Threat database

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-56888 is a medium severity elevation of privilege vulnerability in Google Android. It involves a possible permission bypass caused by side channel information disclosure in multiple locations. Exploitation does not require user interaction or additional execution privileges.

A remote code execution vulnerability exists in the Cellular Modem component of Google Android due to a logic error that causes information disclosure. Exploitation does not require user interaction or additional privileges. The vulnerability is rated high severity with a CVSS score of 8.8.

In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-56879 is a local elevation of privilege vulnerability in Google Android due to a possible memory corruption in the gmc_mb_msg_handler function of gmc_mba.c. Exploitation does not require user interaction but does require system execution privileges. The vulnerability could allow an attacker with existing high privileges to escalate their privileges further.

In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-55365 is an elevation of privilege vulnerability in Google Android due to an out-of-bounds write in multiple functions of remap.c caused by incorrect bounds checking. Exploitation requires local system execution privileges but no user interaction. The vulnerability has a medium severity with a CVSS score of 6.7.

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-55351 is a high-severity elevation of privilege vulnerability in the VPU component of Google Android. It arises from a possible out-of-bounds write caused by an integer overflow. Exploitation does not require user interaction and can be performed with limited privileges, potentially allowing an attacker to escalate their privileges locally.

CVE-2026-55343 is a high-severity remote code execution vulnerability in Google Android. It arises from a missing bounds check in the decodeAmr function of ImsMediaAudioPlayer.cpp, leading to a possible out-of-bounds write. Exploitation requires user interaction but no additional execution privileges. The vulnerability could allow an attacker to execute arbitrary code remotely.

CVE-2026-55332 is a medium severity elevation of privilege vulnerability in Google Android. It involves possible out-of-bounds write errors in multiple locations due to improper input validation. Exploitation requires local access with system-level execution privileges and does not require user interaction. No affected versions or patch information are provided.

CVE-2026-55331 is a high-severity remote code execution vulnerability in the IP Multimedia Subsystem component of Google Android. It arises from an out-of-bounds write due to an incorrect bounds check. Exploitation does not require user interaction or additional privileges.

CVE-2026-55323 is a high-severity local privilege escalation vulnerability in Google Android. It arises from a heap buffer overflow in the function gf_base_update_finger_base within gf_base.c, causing an out-of-bounds write. Exploitation does not require user interaction or additional execution privileges.

CVE-2026-55318 is a high-severity remote code execution vulnerability in Google Android caused by a use-after-free condition due to a race condition in multiple locations. Exploitation does not require user interaction or additional privileges.

CVE-2026-55317 is a medium severity elevation of privilege vulnerability in Google Android. It arises from a possible out-of-bounds write in the printf function due to improper input validation. Exploitation requires local access with system execution privileges and does not require user interaction.

CVE-2026-55306 is a high-severity denial of service vulnerability in the Cellular Modem component of Google Android. It arises from improper input validation, allowing remote attackers to cause a denial of service without requiring user interaction or additional privileges.

In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-55302 is a medium severity elevation of privilege vulnerability in Google Android. It involves a logic error causing possible permission bypass in multiple code locations, allowing local escalation of privilege without user interaction. Exploitation requires System execution privileges.

CVE-2026-55301 is a high-severity elevation of privilege vulnerability in Google Android. It arises from a missing bounds check in the Wave6VpuDecFlush function of wave6.c, leading to a possible out-of-bounds write. Exploitation does not require user interaction or additional execution privileges.

CVE-2026-0200 is a high-severity elevation of privilege vulnerability in the Cellular Modem component of Google Android. It involves a heap buffer overflow that can cause an out-of-bounds write. Exploitation does not require user interaction or additional execution privileges.