Vulnérabilité medium détectée - CVE-2026-25270
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
CVE-2026-25270
Powered by o2Cloud
Suivi automatisé des vulnérabilités CVE
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
CVE-2026-25270
In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no ad...
CVE-2026-55280
In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of...
CVE-2026-55286
In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with...
CVE-2026-58815
In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This...
CVE-2026-58834
In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with n...
CVE-2026-58835
In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalat...
CVE-2026-49937
In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This could lead to a remote denial of s...
CVE-2026-55265
In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could lead to local escalation of privi...
CVE-2026-55266
In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalat...
CVE-2026-55269
In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privileg...
CVE-2026-55270
In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized poin...
CVE-2026-49933