorrect bounds check. This could lead to remote denial … Android No fix yet Fix from $1,6002025-12-11 MEDIUM 5.3 CVE-2025-12440 Inappropriate implementation in Autofill in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific… Chrome 142.0.7444.59+ Fix from $1,6002025-11-10 MEDIUM 5.5 CVE-2025-26434 In libxml2, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execu… Android Mitigation only Fix from $1,6002025-09-05 MEDIUM 6.2 CVE-2025-31712 In cplog service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additiona… Android Mitigation only Fix from $1,6002025-06-03 MEDIUM 5.3 CVE-2024-40674 In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the code. This… Android Mitigation only Fix from $1,6002025-01-28 HIGH 7.8 CVE-2018-9387 In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an integer overflow. This could lead to local escalation… Android Mitigation only Fix from $1,9502025-01-18 HIGH 7.8 CVE-2024-47032 In construct_transaction_from_cmd of lwis_ioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local es… Android Mitigation only Fix from $1,9502025-01-03 MEDIUM 6.7 CVE-2018-9386 In reboot_block_command of htc reboot_block driver, there is a possible stack buffer overflow due to a missing bounds check. This could lead to … Android Mitigation only Fix from $1,6002024-12-05 MEDIUM 6.7 CVE-2017-13308 In tscpu_write_GPIO_out and mtkts_Abts_write of mtk_ts_Abts.c, there is a possible buffer overflow in an sscanf due to improper input validation. Thi… Android Mitigation only Fix from $1,6002024-12-05 HIGH 7.8 CVE-2018-9402 In multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escalation of privileges in the ker… Android Mitigation only Fix from $1,9502024-12-05 MEDIUM 6.7 CVE-2018-9403 In the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_- interface.c, there is a possible stack buffer overflow due to a missing boun… Android Mitigation only Fix from $1,6002024-12-05