Threat database

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

A remote code execution vulnerability exists in the IP Multimedia Subsystem component of Google Android due to an out-of-bounds write caused by improper input validation. Exploitation does not require user interaction or additional privileges. The vulnerability has a high severity rating with a CVSS score of 8.8.

In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-57035 is an elevation of privilege vulnerability in Google Android caused by a missing bounds check leading to possible out-of-bounds writes. Exploitation requires local access with system-level privileges and does not require user interaction. The vulnerability has a medium severity rating with a CVSS score of 6.7.

CVE-2026-57014 is a high-severity elevation of privilege vulnerability in Google Android. It arises from a missing bounds check in the phNxpNciHal_ext_process_nfc_init_rsp function within phNxpNciHal_ext.cc, leading to a possible out-of-bounds write. Exploitation does not require user interaction or additional execution privileges.

In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-57008 is a high-severity information disclosure vulnerability in the Modem component of Google Android. It arises from improper input validation, allowing remote attackers to disclose information without needing any execution privileges or user interaction.

In acfw_ffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-56997 is a high-severity elevation of privilege vulnerability in Google Android. It arises from a missing bounds check in the Av1DecodeFrameTag function within vp9hwd_headers.cc, leading to a possible out-of-bounds write. Exploitation does not require user interaction or additional execution privileges.

CVE-2026-56992 is a local elevation of privilege vulnerability in Google Android caused by a permission bypass due to a confused deputy in multiple files. Exploitation does not require user interaction but does require System execution privileges. The vulnerability has a medium severity rating with a CVSS score of 6.7.

CVE-2026-56989 is an elevation of privilege vulnerability in Google Android caused by possible out-of-bounds write errors due to missing bounds checks in multiple locations. Exploitation requires local system execution privileges and does not require user interaction. The vulnerability has a medium severity rating with a CVSS score of 6.7.

CVE-2026-56988 is a use-after-free vulnerability in multiple functions of bluetooth_cco.cc in Google Android. It arises from a race condition and can lead to local privilege escalation without requiring user interaction. Exploitation requires system execution privileges and has a medium severity rating with a CVSS score of 6.4.

In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

In get_global_config_item_addr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-56975 is a denial of service vulnerability in the Cellular Modem component of Google Android. It arises from improper input validation, allowing a remote attacker in proximity to cause a denial of service without requiring user interaction or additional privileges. The vulnerability has a medium severity rating with a CVSS score of 6.5.