| CVE-2026-58943 | NA | N/A | In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy. Th… | 2026-11-02 |
| CVE-2026-58944 | NA | N/A | In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch… | 2026-11-02 |
| CVE-2026-58945 | NA | N/A | In multiple locations, there is a possible side channel information leak due to improperly used crypto. This c… | 2026-11-02 |
| CVE-2026-58946 | NA | N/A | In navigateUpTo of ActivityClientController.java, there is a possible permission bypass due to a logic error i… | 2026-11-02 |
| CVE-2026-58949 | NA | N/A | In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possible denial of service due to a stack buf… | 2026-11-02 |
| CVE-2026-58951 | NA | N/A | In multiple locations, there is a possible permission bypass due to a missing permission check. This could lea… | 2026-11-02 |
| CVE-2026-58953 | NA | N/A | In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This coul… | 2026-11-02 |
| CVE-2026-58955 | NA | N/A | In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logi… | 2026-11-02 |
| CVE-2026-58956 | NA | N/A | In modpowF4 of avb_rsa.c, there is a possible signature verification bypass due to a logic error in the code. … | 2026-11-02 |
| CVE-2026-58957 | NA | N/A | In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launc… | 2026-11-02 |
| CVE-2026-58961 | NA | N/A | In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background activity launch du… | 2026-11-02 |
| CVE-2026-58962 | NA | N/A | In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a mi… | 2026-11-02 |
| CVE-2026-58963 | NA | N/A | In multiple locations, there is a possible denial of service due to improper input validation. This could lead… | 2026-11-02 |
| CVE-2026-58964 | NA | N/A | In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input valid… | 2026-11-02 |
| CVE-2026-58965 | NA | N/A | In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused d… | 2026-11-02 |
| CVE-2026-58966 | NA | N/A | In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow.… | 2026-11-02 |
| CVE-2026-58968 | NA | N/A | In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could le… | 2026-11-02 |
| CVE-2026-58969 | NA | N/A | In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing perm… | 2026-11-02 |
| CVE-2026-58970 | NA | N/A | In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused depu… | 2026-11-02 |
| CVE-2026-58971 | NA | N/A | In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer overflow. This c… | 2026-11-02 |
| CVE-2026-58974 | NA | N/A | In multiple locations, there is a possible permission bypass due to a missing permission check. This could lea… | 2026-11-02 |
| CVE-2026-58975 | NA | N/A | In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead … | 2026-11-02 |
| CVE-2026-58976 | NA | N/A | In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a logic error in… | 2026-11-02 |
| CVE-2026-58978 | NA | N/A | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead… | 2026-11-02 |
| CVE-2026-58979 | NA | N/A | In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in th… | 2026-11-02 |
| CVE-2026-58984 | NA | N/A | In multiple locations, there is a possible memory corruption due to a use-after-free. This could lead to local… | 2026-11-02 |
| CVE-2026-58985 | NA | N/A | In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a logic error in… | 2026-11-02 |
| CVE-2026-58986 | NA | N/A | In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible permission bypass due … | 2026-11-02 |
| CVE-2026-58988 | NA | N/A | In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This co… | 2026-11-02 |
| CVE-2026-58989 | NA | N/A | In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing pe… | 2026-11-02 |
| CVE-2026-58990 | NA | N/A | In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible memory safety issue due to an integer overf… | 2026-11-02 |
| CVE-2026-58994 | NA | N/A | In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission ch… | 2026-11-02 |
| CVE-2026-58995 | NA | N/A | In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap buffer overflow. T… | 2026-11-02 |
| CVE-2026-58997 | NA | N/A | In validateImageInfo of Bitmap.cpp, there is a possible out-of-bounds read due to a precondition check failure… | 2026-11-02 |
| CVE-2026-59000 | NA | N/A | In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to loca… | 2026-11-02 |
| CVE-2026-59001 | NA | N/A | In checkQueryPermission of TelephonyProvider.java, there is a possible permission bypass due to a logic error … | 2026-11-02 |
| CVE-2026-59002 | NA | N/A | In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the … | 2026-11-02 |
| CVE-2026-59003 | NA | N/A | In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due … | 2026-11-02 |
| CVE-2026-59004 | NA | N/A | In multiple locations, there is a possible permission bypass due to an uncaught exception. This could lead to … | 2026-11-02 |
| CVE-2026-59005 | NA | N/A | In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permissi… | 2026-11-02 |
| CVE-2026-59006 | NA | N/A | In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay… | 2026-11-02 |
| CVE-2026-59007 | NA | N/A | In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a logic error in th… | 2026-11-02 |
| CVE-2026-59008 | NA | N/A | In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of service due to… | 2026-11-02 |
| CVE-2026-59010 | NA | N/A | In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check. This could l… | 2026-11-02 |
| CVE-2026-59011 | NA | N/A | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead… | 2026-11-02 |
| CVE-2026-59012 | NA | N/A | In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass du… | 2026-11-02 |
| CVE-2026-59014 | NA | N/A | In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to … | 2026-11-02 |
| CVE-2026-59015 | NA | N/A | In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to loca… | 2026-11-02 |
| CVE-2026-59016 | NA | N/A | In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal… | 2026-11-02 |
| CVE-2026-59020 | NA | N/A | In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race cond… | 2026-11-02 |