Browse CVEs

HIGH 8.4 CVE-2026-0117 In mfc_dec_dqbuf of mfc_dec_v4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of … Android Mitigation only Fix from $1,9502026-03-10 HIGH 8.4 CVE-2026-0118 In oobconfig, there is a possible bypass of carrier restrictions due to a logic error. This could lead to local escalation of privilege with no addit… Android Mitigation only Fix from $1,9502026-03-10 HIGH 8.4 CVE-2026-0122 In multiple places, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution with no additional exe… Android Mitigation only Fix from $1,9502026-03-10 HIGH 8.4 CVE-2026-0123 In EfwApTransport::ProcessRxRing of efw_ap_transport.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to lo… Android Mitigation only Fix from $1,9502026-03-10 HIGH 7.8 CVE-2026-0124 There is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution … Android Mitigation only Fix from $1,9502026-03-10 MEDIUM 6.8 CVE-2026-0119 In usim_SendMCCMNCIndMsg of usim_Registration.c, there is a possible out of bounds write due to memory corruption. This could lead to physical escala… Android Mitigation only Fix from $1,6002026-03-10 CRITICAL 9.8 CVE-2026-0110 In MM_DATA_IND of cn_NrSmMsgHdlrFromMM.cpp, there is a possible EoP due to memory corruption. This could lead to remote escalation of privilege with … Android Mitigation only Fix from $2,3002026-03-10 CRITICAL 9.8 CVE-2026-0111 In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalat… Android Mitigation only Fix from $2,3002026-03-10 CRITICAL 9.8 CVE-2026-0113 In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalat… Android Mitigation only Fix from $2,3002026-03-10 CRITICAL 9.8 CVE-2026-0114 In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execu… Android Mitigation only Fix from $2,3002026-03-10 HIGH 8.4 CVE-2026-0107 In gmc_ddr_handle_mba_mr_req of gmc_mba_ddr.c, there is a possible escalation of privileges due to a confused deputy. This could lead to local escala… Android No fix yet Fix from $1,9502026-03-10 HIGH 7.5 CVE-2026-0109 In dhd_tcpdata_info_get of dhd_ip.c, there is a possible Denial of Service due to a precondition check failure. This could lead to remote denial of s… Android Mitigation only Fix from $1,9502026-03-10 HIGH 7.4 CVE-2026-0112 In vpu_open_inst of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no… Android Mitigation only Fix from $1,9502026-03-10 HIGH 8.4 CVE-2025-36920 In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local e… Android Mitigation only Fix from $1,9502026-03-10 HIGH 7.8 CVE-2025-48611 In DeviceId of DeviceId.java, there is a possible desync in persistence due to a missing bounds check. This could lead to local escalation of privile… Android Mitigation only Fix from $1,9502026-03-10 HIGH 7.5 CVE-2025-61613 In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,9502026-03-09 HIGH 7.5 CVE-2025-61614 In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,9502026-03-09 HIGH 7.5 CVE-2025-61615 In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,9502026-03-09 HIGH 7.5 CVE-2025-61616 In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,9502026-03-09 HIGH 7.5 CVE-2025-69278 In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,9502026-03-09 HIGH 7.5 CVE-2025-69279 In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,9502026-03-09 HIGH 7.5 CVE-2025-61612 In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,9502026-03-09 HIGH 8.4 CVE-2026-0034 In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper input validation. This could … Android Mitigation only Fix from $1,9502026-03-02 HIGH 8.4 CVE-2026-0035 In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in th… Android Mitigation only Fix from $1,9502026-03-02 HIGH 8.4 CVE-2026-0047 In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission chec… Android Mitigation only Fix from $1,9502026-03-02 HIGH 8.4 CVE-2026-0020 In parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a consent dialog to obtain permissions due to a permissions … Android Mitigation only Fix from $1,9502026-03-02 HIGH 8.4 CVE-2026-0021 In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a confused deputy. This could le… Android Mitigation only Fix from $1,9502026-03-02 HIGH 8.4 CVE-2026-0025 In hasImage of Notification.java, there is a possible way to reveal information across users due to a permissions bypass. This could lead to local es… Android Mitigation only Fix from $1,9502026-03-02 HIGH 7.8 CVE-2026-0023 In createSessionInternal of PackageInstallerService.java, there is a possible way for an app to update its ownership due to a missing permission chec… Android Mitigation only Fix from $1,9502026-03-02 HIGH 7.8 CVE-2026-0026 In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in the code… Android Mitigation only Fix from $1,9502026-03-02