| CVE-2026-0165 |
In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a missing bounds check
|
6.5
Medium
|
Jun 16, 2026 |
| CVE-2026-0164 |
In Modem, there is a possible out of bounds write due to a missing bounds check
|
8.8
High
|
Jun 16, 2026 |
| CVE-2026-0162 |
In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type confusion
|
8.8
High
|
Jun 16, 2026 |
| CVE-2026-0161 |
In numberOfReportBlocks of RtpSession.cpp, there is a possible out of bounds write due to an integer overflow
|
8.8
High
|
Jun 16, 2026 |
| CVE-2026-0160 |
In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due…
|
8.8
High
|
Jun 16, 2026 |
| CVE-2026-0158 |
In Camera, there is a possible unauthorized way to access photos due to a missing permission check
|
4.0
Medium
|
Jun 16, 2026 |
| CVE-2026-0157 |
In RtcpHeader::decodeRtcpHeader, there is a possible OOB read due to a missing bounds check
|
4.3
Medium
|
Jun 16, 2026 |
| CVE-2026-0156 |
In checkSsrcCollisionOnRcv of RtpSession.cpp, there is a possible memory safety issue due to a missing null check
|
7.5
High
|
Jun 16, 2026 |
| CVE-2026-0154 |
In Modem, there is a possible way to trigger a modem crash during a SIP REFER request due to memory corruption
|
8.8
High
|
Jun 16, 2026 |
| CVE-2026-0155 |
In ImsMediaBitReader::ReadByteBuffer, there is a possible OOB read due to a missing bounds check
|
5.3
Medium
|
Jun 16, 2026 |
| CVE-2026-0153 |
In Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incorrect bounds check
|
7.8
High
|
Jun 16, 2026 |
| CVE-2026-0152 |
In OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to system call to maliciously…
|
7.8
High
|
Jun 16, 2026 |
| CVE-2026-0151 |
In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer overflow
|
8.8
High
|
Jun 16, 2026 |
| CVE-2026-0150 |
In ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due to an integer overflow
|
7.8
High
|
Jun 16, 2026 |
| CVE-2026-0149 |
In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow
|
8.8
High
|
Jun 16, 2026 |
| CVE-2026-0148 |
In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to an integer…
|
8.8
High
|
Jun 16, 2026 |
| CVE-2026-0147 |
In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out of bounds write due to a…
|
8.8
High
|
Jun 16, 2026 |
| CVE-2026-0146 |
In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds write due to a missing…
|
8.8
High
|
Jun 16, 2026 |
| CVE-2026-0145 |
In keymint, there is a possible Permission Bypass due to a logic error in the code
|
4.0
Medium
|
Jun 16, 2026 |
| CVE-2026-0144 |
In writeAocCommand of AocAudioCodec.cpp, there is a possible memory safety issue due to a missing bounds check
|
7.5
High
|
Jun 16, 2026 |
| CVE-2026-0143 |
In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to a use after free
|
7.8
High
|
Jun 16, 2026 |
| CVE-2026-0142 |
In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input validation
|
4.0
Medium
|
Jun 16, 2026 |
| CVE-2026-0141 |
In decodeAppPacket of RtcpAppPacket.cpp, there is a possible OOB read due to a missing bounds check
|
5.3
Medium
|
Jun 16, 2026 |
| CVE-2026-0140 |
In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow
|
4.3
Medium
|
Jun 16, 2026 |
| CVE-2026-0139 |
In Modem, there is a possible out of bounds write due to a missing bounds check
|
8.8
High
|
Jun 16, 2026 |