# Google Pixel vulnerabilities Source: https://junglewise.ai/threats/technologies/google-pixel Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/google-pixel.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 72 vulnerabilities in Google Pixel: 70 in the last 7 days and 72 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-95404, was published on 10 November 2026. Nothing in the last four weeks, down from 2 vulnerabilities in the four before. ## Counts - Last 7 days: 70 - Last 30 days: 70 - Last 90 days: 72 - All time: 72 (0 critical, 0 exploited in the wild) ## About Google Pixel Mobile operating system and firmware for Google Pixel smartphones and tablets. ## Latest Google Pixel vulnerabilities - [CVE-2026-95404: Google Pixel coprocessor memory privilege escalation](https://junglewise.ai/threats/cve-2026-95404-in-multiple-locations-there-is-a-possible-way-to-modify) (info, published 10 Nov 2026) - [CVE-2026-95403: Google Pixel shared memory bitmap out-of-bounds write](https://junglewise.ai/threats/cve-2026-95403-in-multiple-locations-there-is-a-possible-way-to-trigger-an-out) (info, published 10 Nov 2026) - [CVE-2026-95402: Google Pixel HWCodec buffer overflow in HEVC decoder](https://junglewise.ai/threats/cve-2026-95402-in-slice-header-of-hevc-decoder-there-is-a-possible-non-heap) (info, published 10 Nov 2026) - [CVE-2026-95401: Google Pixel hevc_decoder buffer overflow](https://junglewise.ai/threats/cve-2026-95401-in-knee-function-info-of-hevc-decoder-there-is-a-possible-non) (info, published 10 Nov 2026) - [CVE-2026-95399: Google Pixel FaceAuth race condition in biometric enrollment](https://junglewise.ai/threats/cve-2026-95399-in-multiple-functions-of-face-status-h-there-is-a-possible-way-to) (info, published 10 Nov 2026) - [CVE-2026-59636: Google Pixel denial of service via anti-rollback fuse logic error](https://junglewise.ai/threats/cve-2026-59636-in-has-booted-successfully-of-sys-state-setup-otp-ta-c-there-is-a) (info, published 10 Nov 2026) - [CVE-2026-59635: Google Pixel HWCodec buffer overflow in AVC decoder](https://junglewise.ai/threats/cve-2026-59635-in-cpb-cnt-of-avc-decoder-there-is-a-possible-non-heap-buffer) (info, published 10 Nov 2026) - [CVE-2026-59630: Trusty TZ kernel security policy downgrade via logic error](https://junglewise.ai/threats/cve-2026-59630-in-check-constraint-monotonicity-of-lib-rs-there-is-a-possible) (info, published 10 Nov 2026) - [CVE-2026-59625: Google Pixel PowerVR-GPU out-of-bounds write in texmgmt](https://junglewise.ai/threats/cve-2026-59625-in-gettwiddledmiptreesparsepagemap-of-texmgmt-c-there-is-a) (info, published 10 Nov 2026) - [CVE-2026-59624: Google Pixel video decoder firmware out-of-bounds read](https://junglewise.ai/threats/cve-2026-59624-in-multiple-locations-there-is-a-possible-way-to-trigger-an-out) (info, published 10 Nov 2026) - [CVE-2026-59619: AV1 codec out-of-bounds read in quantization table lookup](https://junglewise.ai/threats/cve-2026-59619-in-getcodecqp-of-gc2av1enc-cpp-there-is-a-possible-way-to-trigger) (info, published 10 Nov 2026) - [CVE-2026-59618: Google Pixel Media integer overflow in V4L2 selection](https://junglewise.ai/threats/cve-2026-59618-in-smfc-v4l2-s-selection-of-smfc-v4l2-ioctls-c-there-is-a) (info, published 10 Nov 2026) - [CVE-2026-59616: Google Pixel HWCodec Firmware buffer overflow in prev_run_vcore](https://junglewise.ai/threats/cve-2026-59616-in-prev-run-vcore-of-hwcodec-firmware-there-is-a-possible-non) (info, published 10 Nov 2026) - [CVE-2026-59614: Google Pixel secure cache line disclosure on warm reset](https://junglewise.ai/threats/cve-2026-59614-in-multiple-functions-of-oem-svc-setup-c-there-is-a-possible-way) (info, published 10 Nov 2026) - [CVE-2026-59613: Google Pixel out-of-bounds read in input validation](https://junglewise.ai/threats/cve-2026-59613-in-multiple-locations-there-is-a-possible-way-to-trigger-an-out) (info, published 10 Nov 2026) - [CVE-2026-59606: Google Pixel firmware privilege escalation in reset register access](https://junglewise.ai/threats/cve-2026-59606-in-multiple-functions-of-sswrp-cpm-dtsi-there-is-a-possible-way) (info, published 10 Nov 2026) - [CVE-2026-59604: Google Pixel video decoder firmware unbounded loop denial of service](https://junglewise.ai/threats/cve-2026-59604-in-multiple-locations-there-is-a-possible-way-to-trigger-an) (info, published 10 Nov 2026) - [CVE-2026-59598: Google Pixel EdgeTPU Driver use-after-free in rio watchdog handler](https://junglewise.ai/threats/cve-2026-59598-in-platform-rio-ncp-wdt-handler-of-edgetpu-rio-c-there-is-a) (info, published 10 Nov 2026) - [CVE-2026-59596: Google Pixel security coprocessor code execution via insecure default](https://junglewise.ai/threats/cve-2026-59596-in-multiple-functions-of-mpu-c-there-is-a-possible-way-to-execute) (info, published 10 Nov 2026) - [CVE-2026-59589: Google Pixel HWCodec Firmware buffer overflow in AV1 decoder](https://junglewise.ai/threats/cve-2026-59589-in-s-av1-dec-metadata-scalability-of-av1-decoder-there-is-a) (info, published 10 Nov 2026) - [CVE-2026-59586: Android cryptographic key recovery and authentication tag forgery in multiple components](https://junglewise.ai/threats/cve-2026-59586-in-multiple-locations-there-is-a-possible-way-to-recover) (info, published 10 Nov 2026) - [CVE-2026-59585: Google Pixel denial of service in SetDisplayName](https://junglewise.ai/threats/cve-2026-59585-in-setdisplayname-of-reginfocontact-cpp-there-is-a-possible) (info, published 10 Nov 2026) - [CVE-2026-59579: Google Pixel logic error in GC2UserData information disclosure](https://junglewise.ai/threats/cve-2026-59579-in-getuserdatapayload-of-gc2userdata-cpp-there-is-a-possible) (info, published 10 Nov 2026) - [CVE-2026-59578: Google Pixel HWCodec Firmware buffer overflow in av1_encoder](https://junglewise.ai/threats/cve-2026-59578-in-s-check-valid-tile-param-custom-tile-of-av1-encoder-there-is-a) (info, published 10 Nov 2026) - [CVE-2026-59575: Google Pixel out of bounds write in NCI observe mode suspend](https://junglewise.ai/threats/cve-2026-59575-in-stpropnci-cb-observe-mode-suspend-of-stpropnci-prop-android-cc) (info, published 10 Nov 2026) ## Most severe Google Pixel vulnerabilities - [CVE-2026-56936: Wacom HID driver out-of-bounds write in wacom_sys.c](https://junglewise.ai/threats/cve-2026-56936-in-wacom-hid-set-device-mode-of-wacom-sys-c-there-is-a-possible) (medium, CVSS 6.8, published 6 Oct 2026) - [CVE-2026-55307: Google Pixel GSA information disclosure in hwcrypto-kdn](https://junglewise.ai/threats/cve-2026-55307-in-kdn-set-sysregs-prot-of-hwcrypto-kdn-c-there-is-a-possible) (medium, CVSS 4.4, published 6 Oct 2026) - [CVE-2026-95404: Google Pixel coprocessor memory privilege escalation](https://junglewise.ai/threats/cve-2026-95404-in-multiple-locations-there-is-a-possible-way-to-modify) (info, published 10 Nov 2026) - [CVE-2026-95403: Google Pixel shared memory bitmap out-of-bounds write](https://junglewise.ai/threats/cve-2026-95403-in-multiple-locations-there-is-a-possible-way-to-trigger-an-out) (info, published 10 Nov 2026) - [CVE-2026-95402: Google Pixel HWCodec buffer overflow in HEVC decoder](https://junglewise.ai/threats/cve-2026-95402-in-slice-header-of-hevc-decoder-there-is-a-possible-non-heap) (info, published 10 Nov 2026) - [CVE-2026-95401: Google Pixel hevc_decoder buffer overflow](https://junglewise.ai/threats/cve-2026-95401-in-knee-function-info-of-hevc-decoder-there-is-a-possible-non) (info, published 10 Nov 2026) - [CVE-2026-95399: Google Pixel FaceAuth race condition in biometric enrollment](https://junglewise.ai/threats/cve-2026-95399-in-multiple-functions-of-face-status-h-there-is-a-possible-way-to) (info, published 10 Nov 2026) - [CVE-2026-59636: Google Pixel denial of service via anti-rollback fuse logic error](https://junglewise.ai/threats/cve-2026-59636-in-has-booted-successfully-of-sys-state-setup-otp-ta-c-there-is-a) (info, published 10 Nov 2026) - [CVE-2026-59635: Google Pixel HWCodec buffer overflow in AVC decoder](https://junglewise.ai/threats/cve-2026-59635-in-cpb-cnt-of-avc-decoder-there-is-a-possible-non-heap-buffer) (info, published 10 Nov 2026) - [CVE-2026-59630: Trusty TZ kernel security policy downgrade via logic error](https://junglewise.ai/threats/cve-2026-59630-in-check-constraint-monotonicity-of-lib-rs-there-is-a-possible) (info, published 10 Nov 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 2 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 2 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 70 | 0 | 0 | ## Other Google technologies - [Google Chrome](https://junglewise.ai/threats/technologies/chrome): 3,930 vulnerabilities - [Google Android](https://junglewise.ai/threats/technologies/android): 628 vulnerabilities - [Google Chrome for iOS](https://junglewise.ai/threats/technologies/chrome-for-ios): 79 vulnerabilities - [Google Cloud Platform](https://junglewise.ai/threats/technologies/google-cloud-platform): 43 vulnerabilities - [Google Chromium V8](https://junglewise.ai/threats/technologies/chromium-v8): 41 vulnerabilities - [Google Chromium](https://junglewise.ai/threats/technologies/chromium): 37 vulnerabilities - [Google TensorFlow](https://junglewise.ai/threats/technologies/tensorflow): 31 vulnerabilities - [Google Pixel Devices](https://junglewise.ai/threats/technologies/pixel-devices): 27 vulnerabilities - [Google Pixel Firmware](https://junglewise.ai/threats/technologies/pixel-firmware): 27 vulnerabilities - [Google Android Framework](https://junglewise.ai/threats/technologies/android-framework): 22 vulnerabilities - [Google Chrome for Android](https://junglewise.ai/threats/technologies/chrome-for-android): 21 vulnerabilities - [Google ChromeOS](https://junglewise.ai/threats/technologies/chromeos): 20 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Google Pixel vulnerabilities", https://junglewise.ai/threats/technologies/google-pixel, 12 November 2026.