https://vulnogram.org/ Most recent CVEs assigned by Android (associated with Google Inc. or Open Handset Alliance) (google_android). https://vulnogram.org/seaview/icons/google_android.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-28648 https://vulnogram.org/CVE-2026-28648 In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. High Mon, 05 Oct 2026 18:39:22 GMT https://vulnogram.org/CVE-2026-28647 https://vulnogram.org/CVE-2026-28647 In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n… High Mon, 05 Oct 2026 18:39:21 GMT https://vulnogram.org/CVE-2026-28641 https://vulnogram.org/CVE-2026-28641 In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges nee… High Mon, 05 Oct 2026 18:39:20 GMT https://vulnogram.org/CVE-2026-28640 https://vulnogram.org/CVE-2026-28640 In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. U… High Mon, 05 Oct 2026 18:39:19 GMT https://vulnogram.org/CVE-2026-28625 https://vulnogram.org/CVE-2026-28625 In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. High Mon, 05 Oct 2026 18:39:18 GMT https://vulnogram.org/CVE-2026-58880 https://vulnogram.org/CVE-2026-58880 In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for e… High Mon, 05 Oct 2026 18:24:06 GMT https://vulnogram.org/CVE-2026-58865 https://vulnogram.org/CVE-2026-58865 In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for ex… High Network Exploitable Mon, 05 Oct 2026 18:24:05 GMT https://vulnogram.org/CVE-2026-58859 https://vulnogram.org/CVE-2026-58859 In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. High Mon, 05 Oct 2026 18:24:04 GMT https://vulnogram.org/CVE-2026-58856 https://vulnogram.org/CVE-2026-58856 In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction… Low Mon, 05 Oct 2026 18:24:03 GMT https://vulnogram.org/CVE-2026-58854 https://vulnogram.org/CVE-2026-58854 In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. High Mon, 05 Oct 2026 18:24:02 GMT https://vulnogram.org/CVE-2026-58841 https://vulnogram.org/CVE-2026-58841 In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not… High Mon, 05 Oct 2026 18:24:01 GMT https://vulnogram.org/CVE-2026-58835 https://vulnogram.org/CVE-2026-58835 In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. High Mon, 05 Oct 2026 18:24:00 GMT https://vulnogram.org/CVE-2026-58834 https://vulnogram.org/CVE-2026-58834 In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interact… Medium Mon, 05 Oct 2026 18:23:59 GMT https://vulnogram.org/CVE-2026-58815 https://vulnogram.org/CVE-2026-58815 In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. High Mon, 05 Oct 2026 18:23:58 GMT https://vulnogram.org/CVE-2026-55286 https://vulnogram.org/CVE-2026-55286 In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploi… High Mon, 05 Oct 2026 18:23:57 GMT https://vulnogram.org/CVE-2026-55280 https://vulnogram.org/CVE-2026-55280 In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. High Mon, 05 Oct 2026 18:23:56 GMT https://vulnogram.org/CVE-2026-55270 https://vulnogram.org/CVE-2026-55270 In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. High Mon, 05 Oct 2026 18:23:55 GMT https://vulnogram.org/CVE-2026-55269 https://vulnogram.org/CVE-2026-55269 In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for… High Mon, 05 Oct 2026 18:23:54 GMT https://vulnogram.org/CVE-2026-55266 https://vulnogram.org/CVE-2026-55266 In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation… High Mon, 05 Oct 2026 18:23:53 GMT https://vulnogram.org/CVE-2026-55265 https://vulnogram.org/CVE-2026-55265 In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitati… Medium Mon, 05 Oct 2026 18:23:52 GMT https://vulnogram.org/CVE-2026-49937 https://vulnogram.org/CVE-2026-49937 In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for… High Mon, 05 Oct 2026 18:23:51 GMT https://vulnogram.org/CVE-2026-49933 https://vulnogram.org/CVE-2026-49933 In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privi… High Mon, 05 Oct 2026 18:23:50 GMT https://vulnogram.org/CVE-2026-49885 https://vulnogram.org/CVE-2026-49885 In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. High Mon, 05 Oct 2026 18:23:49 GMT https://vulnogram.org/CVE-2026-49880 https://vulnogram.org/CVE-2026-49880 In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for expl… High Mon, 05 Oct 2026 18:23:47 GMT https://vulnogram.org/CVE-2026-49878 https://vulnogram.org/CVE-2026-49878 In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for ex… High Mon, 05 Oct 2026 18:23:46 GMT https://vulnogram.org/CVE-2026-45524 https://vulnogram.org/CVE-2026-45524 In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploit… High Mon, 05 Oct 2026 18:23:45 GMT https://vulnogram.org/CVE-2026-28667 https://vulnogram.org/CVE-2026-28667 In multiple functions of rw_t5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Medium Mon, 05 Oct 2026 18:23:43 GMT https://vulnogram.org/CVE-2026-28659 https://vulnogram.org/CVE-2026-28659 In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitat… Critical Network Exploitable Tue, 08 Sep 2026 19:20:33 GMT https://vulnogram.org/CVE-2026-49883 https://vulnogram.org/CVE-2026-49883 In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User… Critical Network Exploitable Tue, 08 Sep 2026 19:10:22 GMT https://vulnogram.org/CVE-2026-58941 https://vulnogram.org/CVE-2026-58941 In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for explo… High Tue, 08 Sep 2026 18:06:08 GMT https://vulnogram.org/CVE-2026-58874 https://vulnogram.org/CVE-2026-58874 In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede… High Tue, 08 Sep 2026 18:06:07 GMT https://vulnogram.org/CVE-2026-58848 https://vulnogram.org/CVE-2026-58848 In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploita… High Tue, 08 Sep 2026 18:06:05 GMT https://vulnogram.org/CVE-2026-58846 https://vulnogram.org/CVE-2026-58846 In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. High Tue, 08 Sep 2026 18:06:04 GMT https://vulnogram.org/CVE-2026-58839 https://vulnogram.org/CVE-2026-58839 In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. High Tue, 08 Sep 2026 18:06:03 GMT https://vulnogram.org/CVE-2026-58823 https://vulnogram.org/CVE-2026-58823 In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for e… High Tue, 08 Sep 2026 18:06:02 GMT https://vulnogram.org/CVE-2026-58822 https://vulnogram.org/CVE-2026-58822 In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Critical Network Exploitable Tue, 08 Sep 2026 18:06:01 GMT https://vulnogram.org/CVE-2026-58820 https://vulnogram.org/CVE-2026-58820 In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required. High Tue, 08 Sep 2026 18:06:00 GMT https://vulnogram.org/CVE-2026-55294 https://vulnogram.org/CVE-2026-55294 In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for e… High Tue, 08 Sep 2026 18:05:59 GMT https://vulnogram.org/CVE-2026-55290 https://vulnogram.org/CVE-2026-55290 In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Low Tue, 08 Sep 2026 18:05:58 GMT https://vulnogram.org/CVE-2026-55285 https://vulnogram.org/CVE-2026-55285 In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploi… High Tue, 08 Sep 2026 18:05:57 GMT https://vulnogram.org/CVE-2026-55277 https://vulnogram.org/CVE-2026-55277 In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction… High Tue, 08 Sep 2026 18:05:56 GMT https://vulnogram.org/CVE-2026-55273 https://vulnogram.org/CVE-2026-55273 In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f… High Tue, 08 Sep 2026 18:05:55 GMT https://vulnogram.org/CVE-2026-55256 https://vulnogram.org/CVE-2026-55256 In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for e… Medium Tue, 08 Sep 2026 18:05:54 GMT https://vulnogram.org/CVE-2026-49932 https://vulnogram.org/CVE-2026-49932 In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. High Tue, 08 Sep 2026 18:05:53 GMT https://vulnogram.org/CVE-2026-49927 https://vulnogram.org/CVE-2026-49927 In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. High Tue, 08 Sep 2026 18:05:52 GMT https://vulnogram.org/CVE-2026-49921 https://vulnogram.org/CVE-2026-49921 In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Critical Network Exploitable Tue, 08 Sep 2026 18:05:51 GMT https://vulnogram.org/CVE-2026-49919 https://vulnogram.org/CVE-2026-49919 In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploit… High Tue, 08 Sep 2026 18:05:50 GMT https://vulnogram.org/CVE-2026-49918 https://vulnogram.org/CVE-2026-49918 In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. High Tue, 08 Sep 2026 18:05:48 GMT https://vulnogram.org/CVE-2026-49895 https://vulnogram.org/CVE-2026-49895 In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. U… Low Tue, 08 Sep 2026 18:05:47 GMT https://vulnogram.org/CVE-2026-49887 https://vulnogram.org/CVE-2026-49887 In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interact… High Tue, 08 Sep 2026 18:05:46 GMT