Skip to content
OpenAdvisories

Vendor

Google

9,110 known vulnerabilities.

9,110 results · Feed

  • Unscored —

    Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary …

  • Unscored —

    Use after free in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside…

  • Unscored —

    Use after free in ServiceWorker in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary …

  • Unscored —

    In acquireMemory of bt_bqr_offload.cc, there is a possible way to trigger an out of bounds write via a buffer size unde…

  • Medium 6.7

    In multiple locations, there is a possible way to modify coprocessor instruction and data memory from non-secure softwa…

  • Unscored —

    In multiple locations, there is a possible way to trigger an out of bounds write in the shared memory tracking bitmap d…

  • Unscored —

    In slice_header of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead…

  • Unscored —

    In knee_function_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This coul…

  • Unscored —

    In StNfc_hal_write of hal_st21nfc.cc, there is a possible way to trigger an out of bounds write into global memory due …

  • Unscored —

    In multiple functions of face_status.h, there is a possible way to modify verified biometric enrollment data in shared …

  • Unscored —

    In sub_layer_hrd_parameters of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. Thi…

  • Unscored —

    In userdata_report of hwcodec_firmware, there is a possible Logic error due to a logic error in the code. This could le…

  • Unscored —

    In cpb_cnt of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to lo…

  • Unscored —

    In has_booted_successfully of sys_state_setup_otp_ta.c, there is a possible way to trigger a permanent denial of servic…

  • High 7.5

    In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via an undr…

  • Unscored —

    In s_inter_rps_pred of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could …

  • Unscored —

    In check_constraint_monotonicity of lib.rs, there is a possible way to downgrade stored security policies and bypass ro…

  • Unscored —

    In s_copy_host_apb_param of multiple files, there is a possible way to trigger an out of bounds read in the video decod…

  • Unscored —

    In SendInfo of UssiController.cpp, there is a possible way to corrupt memory via a dangling connection listener pointer…

  • Unscored —

    In GetTwiddledMiptreeSparsePageMap of texmgmt.c, there is a possible way to trigger an out of bounds write due to a log…

  • Unscored —

    In multiple locations, there is a possible way to trigger an out of bounds read via direct memory access in video decod…

  • High 7.5

    In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process…

  • Unscored —

    In getCodecQp of GC2AV1Enc.cpp, there is a possible way to trigger an out of bounds read during quantization table look…

  • Unscored —

    In smfc_v4l2_s_selection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent …

  • Unscored —

    In prev_run_vcore of hwcodec_firmware, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This coul…

  • Unscored —

    In multiple functions of oem_svc_setup.c, there is a possible way to dump secure cache lines into non-secure memory on …

  • High 7.5

    In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to …

  • Unscored —

    In buffering_period of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could l…

  • High 7.5

    In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap du…

  • Unscored —

    In fence_manager_extract_iif of fence_manager.c, there is a possible way to corrupt kernel memory via fence identifier …

  • Unscored —

    In tone_mapping_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could…

  • Unscored —

    In TzPipelineInputExtractor of TzPipelineInputExtractor.cpp, there is a possible Logic check bypass due to a logic erro…

  • Unscored —

    In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify global reset registers from non-secure softw…

  • Unscored —

    In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic er…

  • High 7.5

    In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abo…

  • Unscored —

    In CalculateSampleRate of cldma_alcedo.cc, there is a possible Heap Buffer Overflow due to a logic error in the code. T…

  • Unscored —

    Android on supported Pixel devices before security patch level 2026-11-05 allows elevation of privilege in the hypervis…

  • Unscored —

    In platform_rio_ncp_wdt_handler of edgetpu_rio.c, there is a possible Use After Free due to a use after free. This coul…

  • Unscored —

    In bindDataService of DataServiceManager.java, there is a possible way to retain privileged tunnel management permissio…

  • Unscored —

    In multiple functions of mpu.c, there is a possible way to execute code from non-secure memory in the security coproces…