| CVE-2026-58968 |
In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free
|
9.8
Critique
|
2 nov. 2026 |
| CVE-2026-58936 |
In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free
|
9.8
Critique
|
2 nov. 2026 |
| CVE-2026-58876 |
In multiple locations, there is a possible memory safety issue due to a use-after-free
|
9.8
Critique
|
2 nov. 2026 |
| CVE-2026-58868 |
In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow
|
9.8
Critique
|
2 nov. 2026 |
| CVE-2026-55330 |
In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the…
|
9.8
Critique
|
6 oct. 2026 |
| CVE-2026-56960 |
In multiple locations, there is a possible use-after-free due to a logic error in the code
|
9.8
Critique
|
15 sept. 2026 |
| CVE-2026-55366 |
In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code
|
9.8
Critique
|
15 sept. 2026 |
| CVE-2026-58822 |
In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting
|
9.8
Critique
|
8 sept. 2026 |
| CVE-2026-49921 |
In multiple locations, there is a possible memory safety issue due to a heap buffer overflow
|
9.8
Critique
|
8 sept. 2026 |
| CVE-2026-28606 |
In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the…
|
9.8
Critique
|
8 sept. 2026 |
| CVE-2026-0163 |
In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free
|
9.8
Critique
|
4 août 2026 |
| CVE-2026-28573 |
In AndroidManifest.xml, there is a possible persistent denial of service due to a missing permission check
|
10.0
Critique
|
18 juin 2026 |
| CVE-2026-0063 |
In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to a…
|
10.0
Critique
|
17 juin 2026 |
| CVE-2026-28587 |
In MmsSmsProvider of MmsSmsProvider.java, there is a possible way to retrieve sensitive information due to a missing…
|
10.0
Critique
|
17 juin 2026 |
| CVE-2026-28615 |
In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions bypass
|
10.0
Critique
|
17 juin 2026 |
| CVE-2026-0083 |
In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition
|
10.0
Critique
|
17 juin 2026 |
| CVE-2026-0082 |
In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to…
|
10.0
Critique
|
17 juin 2026 |
| CVE-2026-0081 |
In NFC, there is a possible way to spoof an NFC event due to a missing permission check
|
10.0
Critique
|
17 juin 2026 |
| CVE-2026-0071 |
In SettingsLib, there is a possible missing permission check due to a logic error in the code
|
10.0
Critique
|
17 juin 2026 |
| CVE-2026-28575 |
In PackageInstaller.Session#transfer of…
|
10.0
Critique
|
17 juin 2026 |
| CVE-2026-0064 |
In multiple places, there is a possible persistent denial of service due to resource exhaustion
|
10.0
Critique
|
17 juin 2026 |
| CVE-2026-0092 |
In Package Manager, there is a possible device lock controller bypass due to a missing permission check
|
10.0
Critique
|
17 juin 2026 |
| CVE-2026-0068 |
In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a…
|
10.0
Critique
|
17 juin 2026 |
| CVE-2026-0124 |
There is a possible out of bounds write due to a missing bounds check
|
10.0
Critique
|
10 mars 2026 |
| CVE-2026-0120 |
In modem, there is a possible out of bounds write due to an incorrect bounds check
|
9.8
Critique
|
10 mars 2026 |