cvelistv5 - cve-2026-20434

CVE-2026-20434 (GCVE-0-2026-20434)

Vulnerability from cvelistv5

Published

2026-03-02 08:39

Modified

2026-03-30 13:05

Severity ?

7.5 (High) - CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-787 - Out-of-bounds Write

Summary

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY00782946; Issue ID: MSV-4135.

References

URL

Tags

https://corp.mediatek.com/product-security-bulletin/March-2026

Impacted products

	Vendor	Product	Version
	MediaTek, Inc.	MediaTek chipset	Version: MT2735 Version: MT2737 Version: MT6739 Version: MT6761 Version: MT6762 Version: MT6762D Version: MT6762M Version: MT6763 Version: MT6765 Version: MT6765T Version: MT6767 Version: MT6768 Version: MT6769 Version: MT6769K Version: MT6769S Version: MT6769T Version: MT6769Z Version: MT6771 Version: MT6779 Version: MT6781 Version: MT6783 Version: MT6785 Version: MT6785T Version: MT6785U Version: MT6789 Version: MT6833 Version: MT6833P Version: MT6835 Version: MT6835T Version: MT6853 Version: MT6853T Version: MT6855 Version: MT6855T Version: MT6873 Version: MT6875 Version: MT6875T Version: MT6877 Version: MT6877T Version: MT6877TT Version: MT6878 Version: MT6878M Version: MT6879 Version: MT6880 Version: MT6883 Version: MT6885 Version: MT6886 Version: MT6889 Version: MT6890 Version: MT6891 Version: MT6893 Version: MT6895 Version: MT6895TT Version: MT6896 Version: MT6897 Version: MT6899 Version: MT6980 Version: MT6980D Version: MT6983 Version: MT6983T Version: MT6985 Version: MT6985T Version: MT6989 Version: MT6989T Version: MT6990 Version: MT6991 Version: MT8666 Version: MT8667 Version: MT8668 Version: MT8673 Version: MT8675 Version: MT8676 Version: MT8678 Version: MT8755 Version: MT8765 Version: MT8766 Version: MT8766R Version: MT8768 Version: MT8771 Version: MT8781 Version: MT8786 Version: MT8788 Version: MT8788E Version: MT8789 Version: MT8791 Version: MT8791T Version: MT8792 Version: MT8793 Version: MT8795T Version: MT8797 Version: MT8798 Version: MT8863 Version: MT8873 Version: MT8883 Version: MT8893

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "ADJACENT_NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-20434",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-02T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-03T04:55:58.368Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MediaTek chipset",
          "vendor": "MediaTek, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "MT2735"
            },
            {
              "status": "affected",
              "version": "MT2737"
            },
            {
              "status": "affected",
              "version": "MT6739"
            },
            {
              "status": "affected",
              "version": "MT6761"
            },
            {
              "status": "affected",
              "version": "MT6762"
            },
            {
              "status": "affected",
              "version": "MT6762D"
            },
            {
              "status": "affected",
              "version": "MT6762M"
            },
            {
              "status": "affected",
              "version": "MT6763"
            },
            {
              "status": "affected",
              "version": "MT6765"
            },
            {
              "status": "affected",
              "version": "MT6765T"
            },
            {
              "status": "affected",
              "version": "MT6767"
            },
            {
              "status": "affected",
              "version": "MT6768"
            },
            {
              "status": "affected",
              "version": "MT6769"
            },
            {
              "status": "affected",
              "version": "MT6769K"
            },
            {
              "status": "affected",
              "version": "MT6769S"
            },
            {
              "status": "affected",
              "version": "MT6769T"
            },
            {
              "status": "affected",
              "version": "MT6769Z"
            },
            {
              "status": "affected",
              "version": "MT6771"
            },
            {
              "status": "affected",
              "version": "MT6779"
            },
            {
              "status": "affected",
              "version": "MT6781"
            },
            {
              "status": "affected",
              "version": "MT6783"
            },
            {
              "status": "affected",
              "version": "MT6785"
            },
            {
              "status": "affected",
              "version": "MT6785T"
            },
            {
              "status": "affected",
              "version": "MT6785U"
            },
            {
              "status": "affected",
              "version": "MT6789"
            },
            {
              "status": "affected",
              "version": "MT6833"
            },
            {
              "status": "affected",
              "version": "MT6833P"
            },
            {
              "status": "affected",
              "version": "MT6835"
            },
            {
              "status": "affected",
              "version": "MT6835T"
            },
            {
              "status": "affected",
              "version": "MT6853"
            },
            {
              "status": "affected",
              "version": "MT6853T"
            },
            {
              "status": "affected",
              "version": "MT6855"
            },
            {
              "status": "affected",
              "version": "MT6855T"
            },
            {
              "status": "affected",
              "version": "MT6873"
            },
            {
              "status": "affected",
              "version": "MT6875"
            },
            {
              "status": "affected",
              "version": "MT6875T"
            },
            {
              "status": "affected",
              "version": "MT6877"
            },
            {
              "status": "affected",
              "version": "MT6877T"
            },
            {
              "status": "affected",
              "version": "MT6877TT"
            },
            {
              "status": "affected",
              "version": "MT6878"
            },
            {
              "status": "affected",
              "version": "MT6878M"
            },
            {
              "status": "affected",
              "version": "MT6879"
            },
            {
              "status": "affected",
              "version": "MT6880"
            },
            {
              "status": "affected",
              "version": "MT6883"
            },
            {
              "status": "affected",
              "version": "MT6885"
            },
            {
              "status": "affected",
              "version": "MT6886"
            },
            {
              "status": "affected",
              "version": "MT6889"
            },
            {
              "status": "affected",
              "version": "MT6890"
            },
            {
              "status": "affected",
              "version": "MT6891"
            },
            {
              "status": "affected",
              "version": "MT6893"
            },
            {
              "status": "affected",
              "version": "MT6895"
            },
            {
              "status": "affected",
              "version": "MT6895TT"
            },
            {
              "status": "affected",
              "version": "MT6896"
            },
            {
              "status": "affected",
              "version": "MT6897"
            },
            {
              "status": "affected",
              "version": "MT6899"
            },
            {
              "status": "affected",
              "version": "MT6980"
            },
            {
              "status": "affected",
              "version": "MT6980D"
            },
            {
              "status": "affected",
              "version": "MT6983"
            },
            {
              "status": "affected",
              "version": "MT6983T"
            },
            {
              "status": "affected",
              "version": "MT6985"
            },
            {
              "status": "affected",
              "version": "MT6985T"
            },
            {
              "status": "affected",
              "version": "MT6989"
            },
            {
              "status": "affected",
              "version": "MT6989T"
            },
            {
              "status": "affected",
              "version": "MT6990"
            },
            {
              "status": "affected",
              "version": "MT6991"
            },
            {
              "status": "affected",
              "version": "MT8666"
            },
            {
              "status": "affected",
              "version": "MT8667"
            },
            {
              "status": "affected",
              "version": "MT8668"
            },
            {
              "status": "affected",
              "version": "MT8673"
            },
            {
              "status": "affected",
              "version": "MT8675"
            },
            {
              "status": "affected",
              "version": "MT8676"
            },
            {
              "status": "affected",
              "version": "MT8678"
            },
            {
              "status": "affected",
              "version": "MT8755"
            },
            {
              "status": "affected",
              "version": "MT8765"
            },
            {
              "status": "affected",
              "version": "MT8766"
            },
            {
              "status": "affected",
              "version": "MT8766R"
            },
            {
              "status": "affected",
              "version": "MT8768"
            },
            {
              "status": "affected",
              "version": "MT8771"
            },
            {
              "status": "affected",
              "version": "MT8781"
            },
            {
              "status": "affected",
              "version": "MT8786"
            },
            {
              "status": "affected",
              "version": "MT8788"
            },
            {
              "status": "affected",
              "version": "MT8788E"
            },
            {
              "status": "affected",
              "version": "MT8789"
            },
            {
              "status": "affected",
              "version": "MT8791"
            },
            {
              "status": "affected",
              "version": "MT8791T"
            },
            {
              "status": "affected",
              "version": "MT8792"
            },
            {
              "status": "affected",
              "version": "MT8793"
            },
            {
              "status": "affected",
              "version": "MT8795T"
            },
            {
              "status": "affected",
              "version": "MT8797"
            },
            {
              "status": "affected",
              "version": "MT8798"
            },
            {
              "status": "affected",
              "version": "MT8863"
            },
            {
              "status": "affected",
              "version": "MT8873"
            },
            {
              "status": "affected",
              "version": "MT8883"
            },
            {
              "status": "affected",
              "version": "MT8893"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY00782946; Issue ID: MSV-4135."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-30T13:05:35.387Z",
        "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "shortName": "MediaTek"
      },
      "references": [
        {
          "url": "https://corp.mediatek.com/product-security-bulletin/March-2026"
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
    "assignerShortName": "MediaTek",
    "cveId": "CVE-2026-20434",
    "datePublished": "2026-03-02T08:39:10.077Z",
    "dateReserved": "2025-11-03T01:30:59.011Z",
    "dateUpdated": "2026-03-30T13:05:35.387Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"ADJACENT_NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-20434\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-02T13:37:44.413942Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-02T13:37:34.417Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"MediaTek, Inc.\", \"product\": \"MediaTek chipset\", \"versions\": [{\"status\": \"affected\", \"version\": \"MT2735\"}, {\"status\": \"affected\", \"version\": \"MT2737\"}, {\"status\": \"affected\", \"version\": \"MT6739\"}, {\"status\": \"affected\", \"version\": \"MT6761\"}, {\"status\": \"affected\", \"version\": \"MT6762\"}, {\"status\": \"affected\", \"version\": \"MT6762D\"}, {\"status\": \"affected\", \"version\": \"MT6762M\"}, {\"status\": \"affected\", \"version\": \"MT6763\"}, {\"status\": \"affected\", \"version\": \"MT6765\"}, {\"status\": \"affected\", \"version\": \"MT6765T\"}, {\"status\": \"affected\", \"version\": \"MT6767\"}, {\"status\": \"affected\", \"version\": \"MT6768\"}, {\"status\": \"affected\", \"version\": \"MT6769\"}, {\"status\": \"affected\", \"version\": \"MT6769K\"}, {\"status\": \"affected\", \"version\": \"MT6769S\"}, {\"status\": \"affected\", \"version\": \"MT6769T\"}, {\"status\": \"affected\", \"version\": \"MT6769Z\"}, {\"status\": \"affected\", \"version\": \"MT6771\"}, {\"status\": \"affected\", \"version\": \"MT6779\"}, {\"status\": \"affected\", \"version\": \"MT6781\"}, {\"status\": \"affected\", \"version\": \"MT6783\"}, {\"status\": \"affected\", \"version\": \"MT6785\"}, {\"status\": \"affected\", \"version\": \"MT6785T\"}, {\"status\": \"affected\", \"version\": \"MT6785U\"}, {\"status\": \"affected\", \"version\": \"MT6789\"}, {\"status\": \"affected\", \"version\": \"MT6833\"}, {\"status\": \"affected\", \"version\": \"MT6833P\"}, {\"status\": \"affected\", \"version\": \"MT6835\"}, {\"status\": \"affected\", \"version\": \"MT6835T\"}, {\"status\": \"affected\", \"version\": \"MT6853\"}, {\"status\": \"affected\", \"version\": \"MT6853T\"}, {\"status\": \"affected\", \"version\": \"MT6855\"}, {\"status\": \"affected\", \"version\": \"MT6855T\"}, {\"status\": \"affected\", \"version\": \"MT6873\"}, {\"status\": \"affected\", \"version\": \"MT6875\"}, {\"status\": \"affected\", \"version\": \"MT6875T\"}, {\"status\": \"affected\", \"version\": \"MT6877\"}, {\"status\": \"affected\", \"version\": \"MT6877T\"}, {\"status\": \"affected\", \"version\": \"MT6877TT\"}, {\"status\": \"affected\", \"version\": \"MT6878\"}, {\"status\": \"affected\", \"version\": \"MT6878M\"}, {\"status\": \"affected\", \"version\": \"MT6879\"}, {\"status\": \"affected\", \"version\": \"MT6880\"}, {\"status\": \"affected\", \"version\": \"MT6883\"}, {\"status\": \"affected\", \"version\": \"MT6885\"}, {\"status\": \"affected\", \"version\": \"MT6886\"}, {\"status\": \"affected\", \"version\": \"MT6889\"}, {\"status\": \"affected\", \"version\": \"MT6890\"}, {\"status\": \"affected\", \"version\": \"MT6891\"}, {\"status\": \"affected\", \"version\": \"MT6893\"}, {\"status\": \"affected\", \"version\": \"MT6895\"}, {\"status\": \"affected\", \"version\": \"MT6895TT\"}, {\"status\": \"affected\", \"version\": \"MT6896\"}, {\"status\": \"affected\", \"version\": \"MT6897\"}, {\"status\": \"affected\", \"version\": \"MT6899\"}, {\"status\": \"affected\", \"version\": \"MT6980\"}, {\"status\": \"affected\", \"version\": \"MT6980D\"}, {\"status\": \"affected\", \"version\": \"MT6983\"}, {\"status\": \"affected\", \"version\": \"MT6983T\"}, {\"status\": \"affected\", \"version\": \"MT6985\"}, {\"status\": \"affected\", \"version\": \"MT6985T\"}, {\"status\": \"affected\", \"version\": \"MT6989\"}, {\"status\": \"affected\", \"version\": \"MT6989T\"}, {\"status\": \"affected\", \"version\": \"MT6990\"}, {\"status\": \"affected\", \"version\": \"MT6991\"}, {\"status\": \"affected\", \"version\": \"MT8666\"}, {\"status\": \"affected\", \"version\": \"MT8667\"}, {\"status\": \"affected\", \"version\": \"MT8668\"}, {\"status\": \"affected\", \"version\": \"MT8673\"}, {\"status\": \"affected\", \"version\": \"MT8675\"}, {\"status\": \"affected\", \"version\": \"MT8676\"}, {\"status\": \"affected\", \"version\": \"MT8678\"}, {\"status\": \"affected\", \"version\": \"MT8755\"}, {\"status\": \"affected\", \"version\": \"MT8765\"}, {\"status\": \"affected\", \"version\": \"MT8766\"}, {\"status\": \"affected\", \"version\": \"MT8766R\"}, {\"status\": \"affected\", \"version\": \"MT8768\"}, {\"status\": \"affected\", \"version\": \"MT8771\"}, {\"status\": \"affected\", \"version\": \"MT8781\"}, {\"status\": \"affected\", \"version\": \"MT8786\"}, {\"status\": \"affected\", \"version\": \"MT8788\"}, {\"status\": \"affected\", \"version\": \"MT8788E\"}, {\"status\": \"affected\", \"version\": \"MT8789\"}, {\"status\": \"affected\", \"version\": \"MT8791\"}, {\"status\": \"affected\", \"version\": \"MT8791T\"}, {\"status\": \"affected\", \"version\": \"MT8792\"}, {\"status\": \"affected\", \"version\": \"MT8793\"}, {\"status\": \"affected\", \"version\": \"MT8795T\"}, {\"status\": \"affected\", \"version\": \"MT8797\"}, {\"status\": \"affected\", \"version\": \"MT8798\"}, {\"status\": \"affected\", \"version\": \"MT8863\"}, {\"status\": \"affected\", \"version\": \"MT8873\"}, {\"status\": \"affected\", \"version\": \"MT8883\"}, {\"status\": \"affected\", \"version\": \"MT8893\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://corp.mediatek.com/product-security-bulletin/March-2026\"}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY00782946; Issue ID: MSV-4135.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-787\", \"description\": \"CWE-787 Out-of-bounds Write\"}]}], \"providerMetadata\": {\"orgId\": \"ee979b05-11f8-4f25-a7e0-a1fa9c190374\", \"shortName\": \"MediaTek\", \"dateUpdated\": \"2026-03-30T13:05:35.387Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-20434\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-03-30T13:05:35.387Z\", \"dateReserved\": \"2025-11-03T01:30:59.011Z\", \"assignerOrgId\": \"ee979b05-11f8-4f25-a7e0-a1fa9c190374\", \"datePublished\": \"2026-03-02T08:39:10.077Z\", \"assignerShortName\": \"MediaTek\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-0231

Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.

Google indique que la vulnérabilité CVE-2026-21385 est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Google	Android	Android versions antérieures à 14, 15, 16, 16-qpr2 sans les correctifs de mars 2026

References

Title

Publication Time

Tags

Bulletin de sécurité Google Android

2026-03-02

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Android versions ant\u00e9rieures \u00e0 14, 15, 16, 16-qpr2 sans les correctifs de mars 2026",
      "product": {
        "name": "Android",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-61612",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61612"
    },
    {
      "name": "CVE-2026-0005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0005"
    },
    {
      "name": "CVE-2026-20403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20403"
    },
    {
      "name": "CVE-2025-58409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58409"
    },
    {
      "name": "CVE-2025-48644",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48644"
    },
    {
      "name": "CVE-2025-48544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48544"
    },
    {
      "name": "CVE-2026-20425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20425"
    },
    {
      "name": "CVE-2025-47398",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47398"
    },
    {
      "name": "CVE-2026-0015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0015"
    },
    {
      "name": "CVE-2026-20422",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20422"
    },
    {
      "name": "CVE-2025-64783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64783"
    },
    {
      "name": "CVE-2026-0026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0026"
    },
    {
      "name": "CVE-2026-0014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0014"
    },
    {
      "name": "CVE-2026-20406",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20406"
    },
    {
      "name": "CVE-2025-48577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48577"
    },
    {
      "name": "CVE-2024-43766",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-43766"
    },
    {
      "name": "CVE-2025-58407",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58407"
    },
    {
      "name": "CVE-2026-21735",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21735"
    },
    {
      "name": "CVE-2026-0013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0013"
    },
    {
      "name": "CVE-2025-47388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47388"
    },
    {
      "name": "CVE-2025-61616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61616"
    },
    {
      "name": "CVE-2025-58411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58411"
    },
    {
      "name": "CVE-2025-47339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47339"
    },
    {
      "name": "CVE-2025-2879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2879"
    },
    {
      "name": "CVE-2026-20426",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20426"
    },
    {
      "name": "CVE-2026-0030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0030"
    },
    {
      "name": "CVE-2025-48578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48578"
    },
    {
      "name": "CVE-2026-20428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20428"
    },
    {
      "name": "CVE-2025-48568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48568"
    },
    {
      "name": "CVE-2025-48641",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48641"
    },
    {
      "name": "CVE-2025-47366",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47366"
    },
    {
      "name": "CVE-2025-48650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48650"
    },
    {
      "name": "CVE-2026-0011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0011"
    },
    {
      "name": "CVE-2026-20420",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20420"
    },
    {
      "name": "CVE-2026-0023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0023"
    },
    {
      "name": "CVE-2026-20401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20401"
    },
    {
      "name": "CVE-2026-0017",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0017"
    },
    {
      "name": "CVE-2025-58408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58408"
    },
    {
      "name": "CVE-2025-47397",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47397"
    },
    {
      "name": "CVE-2025-13952",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13952"
    },
    {
      "name": "CVE-2026-0031",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0031"
    },
    {
      "name": "CVE-2025-47395",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47395"
    },
    {
      "name": "CVE-2026-20404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20404"
    },
    {
      "name": "CVE-2026-0020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0020"
    },
    {
      "name": "CVE-2025-48630",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48630"
    },
    {
      "name": "CVE-2025-48585",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48585"
    },
    {
      "name": "CVE-2025-48635",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48635"
    },
    {
      "name": "CVE-2025-48567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48567"
    },
    {
      "name": "CVE-2025-48574",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48574"
    },
    {
      "name": "CVE-2026-0035",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0035"
    },
    {
      "name": "CVE-2026-0024",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0024"
    },
    {
      "name": "CVE-2025-64893",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64893"
    },
    {
      "name": "CVE-2025-48634",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48634"
    },
    {
      "name": "CVE-2025-47396",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47396"
    },
    {
      "name": "CVE-2025-48653",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48653"
    },
    {
      "name": "CVE-2026-0032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0032"
    },
    {
      "name": "CVE-2026-20427",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20427"
    },
    {
      "name": "CVE-2025-38616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38616"
    },
    {
      "name": "CVE-2025-69279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69279"
    },
    {
      "name": "CVE-2026-20434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20434"
    },
    {
      "name": "CVE-2025-48642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48642"
    },
    {
      "name": "CVE-2026-0025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0025"
    },
    {
      "name": "CVE-2025-20761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20761"
    },
    {
      "name": "CVE-2025-10865",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-10865"
    },
    {
      "name": "CVE-2025-48587",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48587"
    },
    {
      "name": "CVE-2026-0038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0038"
    },
    {
      "name": "CVE-2025-48619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48619"
    },
    {
      "name": "CVE-2025-47378",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47378"
    },
    {
      "name": "CVE-2025-48613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48613"
    },
    {
      "name": "CVE-2025-47402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47402"
    },
    {
      "name": "CVE-2025-47346",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47346"
    },
    {
      "name": "CVE-2026-0006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0006"
    },
    {
      "name": "CVE-2025-40266",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40266"
    },
    {
      "name": "CVE-2025-69278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69278"
    },
    {
      "name": "CVE-2026-20421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20421"
    },
    {
      "name": "CVE-2025-48646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48646"
    },
    {
      "name": "CVE-2025-48609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48609"
    },
    {
      "name": "CVE-2025-47394",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47394"
    },
    {
      "name": "CVE-2025-48631",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48631"
    },
    {
      "name": "CVE-2026-0010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0010"
    },
    {
      "name": "CVE-2025-61614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61614"
    },
    {
      "name": "CVE-2025-32313",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32313"
    },
    {
      "name": "CVE-2026-20402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20402"
    },
    {
      "name": "CVE-2026-21385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21385"
    },
    {
      "name": "CVE-2025-47385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47385"
    },
    {
      "name": "CVE-2026-0007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0007"
    },
    {
      "name": "CVE-2025-20794",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20794"
    },
    {
      "name": "CVE-2026-0034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0034"
    },
    {
      "name": "CVE-2026-0012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0012"
    },
    {
      "name": "CVE-2026-0008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0008"
    },
    {
      "name": "CVE-2026-0047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0047"
    },
    {
      "name": "CVE-2024-43859",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-43859"
    },
    {
      "name": "CVE-2025-48602",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48602"
    },
    {
      "name": "CVE-2025-61615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61615"
    },
    {
      "name": "CVE-2026-0028",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0028"
    },
    {
      "name": "CVE-2025-48654",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48654"
    },
    {
      "name": "CVE-2025-48605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48605"
    },
    {
      "name": "CVE-2025-47348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47348"
    },
    {
      "name": "CVE-2025-20795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20795"
    },
    {
      "name": "CVE-2025-59600",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59600"
    },
    {
      "name": "CVE-2025-20760",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20760"
    },
    {
      "name": "CVE-2025-64784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64784"
    },
    {
      "name": "CVE-2025-61613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61613"
    },
    {
      "name": "CVE-2025-20762",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20762"
    },
    {
      "name": "CVE-2025-38618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38618"
    },
    {
      "name": "CVE-2025-20793",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20793"
    },
    {
      "name": "CVE-2025-48582",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48582"
    },
    {
      "name": "CVE-2026-0027",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0027"
    },
    {
      "name": "CVE-2025-39946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-39946"
    },
    {
      "name": "CVE-2026-0021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0021"
    },
    {
      "name": "CVE-2025-39682",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-39682"
    },
    {
      "name": "CVE-2026-0037",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0037"
    },
    {
      "name": "CVE-2025-48645",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48645"
    },
    {
      "name": "CVE-2025-48579",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48579"
    },
    {
      "name": "CVE-2026-20405",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20405"
    },
    {
      "name": "CVE-2026-0029",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0029"
    }
  ],
  "initial_release_date": "2026-03-03T00:00:00",
  "last_revision_date": "2026-03-03T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0231",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-03-03T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Android. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n\nGoogle indique que la vuln\u00e9rabilit\u00e9 CVE-2026-21385 est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Android",
  "vendor_advisories": [
    {
      "published_at": "2026-03-02",
      "title": "Bulletin de s\u00e9curit\u00e9 Google Android",
      "url": "https://source.android.com/docs/security/bulletin/2026/2026-03-01?hl=fr"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2026-20434 (GCVE-0-2026-20434)

Vulnerability from cvelistv5

CERTFR-2026-AVI-0231

Vulnerability from certfr_avis

Solutions

Tags

Sightings

Nomenclature