| CVE-2026-0049 |
In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource…
|
6.2
Medium
|
Apr 6, 2026 |
| CVE-2025-48651 |
In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to…
|
4.0
Medium
|
Apr 6, 2026 |
| CVE-2026-0124 |
There is a possible out of bounds write due to a missing bounds check
|
10.0
Critical
|
Mar 10, 2026 |
| CVE-2026-0123 |
In EfwApTransport::ProcessRxRing of efw_ap_transport.cc, there is a possible out of bounds write due to a missing bounds…
|
8.4
High
|
Mar 10, 2026 |
| CVE-2026-0122 |
In multiple places, there is a possible out of bounds write due to memory corruption
|
8.4
High
|
Mar 10, 2026 |
| CVE-2026-0121 |
In VPU, there is a possible use-after-free read due to a race condition
|
2.9
Low
|
Mar 10, 2026 |
| CVE-2026-0120 |
In modem, there is a possible out of bounds write due to an incorrect bounds check
|
9.8
Critical
|
Mar 10, 2026 |
| CVE-2026-0119 |
In usim_SendMCCMNCIndMsg of usim_Registration.c, there is a possible out of bounds write due to memory corruption
|
6.8
Medium
|
Mar 10, 2026 |
| CVE-2026-0118 |
In oobconfig, there is a possible bypass of carrier restrictions due to a logic error
|
8.4
High
|
Mar 10, 2026 |
| CVE-2026-0117 |
In mfc_dec_dqbuf of mfc_dec_v4l2.c, there is a possible out of bounds write due to an incorrect bounds check
|
8.4
High
|
Mar 10, 2026 |
| CVE-2026-0116 |
In __mfc_handle_released_buf of mfc_core_isr.c, there is a possible out of bounds write due to a missing bounds check
|
9.8
Critical
|
Mar 10, 2026 |
| CVE-2026-0115 |
In Trusted Execution Environment, there is a possible key leak due to side channel information disclosure
|
2.1
Low
|
Mar 10, 2026 |
| CVE-2026-0114 |
In Modem, there is a possible out of bounds write due to an incorrect bounds check
|
9.8
Critical
|
Mar 10, 2026 |
| CVE-2026-0113 |
In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check
|
9.8
Critical
|
Mar 10, 2026 |
| CVE-2026-0112 |
In vpu_open_inst of vpu_ioctl.c, there is a possible use after free due to a race condition
|
7.4
High
|
Mar 10, 2026 |
| CVE-2026-0111 |
In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check
|
9.8
Critical
|
Mar 10, 2026 |
| CVE-2026-0110 |
In MM_DATA_IND of cn_NrSmMsgHdlrFromMM.cpp, there is a possible EoP due to memory corruption
|
9.8
Critical
|
Mar 10, 2026 |
| CVE-2026-0109 |
In dhd_tcpdata_info_get of dhd_ip.c, there is a possible Denial of Service due to a precondition check failure
|
7.5
High
|
Mar 10, 2026 |
| CVE-2026-0108 |
The register protection of the PowerVR GPU is incorrectly configured
|
4.0
Medium
|
Mar 10, 2026 |
| CVE-2026-0107 |
In gmc_ddr_handle_mba_mr_req of gmc_mba_ddr.c, there is a possible escalation of privileges due to a confused deputy
|
8.4
High
|
Mar 10, 2026 |
| CVE-2025-36920 |
In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input…
|
8.4
High
|
Mar 10, 2026 |
| CVE-2025-48611 |
In DeviceId of DeviceId.java, there is a possible desync in persistence due to a missing bounds check
|
10.0
Critical
|
Mar 10, 2026 |
| CVE-2025-48636 |
In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a path…
|
8.4
High
|
Mar 2, 2026 |
| CVE-2024-31328 |
In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities…
|
8.8
High
|
Mar 2, 2026 |
| CVE-2026-0047 |
In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due…
|
8.4
High
|
Mar 2, 2026 |