Out-of-bounds write via integer overflow in Android NFC stack enables RCE
published Sep 8, 2026 Google / Android Android OS NFC stack (rw_t3t.cc, Type 3 tag handling)
Heap Buffer Overflow in Android NFC MIFARE Classic Reader Enables RCE
published Sep 8, 2026 Google (Android) Android NFC stack, MIFARE Classic tag handling (rw_mfc.cc)
Remote DoS/RCE in Android image resolver via DNG rendering check bypass
published Sep 8, 2026 Google / Android (AOSP) Android platform image handling component (LocalImageResolver.java, DNG rendering)
Heap Buffer Overflow in Android Wi-Fi Direct (P2P) Provisioning Discovery Enables Nearby RCE
published Sep 8, 2026 Google / Android (CNA: security@android.com) Android OS Wi-Fi P2P (Wi-Fi Direct) stack, p2p_process_prov_disc_bootstrap_req in p2p_pd.c
Use-after-free local privilege escalation in Android (Linux kernel KVM IOMMU)
published Sep 8, 2026 Google (Android) Android OS (Linux kernel, KVM IOMMU — kvm_iommu_map_sg in iommu.c)
Out-of-Bounds Write in Android NFC (MIFARE Classic) Allows Local Privilege Escalation
published Sep 8, 2026 Google / Android (CNA: security@android.com) Android OS — NFC subsystem (rw_mfc.cc, rw_mfc_handle_read_op)
Android OS Integer Overflow Enables Local Privilege Escalation
published Sep 8, 2026 Google (Android) Android OS
Local Privilege Escalation via Heap Overflow in Android fsck
published Sep 8, 2026 Google (Android) Android (fsck component, read_boot_region in fsck.c)
Improper Encryption Key Validation Enables Local Privilege Escalation in Android
published Sep 8, 2026 Google (Android) Android OS (multiple components; assigned by security@android.com)
Remote Persistent Denial-of-Service in Android parsePartHeaders (CVE-2026-55256)
published Sep 8, 2026 Google (Android / AOSP; CNA: security@android.com) Android - message part header parsing (parsePartHeaders, multiple files)