| CVE-2026-56941 |
In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code
|
8.4
High
|
Sep 15, 2026 |
| CVE-2026-56932 |
In Trusted Execution Environment, there is a possible memory corruption due to improper input validation
|
6.7
Medium
|
Sep 15, 2026 |
| CVE-2026-56923 |
In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition
|
6.4
Medium
|
Sep 15, 2026 |
| CVE-2026-56922 |
In CPM, there is a possible permission bypass due to a confused deputy
|
6.7
Medium
|
Sep 15, 2026 |
| CVE-2026-56920 |
In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-56915 |
In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition
|
6.4
Medium
|
Sep 15, 2026 |
| CVE-2026-56914 |
In multiple locations, there is a possible use-after-free due to improper locking
|
8.4
High
|
Sep 15, 2026 |
| CVE-2026-56907 |
In VPU, there is a possible shared memory overwrite due to improper input validation
|
6.7
Medium
|
Sep 15, 2026 |
| CVE-2026-56892 |
In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check
|
6.2
Medium
|
Sep 15, 2026 |
| CVE-2026-56889 |
In multiple locations, there is a possible permission bypass due to an integer overflow
|
6.7
Medium
|
Sep 15, 2026 |
| CVE-2026-56888 |
In multiple locations, there is a possible permission bypass due to side channel information disclosure
|
6.2
Medium
|
Sep 15, 2026 |
| CVE-2026-56882 |
In Cellular Modem, there is a possible information disclosure due to a logic error in the code
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-56881 |
In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code
|
8.4
High
|
Sep 15, 2026 |
| CVE-2026-56879 |
In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy
|
6.7
Medium
|
Sep 15, 2026 |
| CVE-2026-55366 |
In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code
|
9.8
Critical
|
Sep 15, 2026 |
| CVE-2026-55365 |
In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check
|
6.7
Medium
|
Sep 15, 2026 |
| CVE-2026-55359 |
In multiple locations, there is a possible permission bypass due to a logic error in the code
|
7.8
High
|
Sep 15, 2026 |
| CVE-2026-55351 |
In VPU, there is a possible out-of-bounds write due to an integer overflow
|
7.8
High
|
Sep 15, 2026 |
| CVE-2026-55343 |
In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check
|
8.0
High
|
Sep 15, 2026 |
| CVE-2026-55332 |
In multiple locations, there is a possible out-of-bounds write due to improper input validation
|
6.7
Medium
|
Sep 15, 2026 |
| CVE-2026-55331 |
In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-55323 |
In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow
|
7.8
High
|
Sep 15, 2026 |
| CVE-2026-55318 |
In multiple locations, there is a possible use-after-free due to a race condition
|
8.8
High
|
Sep 15, 2026 |
| CVE-2026-55317 |
In printf of printf.c, there is a possible out-of-bounds write due to improper input validation
|
6.7
Medium
|
Sep 15, 2026 |
| CVE-2026-55306 |
In Cellular Modem, there is a possible denial of service due to improper input validation
|
7.5
High
|
Sep 15, 2026 |