Skip to contentGoogle Android vulnerabilities
- google androidIn numberOfReportBlocks of RtpSession.cpp, there is a possible out of bounds write due to an...CVE-2026-0161Fix available8.8 High
- google androidIn TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible...CVE-2026-0160Fix available8.8 High
- google androidIn Camera, there is a possible unauthorized way to access photos due to a missing permission...CVE-2026-0158Fix available4.0 Medium
- google androidIn RtcpHeader::decodeRtcpHeader, there is a possible OOB read due to a missing bounds check. This...CVE-2026-0157Fix available4.3 Medium
- google androidIn checkSsrcCollisionOnRcv of RtpSession.cpp, there is a possible memory safety issue due to a...CVE-2026-0156Fix available7.5 High
- google androidIn ImsMediaBitReader::ReadByteBuffer, there is a possible OOB read due to a missing bounds check....CVE-2026-0155Fix available5.3 Medium
- google androidIn Modem, there is a possible way to trigger a modem crash during a SIP REFER request due to...CVE-2026-0154Fix available8.8 High
- google androidIn Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incorrect...CVE-2026-0153Fix available7.8 High
- google androidIn OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to system call...CVE-2026-0152Fix available7.8 High
- google androidIn IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer...CVE-2026-0151Fix available8.8 High
- google androidIn ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due...CVE-2026-0150Fix available7.8 High
- google androidIn RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow....CVE-2026-0149Fix available8.8 High
- google androidIn multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write...CVE-2026-0148Fix available8.8 High
- google androidIn __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out of...CVE-2026-0147Fix available8.8 High
- google androidIn mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds...CVE-2026-0146Fix available8.8 High
- google androidIn keymint, there is a possible Permission Bypass due to a logic error in the code. This could...CVE-2026-0145Fix available4.0 Medium
- google androidIn writeAocCommand of AocAudioCodec.cpp, there is a possible memory safety issue due to a missing...CVE-2026-0144Fix available7.5 High
- google androidIn lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to...CVE-2026-0143Fix available7.8 High
- google androidIn iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input...CVE-2026-0142Fix available4.0 Medium
- google androidIn decodeAppPacket of RtcpAppPacket.cpp, there is a possible OOB read due to a missing bounds...CVE-2026-0141Fix available5.3 Medium
- google androidIn RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow....CVE-2026-0140Fix available4.3 Medium
- google androidIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...CVE-2026-0139Fix available8.8 High
- google androidIn lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to...CVE-2026-0138Fix available7.8 High
- google androidIn edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of...CVE-2026-0137Fix available7.8 High
- google androidIn Modem, there is a possible out of bounds read due to a missing bounds check. This could lead...CVE-2026-0136Fix available7.5 High
- google androidIn Modem, there is a possible out of bounds read due to a missing bounds check. This could lead...CVE-2026-0135Fix available7.8 High
- google androidIn PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory...CVE-2026-0134Fix available4.0 Medium
- google androidIn smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime...CVE-2026-0133Fix available7.8 High
- google androidIn Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead...CVE-2026-0132Fix available8.8 High
- google androidIn RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow....CVE-2026-0131Fix available7.3 High
- google androidIn RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer...CVE-2026-0130Fix available4.3 Medium
- google androidIn RtcpByePacket::decodeByePacket, there is a possible due to a missing bounds check. This could...CVE-2026-0129Fix available4.3 Medium
- google androidIn RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer...CVE-2026-0128Fix available6.5 Medium
- google androidIn NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible out-of...CVE-2026-0127Fix available6.5 Medium
- google androidIn WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could...CVE-2026-0126Fix available9.8 Critical
- google androidIn multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition....CVE-2026-0125Fix available7.0 High
- google androidIn Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow....CVE-2026-0100Fix available7.8 High
- google androidIn onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from...CVE-2026-0099Fix available7.8 High
- google androidIn getCallingPackageName of Shared.java, there is a possible way to bypass activity start...CVE-2026-0098Fix available7.8 High
- google androidIn multiple locations, there is a possible way to bypass user interaction when pairing an LE...CVE-2026-0097Fix available8.0 High
- google androidIn getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into...CVE-2026-0096Fix available7.8 High
- google androidIn l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption...CVE-2026-0095Fix available8.0 High
- google androidIn multiple locations, there is a possible misleading UI due to obfuscation. This could lead to...CVE-2026-0093Fix available7.8 High
- google androidIn multiple locations, there is a possible way to execute code in the launcher process due to an...CVE-2026-0091Public exploitFix available7.8 High
- google androidIn multiple functions of PackageInstallerService.java, there is a possible way to install...CVE-2026-0089Fix available7.8 High
- google androidIn getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security...CVE-2026-0088Fix available7.8 High
- google androidIn approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to...CVE-2026-0087Fix available7.8 High
- google androidIn onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data...CVE-2026-0086Fix available6.8 Medium
- google androidIn applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large...CVE-2026-0085Fix available5.5 Medium
- google androidIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due...CVE-2026-0080Fix available6.5 Medium
- Show moreLoading…