Browse CVEs

HIGH 7.8 CVE-2025-48617 In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions bypass. This could lead to local esca… Android Mitigation only Fix from $1,9502026-06-17 HIGH 8.8 CVE-2026-0154 In Modem, there is a possible way to trigger a modem crash during a SIP REFER request due to memory corruption. This could lead to remote code execut… Android Mitigation only Fix from $1,9502026-06-16 HIGH 8.8 CVE-2026-0160 In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to a missing bounds check. Thi… Android Mitigation only Fix from $1,9502026-06-16 HIGH 8.8 CVE-2026-0161 In numberOfReportBlocks of RtpSession.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation o… Android Mitigation only Fix from $1,9502026-06-16 HIGH 8.8 CVE-2026-0162 In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type confusion. This could lead to remote code execution with no… Android Mitigation only Fix from $1,9502026-06-16 HIGH 8.8 CVE-2026-0164 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional executio… Android Mitigation only Fix from $1,9502026-06-16 HIGH 7.5 CVE-2026-0156 In checkSsrcCollisionOnRcv of RtpSession.cpp, there is a possible memory safety issue due to a missing null check. This could lead to remote denial o… Android Mitigation only Fix from $1,9502026-06-16 MEDIUM 5.7 CVE-2026-0165 In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote info… Android Mitigation only Fix from $1,6002026-06-16 HIGH 8.8 CVE-2026-0146 In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds write due to a missing bounds check. This could lead to… Android Mitigation only Fix from $1,9502026-06-16 HIGH 8.8 CVE-2026-0147 In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out of bounds write due to a missing bounds check. This could l… Android Mitigation only Fix from $1,9502026-06-16 HIGH 8.8 CVE-2026-0148 In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remot… Android Mitigation only Fix from $1,9502026-06-16 HIGH 8.8 CVE-2026-0149 In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no addit… Android Mitigation only Fix from $1,9502026-06-16 HIGH 8.8 CVE-2026-0151 In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with … Android Mitigation only Fix from $1,9502026-06-16 HIGH 7.8 CVE-2026-0143 In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to a use after free. This could lead to local escalatio… Android Mitigation only Fix from $1,9502026-06-16 HIGH 7.8 CVE-2026-0150 In ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due to an integer overflow. This could lead to local esc… Android Mitigation only Fix from $1,9502026-06-16 HIGH 7.8 CVE-2026-0152 In OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to system call to maliciously expand the VMA out of bounds due to … Android Mitigation only Fix from $1,9502026-06-16 HIGH 7.8 CVE-2026-0153 In Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502026-06-16 MEDIUM 6.5 CVE-2026-0144 In writeAocCommand of AocAudioCodec.cpp, there is a possible memory safety issue due to a missing bounds check. This could lead to remote denial of s… Android Mitigation only Fix from $1,6002026-06-16 HIGH 8.8 CVE-2026-0132 In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional executio… Android Mitigation only Fix from $1,9502026-06-16 HIGH 8.8 CVE-2026-0139 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional executio… Android Mitigation only Fix from $1,9502026-06-16 HIGH 7.8 CVE-2026-0133 In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check.… Android Mitigation only Fix from $1,9502026-06-16 HIGH 7.8 CVE-2026-0135 In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution with no additional execution… Android Mitigation only Fix from $1,9502026-06-16 HIGH 7.8 CVE-2026-0137 In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use after free. This could lead to lo… Android Mitigation only Fix from $1,9502026-06-16 HIGH 7.8 CVE-2026-0138 In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of… Android Mitigation only Fix from $1,9502026-06-16 MEDIUM 6.5 CVE-2026-0136 In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,6002026-06-16 CRITICAL 9.8 CVE-2026-0126 In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execu… Android Mitigation only Fix from $2,3002026-06-16 HIGH 7.3 CVE-2026-0131 In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. This could lead to local escalation of privilege wit… Android Mitigation only Fix from $1,9502026-06-16 HIGH 7.0 CVE-2026-0125 In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wi… Android Mitigation only Fix from $1,9502026-06-16 MEDIUM 6.5 CVE-2026-0127 In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible out-of-bounds read due to memory corruption. This could lead … Android No fix yet Fix from $1,6002026-06-16 MEDIUM 6.5 CVE-2026-0128 In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclos… Android Mitigation only Fix from $1,6002026-06-16