CVE.report
CVE.report is the most up-to-date database of common vulnerabilities and exposures. Information is pulled in from several sources and processed in to a mobile friendly, easy to use page. Use the site to quickly check for vulnerabilities in products such as operating systems, applications, hardware, networks, databases, browsers, e-mail clients and more.
CVEs provide a unique and common naming scheme for publicly known cyber security vulnerabilities in order to quickly identify and share these vulnerabilities. You can use the search below to look for vulnerabilities based on product, vendor, or common tags
The form you will see after following this link allows you to fill out the various variables in the CVSS scoring system and receive the corresponding score. The description of each of the variables is also included for additional information.
cve.report now provides a free read-only JSON API for CVE details. Each record combines the CVE Program JSON record, NVD enrichment, KEV, and EPSS when available.
Recent CVEs
| CVE | Description | Updated |
|---|---|---|
| CVE-2026-95405 json | In acquireMemory of bt_bqr_offload.cc, there is a possible way to trigger an out of bounds write via a buffer size underflow ... | |
| CVE-2026-95404 json | In multiple locations, there is a possible way to modify coprocessor instruction and data memory from non-secure software due... | |
| CVE-2026-95403 json | In multiple locations, there is a possible way to trigger an out of bounds write in the shared memory tracking bitmap due to ... | |
| CVE-2026-95402 json | In slice_header of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to lo... | |
| CVE-2026-95401 json | In knee_function_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead... | |
| CVE-2026-95400 json | In StNfc_hal_write of hal_st21nfc.cc, there is a possible way to trigger an out of bounds write into global memory due to an ... | |
| CVE-2026-95399 json | In multiple functions of face_status.h, there is a possible way to modify verified biometric enrollment data in shared memory... | |
| CVE-2026-95397 json | In sub_layer_hrd_parameters of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This coul... | |
| CVE-2026-59637 json | In userdata_report of hwcodec_firmware, there is a possible Logic error due to a logic error in the code. This could lead to ... | |
| CVE-2026-59636 json | In has_booted_successfully of sys_state_setup_otp_ta.c, there is a possible way to trigger a permanent denial of service via ... | |
| CVE-2026-59635 json | In cpb_cnt of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local es... | |
| CVE-2026-59632 json | In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via an undrained ... | |
| CVE-2026-59631 json | In s_inter_rps_pred of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead t... | |
| CVE-2026-59630 json | In check_constraint_monotonicity of lib.rs, there is a possible way to downgrade stored security policies and bypass rollback... | |
| CVE-2026-59628 json | In s_copy_host_apb_param of multiple files, there is a possible way to trigger an out of bounds read in the video decoder com... | |
| CVE-2026-59626 json | In SendInfo of UssiController.cpp, there is a possible way to corrupt memory via a dangling connection listener pointer due t... | |
| CVE-2026-59625 json | In GetTwiddledMiptreeSparsePageMap of texmgmt.c, there is a possible way to trigger an out of bounds write due to a logic err... | |
| CVE-2026-59624 json | In multiple locations, there is a possible way to trigger an out of bounds read via direct memory access in video decoder fir... | |
| CVE-2026-59623 json | In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process crash... | |
| CVE-2026-59619 json | In getCodecQp of GC2AV1Enc.cpp, there is a possible way to trigger an out of bounds read during quantization table lookup due... | |
| CVE-2026-59618 json | In smfc_v4l2_s_selection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent shared... | |
| CVE-2026-59616 json | In prev_run_vcore of hwcodec_firmware, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead... | |
| CVE-2026-59614 json | In multiple functions of oem_svc_setup.c, there is a possible way to dump secure cache lines into non-secure memory on warm r... | |
| CVE-2026-59613 json | In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to improp... | |
| CVE-2026-59612 json | In buffering_period of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to... | |
| CVE-2026-59611 json | In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap due to i... | |
| CVE-2026-59609 json | In fence_manager_extract_iif of fence_manager.c, there is a possible way to corrupt kernel memory via fence identifier reuse ... | |
| CVE-2026-59608 json | In tone_mapping_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead ... | |
| CVE-2026-59607 json | In TzPipelineInputExtractor of TzPipelineInputExtractor.cpp, there is a possible Logic check bypass due to a logic error in t... | |
| CVE-2026-59606 json | In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify global reset registers from non-secure software du... | |
| CVE-2026-59604 json | In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic error. T... | |
| CVE-2026-59603 json | In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abort dur... | |
| CVE-2026-59601 json | In CalculateSampleRate of cldma_alcedo.cc, there is a possible Heap Buffer Overflow due to a logic error in the code. This co... | |
| CVE-2026-59599 json | Android on supported Pixel devices before security patch level 2026-11-05 allows elevation of privilege in the hypervisor sub... | |
| CVE-2026-59598 json | In platform_rio_ncp_wdt_handler of edgetpu_rio.c, there is a possible Use After Free due to a use after free. This could lead... | |
| CVE-2026-59597 json | In bindDataService of DataServiceManager.java, there is a possible way to retain privileged tunnel management permissions acr... | |
| CVE-2026-59596 json | In multiple functions of mpu.c, there is a possible way to execute code from non-secure memory in the security coprocessor du... | |
| CVE-2026-59595 json | In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mutual recursion ... | |
| CVE-2026-59594 json | In spm_alloc of encoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could lead to local esc... | |
| CVE-2026-59593 json | In tile_info of av1_decoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could lead to local... | |
| CVE-2026-59589 json | In s_av1_dec_metadata_scalability of av1_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This... | |
| CVE-2026-59587 json | In stpropnci_prop_st_build_set_custom_polling_cmd of stpropnci_prop_st.cc, there is a possible way to trigger an out of bound... | |
| CVE-2026-59586 json | In multiple locations, there is a possible way to recover cryptographic keys and forge authentication tags due to improperly ... | |
| CVE-2026-59585 json | In SetDisplayName of RegInfoContact.cpp, there is a possible denial of service due to a missing null check. This could lead t... | |
| CVE-2026-59583 json | In FormCredentials of SipAuHelper.cpp, there is a possible way to disclose authentication credentials in cleartext via a sche... | |
| CVE-2026-59582 json | In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due to an... | |
| CVE-2026-59580 json | In trusty_context_switch of services/spd/trusty/trusty.c, there is a possible Secure world register state leak due to a logic... | |
| CVE-2026-59579 json | In getUserDataPayload of GC2UserData.cpp, there is a possible Logic error due to a logic error in the code. This could lead t... | |
| CVE-2026-59578 json | In s_check_valid_tile_param_custom_tile of av1_encoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow... | |
| CVE-2026-59575 json | In stpropnci_cb_observe_mode_suspend of stpropnci_prop_android.cc, there is a possible way to trigger an out of bounds write ... | |
| CVE-2026-59574 json | In notifyPollingLoopFrames of hal_fwlog.cc, there is a possible way to trigger an out of bounds read and write when formattin... | |
| CVE-2026-59573 json | In max_num_ref_frames of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead ... | |
| CVE-2026-58813 json | In mmap of mman.c, there is a possible way to trigger an out of bounds read and write via mapping size truncation due to an i... | |
| CVE-2026-58812 json | In decode of fw_vp9_dec_pic.c, there is a possible Logic error due to a logic error in the code. This could lead to local inf... | |
| CVE-2026-58811 json | In smmu_get_mair_idx of smmu.c, there is a possible way to apply incorrect memory attributes to direct memory access mappings... | |
| CVE-2026-58810 json | In multiple functions of simd_ctx.c, there is a possible way to disclose secure vector predicate and fault registers to non-s... | |
| CVE-2026-58809 json | In smmu_domain_config_s1 of arm-smmu-v3.c, there is a possible OOB Write due to a missing bounds check. This could lead to lo... | |
| CVE-2026-58808 json | In multiple locations, there is a possible way to dump secure cache lines into non-secure memory on warm reset due to a missi... | |
| CVE-2026-58807 json | In Retry_MtsMessageInPending of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via leaked mes... | |
| CVE-2026-58806 json | In get_sswrp_state of cpm_mbox_srv/main.c, there is a possible Logic error due to a logic error in the code. This could lead ... | |
| CVE-2026-58805 json | In multiple locations, there is a possible way to zero arbitrary secure memory via unvalidated image body addresses due to a ... | |
| CVE-2026-58804 json | In ExecuteGraphCommand of multiple files, there is a possible way to trigger an out of bounds write via an oversized scratch ... | |
| CVE-2026-58803 json | In bytes_are_equal of lib.rs, there is a possible way to recover authentication keys due to side channel information disclosu... | |
| CVE-2026-58801 json | In smmu_domain_config_s1 of arm-smmu-v3.c, there is a possible way to access stale stream table entries across reassigned str... | |
| CVE-2026-58800 json | In IMG_vkCreateImageView of image_view.c, there is a possible way to trigger a use after free due to memory corruption. This ... | |
| CVE-2026-58799 json | In multiple functions of rmmi_utility.c, there is a possible way to trigger an out of bounds write due to a missing bounds ch... | |
| CVE-2026-58798 json | In multiple functions of cn_Tai.cpp, there is a possible way to trigger an out of bounds write due to memory corruption. This... | |
| CVE-2026-58797 json | In register_dump_dpa of sswrp_pcie.c, there is a possible Logic error due to a logic error in the code. This could lead to lo... | |
| CVE-2026-58796 json | In multiple functions of AndroidManifest.xml, there is a possible way to trigger unauthorized firmware updates via exported b... | |
| CVE-2026-58791 json | In pic_timing of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to loca... | |
| CVE-2026-58790 json | In CMD_ENC_SET_PARAM of encoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to lo... | |
| CVE-2026-58789 json | In s_gen_tile_param of multiple files, there is a possible way to trigger an out of bounds write in tile parameter arrays due... | |
| CVE-2026-58788 json | In stpropnci_process_std of stpropnci_std.cc, there is a possible way to trigger an out of bounds write into global state due... | |
| CVE-2026-58787 json | In chppWifiRangingEventNotification of clients/wifi.c, there is a possible Heap Buffer Overflow due to a logic error in the c... | |
| CVE-2026-58786 json | In cnm_memset of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to loca... | |
| CVE-2026-58785 json | In update_user_consent of main.rs, there is a possible elevation of privilege due to uninitialized data. This could lead to l... | |
| CVE-2026-58783 json | In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to local denia... | |
| CVE-2026-58782 json | In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to local denia... | |
| CVE-2026-58781 json | In HostLinkBase::chreIpiHandler of host_link.cc, there is a possible out-of-bounds write due to a missing bounds check. This ... | |
| CVE-2026-58780 json | In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote es... | |
| CVE-2026-58779 json | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escal... | |
| CVE-2026-58778 json | In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of pri... | |
| CVE-2026-58769 json | In multiple locations, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local informa... | |
| CVE-2026-58762 json | In ac_get_prot_config of plat_trusty.c, there is a possible memory corruption due to improper input validation. This could le... | |
| CVE-2026-58757 json | In mfc_alloc_enc_roi_buffer of mfc_buf.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could l... | |
| CVE-2026-58752 json | In aoc_unlocked_ioctl_handle_ion_fd of aoc.c, there is a possible type confusion due to improper input validation. This could... | |
| CVE-2026-58740 json | In BitmapImageBuffer of bitmap_image_buffer.h, there is a possible out-of-bounds write due to an integer overflow. This could... | |
| CVE-2026-58736 json | In NotifySipResponse of SessionEx.cpp, there is a possible way to corrupt memory via a dangling connection pointer in the pen... | |
| CVE-2026-58729 json | In multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation... | |
| CVE-2026-58722 json | In chppProcessDiscoverAllResponse of system/chre/chpp/clients/discovery.c, there is a possible Heap Buffer Overflow due to a ... | |
| CVE-2026-58705 json | In handleEvent of gscan.cpp, there is a possible way to trigger an out of bounds write on the heap due to a missing bounds ch... | |
| CVE-2026-58702 json | In createIntent of TimerAgent.java, there is a possible permission bypass due to a confused deputy. This could lead to local ... | |
| CVE-2026-58697 json | In codec3p_secure of codec3p_secure, there is a possible Heap Buffer Overflow due to a missing bounds check. This could lead ... | |
| CVE-2026-58696 json | In multiple locations, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escala... | |
| CVE-2026-58690 json | In multiple functions of bitmap_image_buffer.h, there is a possible way to trigger an out of bounds write on the trusted exec... | |
| CVE-2026-58684 json | In smmu_config_l3tt of smmu.c, there is a possible permission bypass due to a logic error in the code. This could lead to loc... | |
| CVE-2026-58681 json | In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code exe... | |
| CVE-2026-58680 json | In cpm_mbox_power_ctrl_sswrp of cpm_mbox.c, there is a possible permission bypass due to a precondition check failure. This c... | |
| CVE-2026-58677 json | In get_secure_boot_mode of auth.rs, there is a possible way to bypass root signature verification via fault injection due to ... | |
| CVE-2026-57048 json | In authenticate of verify_image, there is a possible Signature verification logic bypass due to a logic error in the code. Th... |