| CVE-2026-58787 | NA | N/A | In chppWifiRangingEventNotification of clients/wifi.c, there is a possible Heap Buffer Overflow due to a logic… | 2026-11-10 |
| CVE-2026-58788 | NA | N/A | In stpropnci_process_std of stpropnci_std.cc, there is a possible way to trigger an out of bounds write into g… | 2026-11-10 |
| CVE-2026-58789 | NA | N/A | In s_gen_tile_param of multiple files, there is a possible way to trigger an out of bounds write in tile param… | 2026-11-10 |
| CVE-2026-58790 | NA | N/A | In CMD_ENC_SET_PARAM of encoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This c… | 2026-11-10 |
| CVE-2026-58791 | NA | N/A | In pic_timing of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This cou… | 2026-11-10 |
| CVE-2026-58796 | NA | N/A | In multiple functions of AndroidManifest.xml, there is a possible way to trigger unauthorized firmware updates… | 2026-11-10 |
| CVE-2026-58797 | NA | N/A | In register_dump_dpa of sswrp_pcie.c, there is a possible Logic error due to a logic error in the code. This c… | 2026-11-10 |
| CVE-2026-58798 | NA | N/A | In multiple functions of cn_Tai.cpp, there is a possible way to trigger an out of bounds write due to memory c… | 2026-11-10 |
| CVE-2026-58799 | NA | N/A | In multiple functions of rmmi_utility.c, there is a possible way to trigger an out of bounds write due to a mi… | 2026-11-10 |
| CVE-2026-58800 | NA | N/A | In IMG_vkCreateImageView of image_view.c, there is a possible way to trigger a use after free due to memory co… | 2026-11-10 |
| CVE-2026-58801 | NA | N/A | In smmu_domain_config_s1 of arm-smmu-v3.c, there is a possible way to access stale stream table entries across… | 2026-11-10 |
| CVE-2026-58803 | NA | N/A | In bytes_are_equal of lib.rs, there is a possible way to recover authentication keys due to side channel infor… | 2026-11-10 |
| CVE-2026-58804 | NA | N/A | In ExecuteGraphCommand of multiple files, there is a possible way to trigger an out of bounds write via an ove… | 2026-11-10 |
| CVE-2026-58805 | NA | N/A | In multiple locations, there is a possible way to zero arbitrary secure memory via unvalidated image body addr… | 2026-11-10 |
| CVE-2026-58806 | NA | N/A | In get_sswrp_state of cpm_mbox_srv/main.c, there is a possible Logic error due to a logic error in the code. T… | 2026-11-10 |
| CVE-2026-58807 | NA | N/A | In Retry_MtsMessageInPending of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion… | 2026-11-10 |
| CVE-2026-58808 | NA | N/A | In multiple locations, there is a possible way to dump secure cache lines into non-secure memory on warm reset… | 2026-11-10 |
| CVE-2026-58809 | NA | N/A | In smmu_domain_config_s1 of arm-smmu-v3.c, there is a possible OOB Write due to a missing bounds check. This c… | 2026-11-10 |
| CVE-2026-58810 | NA | N/A | In multiple functions of simd_ctx.c, there is a possible way to disclose secure vector predicate and fault reg… | 2026-11-10 |
| CVE-2026-58811 | NA | N/A | In smmu_get_mair_idx of smmu.c, there is a possible way to apply incorrect memory attributes to direct memory … | 2026-11-10 |
| CVE-2026-58812 | NA | N/A | In decode of fw_vp9_dec_pic.c, there is a possible Logic error due to a logic error in the code. This could le… | 2026-11-10 |
| CVE-2026-58813 | NA | N/A | In mmap of mman.c, there is a possible way to trigger an out of bounds read and write via mapping size truncat… | 2026-11-10 |
| CVE-2026-59573 | NA | N/A | In max_num_ref_frames of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. T… | 2026-11-10 |
| CVE-2026-59574 | NA | N/A | In notifyPollingLoopFrames of hal_fwlog.cc, there is a possible way to trigger an out of bounds read and write… | 2026-11-10 |
| CVE-2026-59575 | NA | N/A | In stpropnci_cb_observe_mode_suspend of stpropnci_prop_android.cc, there is a possible way to trigger an out o… | 2026-11-10 |
| CVE-2026-59578 | NA | N/A | In s_check_valid_tile_param_custom_tile of av1_encoder, there is a possible Non-Heap Buffer Overflow due to a … | 2026-11-10 |
| CVE-2026-59579 | NA | N/A | In getUserDataPayload of GC2UserData.cpp, there is a possible Logic error due to a logic error in the code. Th… | 2026-11-10 |
| CVE-2026-59580 | NA | N/A | In trusty_context_switch of services/spd/trusty/trusty.c, there is a possible Secure world register state leak… | 2026-11-10 |
| CVE-2026-59582 | NA | N/A | In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calcul… | 2026-11-10 |
| CVE-2026-59583 | NA | N/A | In FormCredentials of SipAuHelper.cpp, there is a possible way to disclose authentication credentials in clear… | 2026-11-10 |
| CVE-2026-59585 | NA | N/A | In SetDisplayName of RegInfoContact.cpp, there is a possible denial of service due to a missing null check. Th… | 2026-11-10 |
| CVE-2026-59586 | NA | N/A | In multiple locations, there is a possible way to recover cryptographic keys and forge authentication tags due… | 2026-11-10 |
| CVE-2026-59587 | NA | N/A | In stpropnci_prop_st_build_set_custom_polling_cmd of stpropnci_prop_st.cc, there is a possible way to trigger … | 2026-11-10 |
| CVE-2026-59589 | NA | N/A | In s_av1_dec_metadata_scalability of av1_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer… | 2026-11-10 |
| CVE-2026-59593 | NA | N/A | In tile_info of av1_decoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This coul… | 2026-11-10 |
| CVE-2026-59594 | NA | N/A | In spm_alloc of encoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could le… | 2026-11-10 |
| CVE-2026-59595 | NA | N/A | In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mu… | 2026-11-10 |
| CVE-2026-59596 | NA | N/A | In multiple functions of mpu.c, there is a possible way to execute code from non-secure memory in the security… | 2026-11-10 |
| CVE-2026-59597 | NA | N/A | In bindDataService of DataServiceManager.java, there is a possible way to retain privileged tunnel management … | 2026-11-10 |
| CVE-2026-59598 | NA | N/A | In platform_rio_ncp_wdt_handler of edgetpu_rio.c, there is a possible Use After Free due to a use after free. … | 2026-11-10 |
| CVE-2026-59599 | NA | N/A | Android on supported Pixel devices before security patch level 2026-11-05 allows elevation of privilege in the… | 2026-11-10 |
| CVE-2026-59601 | NA | N/A | In CalculateSampleRate of cldma_alcedo.cc, there is a possible Heap Buffer Overflow due to a logic error in th… | 2026-11-10 |
| CVE-2026-59603 | NA | N/A | In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and pr… | 2026-11-10 |
| CVE-2026-59604 | NA | N/A | In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a… | 2026-11-10 |
| CVE-2026-59606 | NA | N/A | In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify global reset registers from non-sec… | 2026-11-10 |
| CVE-2026-59607 | NA | N/A | In TzPipelineInputExtractor of TzPipelineInputExtractor.cpp, there is a possible Logic check bypass due to a l… | 2026-11-10 |
| CVE-2026-59608 | NA | N/A | In tone_mapping_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. T… | 2026-11-10 |
| CVE-2026-59609 | NA | N/A | In fence_manager_extract_iif of fence_manager.c, there is a possible way to corrupt kernel memory via fence id… | 2026-11-10 |
| CVE-2026-59611 | NA | N/A | In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflo… | 2026-11-10 |
| CVE-2026-59612 | NA | N/A | In buffering_period of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. Thi… | 2026-11-10 |