Summary
Ein Angreifer kann mehrere Schwachstellen in Google Android Pixel ausnutzen, um sich erweiterte Berechtigungen zu verschaffen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen und vertrauliche Informationen offenzulegen.
Product
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 20
-
Critical 10.0
In DeviceId of DeviceId.java, there is a possible desync in persistence due to a missing bounds check. This could lead …
-
Critical 9.8
In MM_DATA_IND of cn_NrSmMsgHdlrFromMM.cpp, there is a possible EoP due to memory corruption. This could lead to remote…
-
Critical 9.8
In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. Thi…
-
Critical 9.8
In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. Thi…
-
Critical 9.8
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code exec…
-
Critical 9.8
In __mfc_handle_released_buf of mfc_core_isr.c, there is a possible out of bounds write due to a missing bounds check. …
-
Critical 9.8
In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code exec…
-
High 8.4
In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validati…
-
High 8.4
In gmc_ddr_handle_mba_mr_req of gmc_mba_ddr.c, there is a possible escalation of privileges due to a confused deputy. T…
-
High 8.4
In mfc_dec_dqbuf of mfc_dec_v4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This coul…
-
High 8.4
In oobconfig, there is a possible bypass of carrier restrictions due to a logic error. This could lead to local escalat…
-
High 8.4
In multiple places, there is a possible out of bounds write due to memory corruption. This could lead to remote code ex…
-
High 8.4
In EfwApTransport::ProcessRxRing of efw_ap_transport.cc, there is a possible out of bounds write due to a missing bound…
-
High 7.5
In dhd_tcpdata_info_get of dhd_ip.c, there is a possible Denial of Service due to a precondition check failure. This co…
-
High 7.4
In vpu_open_inst of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local e…
-
Medium 6.8
In usim_SendMCCMNCIndMsg of usim_Registration.c, there is a possible out of bounds write due to memory corruption. This…
-
Medium 5.1
In static long dev_send of tipc_dev_ql, there is a possible out of bounds read due to an incorrect bounds check. This c…
-
Medium 4.0
The register protection of the PowerVR GPU is incorrectly configured. This could lead to local information disclosure w…
-
Low 2.9
In VPU, there is a possible use-after-free read due to a race condition. This could lead to local information disclosur…
-
Low 2.1
In Trusted Execution Environment, there is a possible key leak due to side channel information disclosure. This could l…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-10844, EUVD-2026-10857, EUVD-2026-10856, EUVD-2026-10855, EUVD-2026-10854, EUVD-2026-10853, EUVD-2026-10851, EUVD-2026-10850, EUVD-2026-10849, EUVD-2026-10848, EUVD-2026-10847, EUVD-2026-10846, EUVD-2026-10845, EUVD-2026-10842, EUVD-2026-10841, EUVD-2026-10840, EUVD-2026-10839, EUVD-2026-10838, EUVD-2026-10837, EUVD-2026-10836, EUVD-2026-10834, EUVD-2026-10833, EUVD-2026-10832, EUVD-2026-10831, EUVD-2026-10830, EUVD-2025-208533, EUVD-2025-208532, EUVD-2025-208517, EUVD-2025-208516, EUVD-2026-10835, EUVD-2026-10852, EUVD-2026-10843
-
#1
Initiale Fassung
References
-
Pixel Update Bulletin—March 2026 vom 2026-03-03
https://source.android.com/docs/security/bulletin/pixel/2026/2026-03-01