DeutschShown in its original language — a full translation is planned for a future version.
Pixel Patchday Juni 2026: Mehrere Schwachstellen
view advisory published 2026-06-16
Ein Angreifer kann mehrere Schwachstellen in Google Android Pixel ausnutzen, um sich erweiterte Berechtigungen zu verschaffen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen und vertrauliche Informationen offenzulegen.
01
describes (41)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-24077US | — | — | ||
Information Disclosure when processing wireless network channel switch information with improperly formatted length fields. | ||||
| CVE-2026-0165US | — | — | ||
In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure with no addi… | ||||
| CVE-2026-0164US | — | — | ||
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User inter… | ||||
| CVE-2026-0162US | — | — | ||
In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type confusion. This could lead to remote code execution with no additional execution privilege… | ||||
| CVE-2026-0161US | — | — | ||
In numberOfReportBlocks of RtpSession.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege with no additional… | ||||
| CVE-2026-0160US | — | — | ||
In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code exe… | ||||
| CVE-2026-0158US | —OT elevated | — | ||
In Camera, there is a possible unauthorized way to access photos due to a missing permission check. This could lead to local information disclosure with no additional execution pri… | ||||
| CVE-2026-0157US | — | — | ||
In RtcpHeader::decodeRtcpHeader, there is a possible OOB read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privilege… | ||||
| CVE-2026-0156US | high7.5 | — | ||
In checkSsrcCollisionOnRcv of RtpSession.cpp, there is a possible memory safety issue due to a missing null check. This could lead to remote denial of service with no additional ex… | ||||
| CVE-2026-0155US | — | — | ||
In ImsMediaBitReader::ReadByteBuffer, there is a possible OOB read due to a missing bounds check. This could lead to remote information disclosure with no additional execution priv… | ||||
| CVE-2026-0154US | — | — | ||
In Modem, there is a possible way to trigger a modem crash during a SIP REFER request due to memory corruption. This could lead to remote code execution with no additional executio… | ||||
| CVE-2026-0153US | — | — | ||
In Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional exe… | ||||
| CVE-2026-0152US | — | — | ||
In OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to system call to maliciously expand the VMA out of bounds due to a logic error in the code. This… | ||||
| CVE-2026-0151US | — | — | ||
In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privile… | ||||
| CVE-2026-0150US | — | — | ||
In ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with root… | ||||
| CVE-2026-0149US | — | — | ||
In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges need… | ||||
| CVE-2026-0148US | — | — | ||
In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additi… | ||||
| CVE-2026-0147US | — | — | ||
In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution wi… | ||||
| CVE-2026-0146US | — | — | ||
In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no… | ||||
| CVE-2026-0145US | —OT elevated | — | ||
In keymint, there is a possible Permission Bypass due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed.… | ||||
showing 20 of 41
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan