{"schema_version":1,"title":"Google Pixel vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 72 vulnerabilities in Google Pixel: 70 in the last 7 days and 72 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-95404, was published on 10 November 2026. Nothing in the last four weeks, down from 2 vulnerabilities in the four before.","url":"https://junglewise.ai/threats/technologies/google-pixel","json_url":"https://junglewise.ai/threats/technologies/google-pixel.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/google-pixel","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":0,"all_time":72,"critical":0,"exploited":0,"last_7_days":70,"last_30_days":70,"last_90_days":72,"last_365_days":72},"latest":[{"cve":"CVE-2026-95404","slug":"cve-2026-95404-in-multiple-locations-there-is-a-possible-way-to-modify","title":"Google Pixel coprocessor memory privilege escalation","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:48.517+00:00","url":"https://junglewise.ai/threats/cve-2026-95404-in-multiple-locations-there-is-a-possible-way-to-modify"},{"cve":"CVE-2026-95403","slug":"cve-2026-95403-in-multiple-locations-there-is-a-possible-way-to-trigger-an-out","title":"Google Pixel shared memory bitmap out-of-bounds write","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:48.383+00:00","url":"https://junglewise.ai/threats/cve-2026-95403-in-multiple-locations-there-is-a-possible-way-to-trigger-an-out"},{"cve":"CVE-2026-95402","slug":"cve-2026-95402-in-slice-header-of-hevc-decoder-there-is-a-possible-non-heap","title":"Google Pixel HWCodec buffer overflow in HEVC decoder","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:48.257+00:00","url":"https://junglewise.ai/threats/cve-2026-95402-in-slice-header-of-hevc-decoder-there-is-a-possible-non-heap"},{"cve":"CVE-2026-95401","slug":"cve-2026-95401-in-knee-function-info-of-hevc-decoder-there-is-a-possible-non","title":"Google Pixel hevc_decoder buffer overflow","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:48.12+00:00","url":"https://junglewise.ai/threats/cve-2026-95401-in-knee-function-info-of-hevc-decoder-there-is-a-possible-non"},{"cve":"CVE-2026-95399","slug":"cve-2026-95399-in-multiple-functions-of-face-status-h-there-is-a-possible-way-to","title":"Google Pixel FaceAuth race condition in biometric enrollment","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:47.863+00:00","url":"https://junglewise.ai/threats/cve-2026-95399-in-multiple-functions-of-face-status-h-there-is-a-possible-way-to"},{"cve":"CVE-2026-59636","slug":"cve-2026-59636-in-has-booted-successfully-of-sys-state-setup-otp-ta-c-there-is-a","title":"Google Pixel denial of service via anti-rollback fuse logic error","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:33.08+00:00","url":"https://junglewise.ai/threats/cve-2026-59636-in-has-booted-successfully-of-sys-state-setup-otp-ta-c-there-is-a"},{"cve":"CVE-2026-59635","slug":"cve-2026-59635-in-cpb-cnt-of-avc-decoder-there-is-a-possible-non-heap-buffer","title":"Google Pixel HWCodec buffer overflow in AVC decoder","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:32.973+00:00","url":"https://junglewise.ai/threats/cve-2026-59635-in-cpb-cnt-of-avc-decoder-there-is-a-possible-non-heap-buffer"},{"cve":"CVE-2026-59630","slug":"cve-2026-59630-in-check-constraint-monotonicity-of-lib-rs-there-is-a-possible","title":"Trusty TZ kernel security policy downgrade via logic error","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:32.64+00:00","url":"https://junglewise.ai/threats/cve-2026-59630-in-check-constraint-monotonicity-of-lib-rs-there-is-a-possible"},{"cve":"CVE-2026-59625","slug":"cve-2026-59625-in-gettwiddledmiptreesparsepagemap-of-texmgmt-c-there-is-a","title":"Google Pixel PowerVR-GPU out-of-bounds write in texmgmt","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:32.337+00:00","url":"https://junglewise.ai/threats/cve-2026-59625-in-gettwiddledmiptreesparsepagemap-of-texmgmt-c-there-is-a"},{"cve":"CVE-2026-59624","slug":"cve-2026-59624-in-multiple-locations-there-is-a-possible-way-to-trigger-an-out","title":"Google Pixel video decoder firmware out-of-bounds read","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:32.243+00:00","url":"https://junglewise.ai/threats/cve-2026-59624-in-multiple-locations-there-is-a-possible-way-to-trigger-an-out"},{"cve":"CVE-2026-59619","slug":"cve-2026-59619-in-getcodecqp-of-gc2av1enc-cpp-there-is-a-possible-way-to-trigger","title":"AV1 codec out-of-bounds read in quantization table lookup","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:32.033+00:00","url":"https://junglewise.ai/threats/cve-2026-59619-in-getcodecqp-of-gc2av1enc-cpp-there-is-a-possible-way-to-trigger"},{"cve":"CVE-2026-59618","slug":"cve-2026-59618-in-smfc-v4l2-s-selection-of-smfc-v4l2-ioctls-c-there-is-a","title":"Google Pixel Media integer overflow in V4L2 selection","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:31.93+00:00","url":"https://junglewise.ai/threats/cve-2026-59618-in-smfc-v4l2-s-selection-of-smfc-v4l2-ioctls-c-there-is-a"},{"cve":"CVE-2026-59616","slug":"cve-2026-59616-in-prev-run-vcore-of-hwcodec-firmware-there-is-a-possible-non","title":"Google Pixel HWCodec Firmware buffer overflow in prev_run_vcore","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:31.827+00:00","url":"https://junglewise.ai/threats/cve-2026-59616-in-prev-run-vcore-of-hwcodec-firmware-there-is-a-possible-non"},{"cve":"CVE-2026-59614","slug":"cve-2026-59614-in-multiple-functions-of-oem-svc-setup-c-there-is-a-possible-way","title":"Google Pixel secure cache line disclosure on warm reset","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:31.707+00:00","url":"https://junglewise.ai/threats/cve-2026-59614-in-multiple-functions-of-oem-svc-setup-c-there-is-a-possible-way"},{"cve":"CVE-2026-59613","slug":"cve-2026-59613-in-multiple-locations-there-is-a-possible-way-to-trigger-an-out","title":"Google Pixel out-of-bounds read in input validation","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:31.6+00:00","url":"https://junglewise.ai/threats/cve-2026-59613-in-multiple-locations-there-is-a-possible-way-to-trigger-an-out"},{"cve":"CVE-2026-59606","slug":"cve-2026-59606-in-multiple-functions-of-sswrp-cpm-dtsi-there-is-a-possible-way","title":"Google Pixel firmware privilege escalation in reset register access","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:30.963+00:00","url":"https://junglewise.ai/threats/cve-2026-59606-in-multiple-functions-of-sswrp-cpm-dtsi-there-is-a-possible-way"},{"cve":"CVE-2026-59604","slug":"cve-2026-59604-in-multiple-locations-there-is-a-possible-way-to-trigger-an","title":"Google Pixel video decoder firmware unbounded loop denial of service","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:30.863+00:00","url":"https://junglewise.ai/threats/cve-2026-59604-in-multiple-locations-there-is-a-possible-way-to-trigger-an"},{"cve":"CVE-2026-59598","slug":"cve-2026-59598-in-platform-rio-ncp-wdt-handler-of-edgetpu-rio-c-there-is-a","title":"Google Pixel EdgeTPU Driver use-after-free in rio watchdog handler","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:30.443+00:00","url":"https://junglewise.ai/threats/cve-2026-59598-in-platform-rio-ncp-wdt-handler-of-edgetpu-rio-c-there-is-a"},{"cve":"CVE-2026-59596","slug":"cve-2026-59596-in-multiple-functions-of-mpu-c-there-is-a-possible-way-to-execute","title":"Google Pixel security coprocessor code execution via insecure default","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:30.227+00:00","url":"https://junglewise.ai/threats/cve-2026-59596-in-multiple-functions-of-mpu-c-there-is-a-possible-way-to-execute"},{"cve":"CVE-2026-59589","slug":"cve-2026-59589-in-s-av1-dec-metadata-scalability-of-av1-decoder-there-is-a","title":"Google Pixel HWCodec Firmware buffer overflow in AV1 decoder","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:29.78+00:00","url":"https://junglewise.ai/threats/cve-2026-59589-in-s-av1-dec-metadata-scalability-of-av1-decoder-there-is-a"},{"cve":"CVE-2026-59586","slug":"cve-2026-59586-in-multiple-locations-there-is-a-possible-way-to-recover","title":"Android cryptographic key recovery and authentication tag forgery in multiple components","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:29.57+00:00","url":"https://junglewise.ai/threats/cve-2026-59586-in-multiple-locations-there-is-a-possible-way-to-recover"},{"cve":"CVE-2026-59585","slug":"cve-2026-59585-in-setdisplayname-of-reginfocontact-cpp-there-is-a-possible","title":"Google Pixel denial of service in SetDisplayName","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:29.473+00:00","url":"https://junglewise.ai/threats/cve-2026-59585-in-setdisplayname-of-reginfocontact-cpp-there-is-a-possible"},{"cve":"CVE-2026-59579","slug":"cve-2026-59579-in-getuserdatapayload-of-gc2userdata-cpp-there-is-a-possible","title":"Google Pixel logic error in GC2UserData information disclosure","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:29.073+00:00","url":"https://junglewise.ai/threats/cve-2026-59579-in-getuserdatapayload-of-gc2userdata-cpp-there-is-a-possible"},{"cve":"CVE-2026-59578","slug":"cve-2026-59578-in-s-check-valid-tile-param-custom-tile-of-av1-encoder-there-is-a","title":"Google Pixel HWCodec Firmware buffer overflow in av1_encoder","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:28.977+00:00","url":"https://junglewise.ai/threats/cve-2026-59578-in-s-check-valid-tile-param-custom-tile-of-av1-encoder-there-is-a"},{"cve":"CVE-2026-59575","slug":"cve-2026-59575-in-stpropnci-cb-observe-mode-suspend-of-stpropnci-prop-android-cc","title":"Google Pixel out of bounds write in NCI observe mode suspend","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:28.87+00:00","url":"https://junglewise.ai/threats/cve-2026-59575-in-stpropnci-cb-observe-mode-suspend-of-stpropnci-prop-android-cc"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":70}],"related":[{"name":"Google Chrome","slug":"chrome","vulnerabilities":3930,"url":"https://junglewise.ai/threats/technologies/chrome"},{"name":"Google Android","slug":"android","vulnerabilities":628,"url":"https://junglewise.ai/threats/technologies/android"},{"name":"Google Chrome for iOS","slug":"chrome-for-ios","vulnerabilities":79,"url":"https://junglewise.ai/threats/technologies/chrome-for-ios"},{"name":"Google Cloud Platform","slug":"google-cloud-platform","vulnerabilities":43,"url":"https://junglewise.ai/threats/technologies/google-cloud-platform"},{"name":"Google Chromium V8","slug":"chromium-v8","vulnerabilities":41,"url":"https://junglewise.ai/threats/technologies/chromium-v8"},{"name":"Google Chromium","slug":"chromium","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/chromium"},{"name":"Google TensorFlow","slug":"tensorflow","vulnerabilities":31,"url":"https://junglewise.ai/threats/technologies/tensorflow"},{"name":"Google Pixel Devices","slug":"pixel-devices","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/pixel-devices"},{"name":"Google Pixel Firmware","slug":"pixel-firmware","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/pixel-firmware"},{"name":"Google Android Framework","slug":"android-framework","vulnerabilities":22,"url":"https://junglewise.ai/threats/technologies/android-framework"},{"name":"Google Chrome for Android","slug":"chrome-for-android","vulnerabilities":21,"url":"https://junglewise.ai/threats/technologies/chrome-for-android"},{"name":"Google ChromeOS","slug":"chromeos","vulnerabilities":20,"url":"https://junglewise.ai/threats/technologies/chromeos"}],"technology":{"hub":true,"name":"Google Pixel","slug":"google-pixel","vendor":{"hub":true,"name":"Google","slug":"google","url":"https://junglewise.ai/threats/vendors/google"},"aliases":[],"category":"firmware","description":"Mobile operating system and firmware for Google Pixel smartphones and tablets.","url":"https://junglewise.ai/threats/technologies/google-pixel"},"most_severe":[{"cve":"CVE-2026-56936","cvss":6.8,"slug":"cve-2026-56936-in-wacom-hid-set-device-mode-of-wacom-sys-c-there-is-a-possible","title":"Wacom HID driver out-of-bounds write in wacom_sys.c","severity":"medium","exploited":false,"published_at":"2026-10-06T19:18:15.093+00:00","url":"https://junglewise.ai/threats/cve-2026-56936-in-wacom-hid-set-device-mode-of-wacom-sys-c-there-is-a-possible"},{"cve":"CVE-2026-55307","cvss":4.4,"slug":"cve-2026-55307-in-kdn-set-sysregs-prot-of-hwcrypto-kdn-c-there-is-a-possible","title":"Google Pixel GSA information disclosure in hwcrypto-kdn","severity":"medium","exploited":false,"published_at":"2026-10-06T19:18:14.633+00:00","url":"https://junglewise.ai/threats/cve-2026-55307-in-kdn-set-sysregs-prot-of-hwcrypto-kdn-c-there-is-a-possible"},{"cve":"CVE-2026-95404","slug":"cve-2026-95404-in-multiple-locations-there-is-a-possible-way-to-modify","title":"Google Pixel coprocessor memory privilege escalation","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:48.517+00:00","url":"https://junglewise.ai/threats/cve-2026-95404-in-multiple-locations-there-is-a-possible-way-to-modify"},{"cve":"CVE-2026-95403","slug":"cve-2026-95403-in-multiple-locations-there-is-a-possible-way-to-trigger-an-out","title":"Google Pixel shared memory bitmap out-of-bounds write","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:48.383+00:00","url":"https://junglewise.ai/threats/cve-2026-95403-in-multiple-locations-there-is-a-possible-way-to-trigger-an-out"},{"cve":"CVE-2026-95402","slug":"cve-2026-95402-in-slice-header-of-hevc-decoder-there-is-a-possible-non-heap","title":"Google Pixel HWCodec buffer overflow in HEVC decoder","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:48.257+00:00","url":"https://junglewise.ai/threats/cve-2026-95402-in-slice-header-of-hevc-decoder-there-is-a-possible-non-heap"},{"cve":"CVE-2026-95401","slug":"cve-2026-95401-in-knee-function-info-of-hevc-decoder-there-is-a-possible-non","title":"Google Pixel hevc_decoder buffer overflow","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:48.12+00:00","url":"https://junglewise.ai/threats/cve-2026-95401-in-knee-function-info-of-hevc-decoder-there-is-a-possible-non"},{"cve":"CVE-2026-95399","slug":"cve-2026-95399-in-multiple-functions-of-face-status-h-there-is-a-possible-way-to","title":"Google Pixel FaceAuth race condition in biometric enrollment","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:47.863+00:00","url":"https://junglewise.ai/threats/cve-2026-95399-in-multiple-functions-of-face-status-h-there-is-a-possible-way-to"},{"cve":"CVE-2026-59636","slug":"cve-2026-59636-in-has-booted-successfully-of-sys-state-setup-otp-ta-c-there-is-a","title":"Google Pixel denial of service via anti-rollback fuse logic error","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:33.08+00:00","url":"https://junglewise.ai/threats/cve-2026-59636-in-has-booted-successfully-of-sys-state-setup-otp-ta-c-there-is-a"},{"cve":"CVE-2026-59635","slug":"cve-2026-59635-in-cpb-cnt-of-avc-decoder-there-is-a-possible-non-heap-buffer","title":"Google Pixel HWCodec buffer overflow in AVC decoder","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:32.973+00:00","url":"https://junglewise.ai/threats/cve-2026-59635-in-cpb-cnt-of-avc-decoder-there-is-a-possible-non-heap-buffer"},{"cve":"CVE-2026-59630","slug":"cve-2026-59630-in-check-constraint-monotonicity-of-lib-rs-there-is-a-possible","title":"Trusty TZ kernel security policy downgrade via logic error","severity":"info","exploited":false,"published_at":"2026-11-10T20:19:32.64+00:00","url":"https://junglewise.ai/threats/cve-2026-59630-in-check-constraint-monotonicity-of-lib-rs-there-is-a-possible"}],"generated_at":"2026-11-12T03:07:00.164048+00:00"}