| CVE-2026-56934 | NA | N/A | In arm_lpae_split_blk_unmap of drivers/iommu/io-pgtable-arm-common.c, there is a possible Logic error due to a… | 2026-11-10 |
| CVE-2026-56935 | NA | N/A | In km_os_regen_salt of storage.c, there is a possible way to recover deleted keys due to a logic error. This c… | 2026-11-10 |
| CVE-2026-56938 | NA | N/A | In port_shutdown of ipc.c, there is a possible Use After Free due to a race condition. This could lead to loca… | 2026-11-10 |
| CVE-2026-56943 | NA | N/A | In multiple locations, there is a possible way to trigger an out of bounds read via an attestation comparison … | 2026-11-10 |
| CVE-2026-56944 | NA | N/A | In smmu_detach_dev of private/google-modules/iommu/arm-smmu-v3/drivers/iommu/arm/arm-smmu-v3/pkvm/arm-smmu-v3.… | 2026-11-10 |
| CVE-2026-56946 | NA | N/A | In smmu_unmap_visit_leaf of arm-smmu-v3.c, there is a possible way to release active direct memory access page… | 2026-11-10 |
| CVE-2026-56947 | NA | N/A | In getCarrierRestrictionStatus of PhoneInterfaceManager.java, there is a possible permission bypass due to a c… | 2026-11-10 |
| CVE-2026-56949 | NA | N/A | In multiple locations, there is a possible way to modify authenticated coprocessor firmware in shared memory b… | 2026-11-10 |
| CVE-2026-56951 | NA | N/A | In on_vkUpdateDescriptorSetWithTemplateSized2GOOGLE of vk_decoder_global_state.cpp, there is a possible way to… | 2026-11-10 |
| CVE-2026-56956 | NA | N/A | In EncodeT140 of TextRtpPayloadEncoderNode.cpp, there is a possible Heap Buffer Overflow due to a logic error … | 2026-11-10 |
| CVE-2026-56966 | NA | N/A | In CommitToBuffer of hal_override_options.bundle.cc, there is a possible way to retain stale direct memory acc… | 2026-11-10 |
| CVE-2026-56969 | NA | N/A | In edgetpu_group_clear_responses of edgetpu_group.c, there is a possible Use After Free due to a logic error i… | 2026-11-10 |
| CVE-2026-56971 | NA | N/A | In AudioSession::SendInternalEvent of AudioSession.cpp, there is a possible Double Free due to a logic error i… | 2026-11-10 |
| CVE-2026-56980 | NA | N/A | In createDataFlowAsync of data_flow_manager.cc, there is a possible way to trigger an out of bounds write in s… | 2026-11-10 |
| CVE-2026-56995 | NA | N/A | In multiple locations, there is a possible way to corrupt host allocator metadata in shared memory due to memo… | 2026-11-10 |
| CVE-2026-57004 | NA | N/A | In PresenceDecoderV1::DecodeDataElements of presence_decoder_v1.cc, there is a possible out-of-bounds write du… | 2026-11-10 |
| CVE-2026-57005 | NA | N/A | In EuiccPort.buildUiccAccessRule of EuiccPort.java, there is a possible Confused Deputy due to a confused depu… | 2026-11-10 |
| CVE-2026-57009 | NA | N/A | In GC2AvcDec of GC2AvcDec.cpp, there is a possible Logic error due to a logic error in the code. This could le… | 2026-11-10 |
| CVE-2026-57010 | NA | N/A | In EncodeLastScanBufferElement of data_manager.cc, there is a possible out-of-bounds write due to a logic erro… | 2026-11-10 |
| CVE-2026-57013 | NA | N/A | In access_control_enable of multiple files, there is a possible way to release secure coprocessors from reset … | 2026-11-10 |
| CVE-2026-57036 | NA | N/A | In send_vdu_directive of gdmc/gsp/dev/bmsm/plat/lga/vdu.c, there is a possible Logic error due to a logic erro… | 2026-11-10 |
| CVE-2026-57037 | NA | N/A | In getChppAppState of chpp_init.cc, there is a possible way to trigger an out of bounds read and corrupt task … | 2026-11-10 |
| CVE-2026-57043 | NA | N/A | In tipc_dev_probe of tipc_virtio_dev.c, there is a possible way to corrupt memory via an off-by-one cleanup lo… | 2026-11-10 |
| CVE-2026-57047 | NA | N/A | In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out-of-bounds write due … | 2026-11-10 |
| CVE-2026-57048 | NA | N/A | In authenticate of verify_image, there is a possible Signature verification logic bypass due to a logic error … | 2026-11-10 |
| CVE-2026-58677 | NA | N/A | In get_secure_boot_mode of auth.rs, there is a possible way to bypass root signature verification via fault in… | 2026-11-10 |
| CVE-2026-58680 | NA | N/A | In cpm_mbox_power_ctrl_sswrp of cpm_mbox.c, there is a possible permission bypass due to a precondition check … | 2026-11-10 |
| CVE-2026-58681 | NA | N/A | In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to … | 2026-11-10 |
| CVE-2026-58684 | NA | N/A | In smmu_config_l3tt of smmu.c, there is a possible permission bypass due to a logic error in the code. This co… | 2026-11-10 |
| CVE-2026-58690 | NA | N/A | In multiple functions of bitmap_image_buffer.h, there is a possible way to trigger an out of bounds write on t… | 2026-11-10 |
| CVE-2026-58696 | NA | N/A | In multiple locations, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead … | 2026-11-10 |
| CVE-2026-58697 | NA | N/A | In codec3p_secure of codec3p_secure, there is a possible Heap Buffer Overflow due to a missing bounds check. T… | 2026-11-10 |
| CVE-2026-58702 | NA | N/A | In createIntent of TimerAgent.java, there is a possible permission bypass due to a confused deputy. This could… | 2026-11-10 |
| CVE-2026-58705 | NA | N/A | In handleEvent of gscan.cpp, there is a possible way to trigger an out of bounds write on the heap due to a mi… | 2026-11-10 |
| CVE-2026-58722 | NA | N/A | In chppProcessDiscoverAllResponse of system/chre/chpp/clients/discovery.c, there is a possible Heap Buffer Ove… | 2026-11-10 |
| CVE-2026-58729 | NA | N/A | In multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to l… | 2026-11-10 |
| CVE-2026-58736 | NA | N/A | In NotifySipResponse of SessionEx.cpp, there is a possible way to corrupt memory via a dangling connection poi… | 2026-11-10 |
| CVE-2026-58740 | NA | N/A | In BitmapImageBuffer of bitmap_image_buffer.h, there is a possible out-of-bounds write due to an integer overf… | 2026-11-10 |
| CVE-2026-58752 | NA | N/A | In aoc_unlocked_ioctl_handle_ion_fd of aoc.c, there is a possible type confusion due to improper input validat… | 2026-11-10 |
| CVE-2026-58757 | NA | N/A | In mfc_alloc_enc_roi_buffer of mfc_buf.c, there is a possible out-of-bounds write due to a heap buffer overflo… | 2026-11-10 |
| CVE-2026-58762 | NA | N/A | In ac_get_prot_config of plat_trusty.c, there is a possible memory corruption due to improper input validation… | 2026-11-10 |
| CVE-2026-58769 | NA | N/A | In multiple locations, there is a possible out-of-bounds read due to a missing bounds check. This could lead t… | 2026-11-10 |
| CVE-2026-58778 | NA | N/A | In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local es… | 2026-11-10 |
| CVE-2026-58779 | NA | N/A | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead… | 2026-11-10 |
| CVE-2026-58780 | NA | N/A | In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could le… | 2026-11-10 |
| CVE-2026-58781 | NA | N/A | In HostLinkBase::chreIpiHandler of host_link.cc, there is a possible out-of-bounds write due to a missing boun… | 2026-11-10 |
| CVE-2026-58782 | NA | N/A | In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead… | 2026-11-10 |
| CVE-2026-58783 | NA | N/A | In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead… | 2026-11-10 |
| CVE-2026-58785 | NA | N/A | In update_user_consent of main.rs, there is a possible elevation of privilege due to uninitialized data. This … | 2026-11-10 |
| CVE-2026-58786 | NA | N/A | In cnm_memset of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This cou… | 2026-11-10 |