| CVE-2026-55257 | NA | N/A | In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient… | 2026-11-02 |
| CVE-2026-55261 | NA | N/A | In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code execution due to a m… | 2026-11-02 |
| CVE-2026-55262 | NA | N/A | In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there is a possible… | 2026-11-02 |
| CVE-2026-55263 | NA | N/A | In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/conse… | 2026-11-02 |
| CVE-2026-55264 | NA | N/A | In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a con… | 2026-11-02 |
| CVE-2026-55271 | NA | N/A | In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection du… | 2026-11-02 |
| CVE-2026-55272 | NA | N/A | In multiple places, there is a possible permission bypass due to resource exhaustion. This could lead to local… | 2026-11-02 |
| CVE-2026-55275 | NA | N/A | In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote e… | 2026-11-02 |
| CVE-2026-55283 | NA | N/A | In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to rem… | 2026-11-02 |
| CVE-2026-55287 | NA | N/A | In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into grantin… | 2026-11-02 |
| CVE-2026-55288 | NA | N/A | In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exc… | 2026-11-02 |
| CVE-2026-55289 | NA | N/A | In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a co… | 2026-11-02 |
| CVE-2026-55292 | NA | N/A | In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer underflow. This could … | 2026-11-02 |
| CVE-2026-58814 | NA | N/A | In parseContentType of PduParser.java, there is a possible denial of service due to an integer overflow. This … | 2026-11-02 |
| CVE-2026-58817 | NA | N/A | In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due … | 2026-11-02 |
| CVE-2026-58821 | NA | N/A | In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access protected data due … | 2026-11-02 |
| CVE-2026-58824 | NA | N/A | In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. T… | 2026-11-02 |
| CVE-2026-58825 | NA | N/A | In multiple functions of fork.c, there is a possible use after free due to a logic error in the code. This cou… | 2026-11-02 |
| CVE-2026-58826 | NA | N/A | In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. This could lead to l… | 2026-11-02 |
| CVE-2026-58827 | NA | N/A | In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lea… | 2026-11-02 |
| CVE-2026-58828 | NA | N/A | In multiple functions of base.c, there is a possible use-after-free due to a race condition. This could lead t… | 2026-11-02 |
| CVE-2026-58829 | NA | N/A | In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free. This could l… | 2026-11-02 |
| CVE-2026-58836 | NA | N/A | In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM)… | 2026-11-02 |
| CVE-2026-58837 | NA | N/A | In multiple locations, there is a possible background activity launch due to a logic error in the code. This c… | 2026-11-02 |
| CVE-2026-58838 | NA | N/A | In multiple functions of Helpers.java, there is a possible information disclosure due to improper input valida… | 2026-11-02 |
| CVE-2026-58844 | NA | N/A | In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check. This cou… | 2026-11-02 |
| CVE-2026-58845 | NA | N/A | In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to … | 2026-11-02 |
| CVE-2026-58847 | NA | N/A | In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the code. This c… | 2026-11-02 |
| CVE-2026-58853 | NA | N/A | In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check.… | 2026-11-02 |
| CVE-2026-58857 | NA | N/A | In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead t… | 2026-11-02 |
| CVE-2026-58866 | NA | N/A | In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible untrusted/misleadi… | 2026-11-02 |
| CVE-2026-58867 | NA | N/A | In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission … | 2026-11-02 |
| CVE-2026-58868 | NA | N/A | In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow… | 2026-11-02 |
| CVE-2026-58870 | NA | N/A | In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missin… | 2026-11-02 |
| CVE-2026-58871 | NA | N/A | In set_type4_frame_classifier of sta_iface.cpp, there is a possible memory safety issue due to a heap buffer o… | 2026-11-02 |
| CVE-2026-58875 | NA | N/A | In multiple locations, there is a possible denial of service due to improper input validation. This could lead… | 2026-11-02 |
| CVE-2026-58876 | NA | N/A | In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to rem… | 2026-11-02 |
| CVE-2026-58877 | NA | N/A | In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a con… | 2026-11-02 |
| CVE-2026-58879 | NA | N/A | In descramble of multiple files, there is a possible out-of-bounds write due to improper casting. This could l… | 2026-11-02 |
| CVE-2026-58882 | NA | N/A | In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow. Thi… | 2026-11-02 |
| CVE-2026-58883 | NA | N/A | In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead… | 2026-11-02 |
| CVE-2026-58884 | NA | N/A | In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confuse… | 2026-11-02 |
| CVE-2026-58885 | NA | N/A | In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to loca… | 2026-11-02 |
| CVE-2026-58886 | NA | N/A | In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the c… | 2026-11-02 |
| CVE-2026-58933 | NA | N/A | In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code. This … | 2026-11-02 |
| CVE-2026-58934 | NA | N/A | In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a lo… | 2026-11-02 |
| CVE-2026-58936 | NA | N/A | In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to… | 2026-11-02 |
| CVE-2026-58937 | NA | N/A | In multiple locations, there is a possible persistent denial of service due to improper input validation. This… | 2026-11-02 |
| CVE-2026-58938 | NA | N/A | In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input validation. T… | 2026-11-02 |
| CVE-2026-58942 | NA | N/A | In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code. This coul… | 2026-11-02 |