Skip to content
OpenAdvisories
High WID-SEC-2026-3786 6 CVEs

Pixel Patchday Oktober 2026: Mehrere Schwachstellen

Published Oct 6, 2026 · Updated Oct 6, 2026 · de-DE

Vendor: Google Product: Android Platform: Android

Summary

Ein Angreifer kann mehrere Schwachstellen in Google Android Pixel ausnutzen, um seine Privilegien zu erhöhen, und um Informationen offenzulegen.

Product

Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Vulnerabilities 6

  • Critical 9.8
    CVE-2026-55330

    In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the …

    Google Android Android
  • High 7.0
    CVE-2026-56906

    In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalat…

    Google Android Android
  • Medium 6.8
    CVE-2026-56936

    In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. Thi…

    Google Android Android
  • Medium 6.7
    CVE-2026-56952

    In platform_msg_handler_init of default_msg_handlers.c, there is a possible permission bypass due to a missing permissi…

    Google Android Android
  • Medium 4.4
    CVE-2026-0198

    In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead…

    Google Android Android
  • Medium 4.4
    CVE-2026-55307

    In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code.…

    Google Android Android

Revision history

  1. #1

    Initiale Fassung

References