| CVE-2026-58977 |
In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check
|
6.7
Moyenne
|
2 nov. 2026 |
| CVE-2026-58930 |
An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when…
|
Non notée
|
2 nov. 2026 |
| CVE-2026-58927 |
The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized…
|
Non notée
|
2 nov. 2026 |
| CVE-2026-58926 |
A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t`…
|
2.5
Faible
|
2 nov. 2026 |
| CVE-2026-58925 |
The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL…
|
Non notée
|
2 nov. 2026 |
| CVE-2026-58924 |
The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method
|
Non notée
|
2 nov. 2026 |
| CVE-2026-58915 |
A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view…
|
6.1
Moyenne
|
2 nov. 2026 |
| CVE-2026-49906 |
An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER` permission by registering…
|
7.8
Élevée
|
2 nov. 2026 |
| CVE-2026-49903 |
The `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission.DUMP` and…
|
Non notée
|
2 nov. 2026 |
| CVE-2026-59048 |
In rb_cpu_init of trace.c, there is a possible out-of-bounds read due to an incorrect bounds check
|
Non notée
|
2 nov. 2026 |
| CVE-2026-59047 |
In multiple locations, there is a possible denial of service due to a logic error in the code
|
6.2
Moyenne
|
2 nov. 2026 |
| CVE-2026-59046 |
In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible out-of-bounds write due to improper input…
|
6.2
Moyenne
|
2 nov. 2026 |
| CVE-2026-59045 |
In multiple locations, there is a possible memory corruption due to a race condition
|
7.4
Élevée
|
2 nov. 2026 |
| CVE-2026-59044 |
In multiple locations, there is a possible use-after-free due to a logic error in the code
|
8.4
Élevée
|
2 nov. 2026 |
| CVE-2026-59043 |
In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due to a race condition
|
7.4
Élevée
|
2 nov. 2026 |
| CVE-2026-59042 |
In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race condition
|
7.4
Élevée
|
2 nov. 2026 |
| CVE-2026-59031 |
In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due to a logic error in…
|
6.2
Moyenne
|
2 nov. 2026 |
| CVE-2026-59028 |
In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy
|
8.4
Élevée
|
2 nov. 2026 |
| CVE-2026-59022 |
In multiple functions of MediaProvider.java, there is a possible permission bypass due to a logic error in the code
|
Non notée
|
2 nov. 2026 |
| CVE-2026-59021 |
In multiple locations, there is a possible denial of service due to improper input validation
|
6.2
Moyenne
|
2 nov. 2026 |
| CVE-2026-59020 |
In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition
|
5.9
Moyenne
|
2 nov. 2026 |
| CVE-2026-59016 |
In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal
|
8.4
Élevée
|
2 nov. 2026 |
| CVE-2026-59015 |
In multiple locations, there is a possible permission bypass due to a confused deputy
|
4.0
Moyenne
|
2 nov. 2026 |
| CVE-2026-59014 |
In multiple locations, there is a possible out-of-bounds write due to an integer overflow
|
8.4
Élevée
|
2 nov. 2026 |
| CVE-2026-59012 |
In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a…
|
Non notée
|
2 nov. 2026 |