CVEs published in November 2026
8,018 vulnerabilities, 689 critical, 12 exploited.
- google androidIn has_booted_successfully of sys_state_setup_otp_ta.c, there is a possible way to trigger a...6.2 Medium
- google androidIn cpb_cnt of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow....7.8 High
- google androidIn RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger memory...7.5 High
- google androidIn s_inter_rps_pred of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer...7.8 High
- google androidIn check_constraint_monotonicity of lib.rs, there is a possible way to downgrade stored security...8.4 High
- google androidIn s_copy_host_apb_param of multiple files, there is a possible way to trigger an out of bounds...4.0 Medium
- google androidIn SendInfo of UssiController.cpp, there is a possible way to corrupt memory via a dangling...9.8 Critical
- google androidIn GetTwiddledMiptreeSparsePageMap of texmgmt.c, there is a possible way to trigger an out of...9.8 Critical
- google androidIn multiple locations, there is a possible way to trigger an out of bounds read via direct memory...4.0 Medium
- google androidIn CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range...7.5 High
- google androidIn getCodecQp of GC2AV1Enc.cpp, there is a possible way to trigger an out of bounds read during...2.3 Low
- google androidIn smfc_v4l2_s_selection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of...4.0 Medium
- google androidIn prev_run_vcore of hwcodec_firmware, there is a possible Non-Heap Buffer Overflow due to a...7.8 High
- google androidIn multiple functions of oem_svc_setup.c, there is a possible way to dump secure cache lines into...No score
- google androidIn multiple locations, there is a possible way to trigger an out of bounds read and temporary...7.5 High
- google androidIn buffering_period of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer...7.8 High
- google androidIn multiple locations, there is a possible way to trigger a temporary denial of service via an...7.5 High
- google androidIn fence_manager_extract_iif of fence_manager.c, there is a possible way to corrupt kernel memory...8.4 High
- google androidIn tone_mapping_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a...7.8 High
- google androidIn TzPipelineInputExtractor of TzPipelineInputExtractor.cpp, there is a possible Logic check...7.8 High
- google androidIn multiple functions of sswrp_cpm.dtsi, there is a possible way to modify global reset registers...6.7 Medium
- google androidIn multiple locations, there is a possible way to trigger an unbounded loop in video decoder...6.2 Medium
- google androidIn RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a...7.5 High
- google androidIn CalculateSampleRate of cldma_alcedo.cc, there is a possible Heap Buffer Overflow due to a...5.3 Medium
- google androidIn platform_rio_ncp_wdt_handler of edgetpu_rio.c, there is a possible Use After Free due to a use...7.8 High
- google androidIn bindDataService of DataServiceManager.java, there is a possible way to retain privileged...8.4 High
- google androidIn multiple functions of mpu.c, there is a possible way to execute code from non-secure memory in...8.4 High
- google androidIn DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via...7.5 High
- google androidIn spm_alloc of encoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow....7.8 High
- google androidIn tile_info of av1_decoder, there is a possible Heap Buffer Overflow due to a heap buffer...7.8 High
- google androidIn s_av1_dec_metadata_scalability of av1_decoder, there is a possible Non-Heap Buffer Overflow...7.8 High
- google androidIn stpropnci_prop_st_build_set_custom_polling_cmd of stpropnci_prop_st.cc, there is a possible...8.4 High
- google androidIn multiple locations, there is a possible way to recover cryptographic keys and forge...4.0 Medium
- google androidIn SetDisplayName of RegInfoContact.cpp, there is a possible denial of service due to a missing...7.5 High
- google androidIn FormCredentials of SipAuHelper.cpp, there is a possible way to disclose authentication...2.7 Low
- google androidIn StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during...7.5 High
- google androidIn trusty_context_switch of services/spd/trusty/trusty.c, there is a possible Secure world...3.3 Low
- google androidIn getUserDataPayload of GC2UserData.cpp, there is a possible Logic error due to a logic error in...4.0 Medium
- google androidIn s_check_valid_tile_param_custom_tile of av1_encoder, there is a possible Non-Heap Buffer...7.8 High
- google androidIn stpropnci_cb_observe_mode_suspend of stpropnci_prop_android.cc, there is a possible way to...6.2 Medium
- google androidIn notifyPollingLoopFrames of hal_fwlog.cc, there is a possible way to trigger an out of bounds...2.4 Low
- google androidIn max_num_ref_frames of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a...7.8 High
- google androidIn rb_cpu_init of trace.c, there is a possible out-of-bounds read due to an incorrect bounds...5.5 Medium
- google androidIn multiple locations, there is a possible denial of service due to a logic error in the code....6.2 Medium
- google androidIn __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible out-of-bounds write due...6.2 Medium
- google androidIn multiple locations, there is a possible memory corruption due to a race condition. This could...7.4 High
- google androidIn multiple locations, there is a possible use-after-free due to a logic error in the code. This...8.4 High
- google androidIn arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due...7.4 High
- google androidIn __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race...7.4 High
- google androidIn InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due...6.2 Medium
- Show moreLoading…