| CVE-2026-0138 |
In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory corruption
|
7.8
Élevée
|
16 juin 2026 |
| CVE-2026-0137 |
In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use…
|
7.8
Élevée
|
16 juin 2026 |
| CVE-2026-0136 |
In Modem, there is a possible out of bounds read due to a missing bounds check
|
7.5
Élevée
|
16 juin 2026 |
| CVE-2026-0135 |
In Modem, there is a possible out of bounds read due to a missing bounds check
|
7.8
Élevée
|
16 juin 2026 |
| CVE-2026-0134 |
In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory reset due to a logic…
|
4.0
Moyenne
|
16 juin 2026 |
| CVE-2026-0133 |
In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due…
|
7.8
Élevée
|
16 juin 2026 |
| CVE-2026-0132 |
In Modem, there is a possible out of bounds write due to a heap buffer overflow
|
8.8
Élevée
|
16 juin 2026 |
| CVE-2026-0131 |
In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow
|
7.3
Élevée
|
16 juin 2026 |
| CVE-2026-0130 |
In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow
|
4.3
Moyenne
|
16 juin 2026 |
| CVE-2026-0128 |
In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer overflow
|
4.3
Moyenne
|
16 juin 2026 |
| CVE-2026-0129 |
In RtcpByePacket::decodeByePacket, there is a possible due to a missing bounds check
|
4.3
Moyenne
|
16 juin 2026 |
| CVE-2026-0127 |
In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible out-of-bounds read due to memory…
|
6.5
Moyenne
|
16 juin 2026 |
| CVE-2026-0126 |
In WC-Radio, there is a possible out of bounds write due to a missing bounds check
|
8.8
Élevée
|
16 juin 2026 |
| CVE-2026-0125 |
In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition
|
7.0
Élevée
|
16 juin 2026 |
| CVE-2026-28580 |
In multiple functions of NotificationChannel.java, there is a possible desync in persistence due to an incorrect…
|
7.8
Élevée
|
1 juin 2026 |
| CVE-2026-28581 |
In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to…
|
4.0
Moyenne
|
1 juin 2026 |
| CVE-2026-28586 |
In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass
|
3.3
Faible
|
1 juin 2026 |
| CVE-2026-0094 |
In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to…
|
7.8
Élevée
|
1 juin 2026 |
| CVE-2026-0095 |
In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption within the…
|
8.0
Élevée
|
1 juin 2026 |
| CVE-2026-0096 |
In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to…
|
7.8
Élevée
|
1 juin 2026 |
| CVE-2026-0097 |
In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error
|
8.0
Élevée
|
1 juin 2026 |
| CVE-2026-0098 |
In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused…
|
7.8
Élevée
|
1 juin 2026 |
| CVE-2026-0099 |
In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due…
|
7.8
Élevée
|
1 juin 2026 |
| CVE-2026-0100 |
In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow
|
7.8
Élevée
|
1 juin 2026 |
| CVE-2026-28577 |
In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack
|
7.8
Élevée
|
1 juin 2026 |