# Google Pixel Devices vulnerabilities Source: https://junglewise.ai/threats/technologies/pixel-devices Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/pixel-devices.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 27 vulnerabilities in Google Pixel Devices: 19 in the last 7 days and 26 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-59609, was published on 10 November 2026. Nothing in the last four weeks, down from 7 vulnerabilities in the four before. ## Counts - Last 7 days: 19 - Last 30 days: 19 - Last 90 days: 26 - All time: 27 (0 critical, 0 exploited in the wild) ## About Google Pixel Devices Firmware component for Google Pixel mobile devices. ## Latest Google Pixel Devices vulnerabilities - [CVE-2026-59609: PowerVR GPU kernel use-after-free in fence identifier handling](https://junglewise.ai/threats/cve-2026-59609-in-fence-manager-extract-iif-of-fence-manager-c-there-is-a) (info, published 10 Nov 2026) - [CVE-2026-59607: Google Pixel Face Auth TA privilege escalation in TzPipelineInputExtractor](https://junglewise.ai/threats/cve-2026-59607-in-tzpipelineinputextractor-of-tzpipelineinputextractor-cpp-there) (info, published 10 Nov 2026) - [CVE-2026-59594: Pixel HWCodec Firmware heap buffer overflow in encoder](https://junglewise.ai/threats/cve-2026-59594-in-spm-alloc-of-encoder-there-is-a-possible-heap-buffer-overflow) (info, published 10 Nov 2026) - [CVE-2026-58804: Pixel devices out-of-bounds write in graphics execution](https://junglewise.ai/threats/cve-2026-58804-in-executegraphcommand-of-multiple-files-there-is-a-possible-way) (info, published 10 Nov 2026) - [CVE-2026-58801: ARM SMMU v3 stale stream table entry information disclosure](https://junglewise.ai/threats/cve-2026-58801-in-smmu-domain-config-s1-of-arm-smmu-v3-c-there-is-a-possible-way) (info, published 10 Nov 2026) - [CVE-2026-58785: Google Pixel hwmgr elevation of privilege via uninitialized data](https://junglewise.ai/threats/cve-2026-58785-in-update-user-consent-of-main-rs-there-is-a-possible-elevation) (info, published 10 Nov 2026) - [CVE-2026-58778: Google Pixel use-after-free race condition privilege escalation](https://junglewise.ai/threats/cve-2026-58778-in-multiple-locations-there-is-a-possible-use-after-free-due-to-a) (info, published 10 Nov 2026) - [CVE-2026-58762: Android Trusty memory corruption in ac_get_prot_config](https://junglewise.ai/threats/cve-2026-58762-in-ac-get-prot-config-of-plat-trusty-c-there-is-a-possible-memory) (info, published 10 Nov 2026) - [CVE-2026-58757: Samsung MFC heap buffer overflow in enc_roi_buffer allocation](https://junglewise.ai/threats/cve-2026-58757-in-mfc-alloc-enc-roi-buffer-of-mfc-buf-c-there-is-a-possible-out) (info, published 10 Nov 2026) - [CVE-2026-58722: Android AOC CHRE heap buffer overflow in discovery handler](https://junglewise.ai/threats/cve-2026-58722-in-chppprocessdiscoverallresponse-of-system-chre-chpp-clients) (info, published 10 Nov 2026) - [CVE-2026-58681: Google Pixel MFC integer overflow out-of-bounds write](https://junglewise.ai/threats/cve-2026-58681-in-multiple-locations-there-is-a-possible-out-of-bounds-write-due) (info, published 10 Nov 2026) - [CVE-2026-57010: Google Pixel CHRE out-of-bounds write in data_manager](https://junglewise.ai/threats/cve-2026-57010-in-encodelastscanbufferelement-of-data-manager-cc-there-is-a) (info, published 10 Nov 2026) - [CVE-2026-56995: Pixel devices host allocator metadata corruption in shared memory](https://junglewise.ai/threats/cve-2026-56995-in-multiple-locations-there-is-a-possible-way-to-corrupt-host) (info, published 10 Nov 2026) - [CVE-2026-56944: Google Android pKVM SMMUv3 use-after-free in smmu_detach_dev](https://junglewise.ai/threats/cve-2026-56944-in-smmu-detach-dev-of-private-google-modules-iommu-arm-smmu-v3) (info, published 10 Nov 2026) - [CVE-2026-56909: Google Pixel firmware privilege escalation in voltage control](https://junglewise.ai/threats/cve-2026-56909-in-multiple-functions-of-sswrp-cpm-dtsi-there-is-a-possible-way) (info, published 10 Nov 2026) - [CVE-2026-56902: Google Pixel information disclosure due to logic error](https://junglewise.ai/threats/cve-2026-56902-in-multiple-locations-there-is-a-possible-information-disclosure) (info, published 10 Nov 2026) - [CVE-2026-55321: Google Pixel Secure Element heap buffer overflow in KeyMint ASN.1 parsing](https://junglewise.ai/threats/cve-2026-55321-in-parse-prime256v1-of-keymint-asn1-c-there-is-a-possible-heap) (info, published 10 Nov 2026) - [CVE-2026-0178: ARM SMMU-v3 DMA isolation bypass via stale stream table entries](https://junglewise.ai/threats/cve-2026-0178-in-multiple-functions-of-arm-smmu-v3-c-there-is-a-possible-way-to) (info, published 10 Nov 2026) - [CVE-2026-0175: Google Pixel key authorization bypass in wrapped key import](https://junglewise.ai/threats/cve-2026-0175-in-multiple-locations-there-is-a-possible-way-to-bypass-key) (info, published 10 Nov 2026) - [CVE-2026-56952: Android permission bypass in GDMC message handler](https://junglewise.ai/threats/cve-2026-56952-in-platform-msg-handler-init-of-default-msg-handlers-c-there-is-a) (medium, CVSS 6.7, published 6 Oct 2026) - [CVE-2026-56906: Linux kernel use-after-free in eventpoll](https://junglewise.ai/threats/cve-2026-56906-in-ep-free-of-eventpoll-c-there-is-a-possible-use-after-free-due) (high, CVSS 7, published 6 Oct 2026) - [CVE-2026-58766: ARM SMMU-v3 privilege escalation due to logic error](https://junglewise.ai/threats/cve-2026-58766-arm-smmu-v3-privilege-escalation-due-to-logic-error) (high, CVSS 7.8, published 15 Sep 2026) - [CVE-2026-56989: Google Pixel out-of-bounds write privilege escalation](https://junglewise.ai/threats/cve-2026-56989-google-pixel-out-of-bounds-write-privilege-escalation) (medium, CVSS 6.7, published 15 Sep 2026) - [CVE-2026-56974: Google Pixel libpixelimsmedia out-of-bounds write in AudioRtpPayloadEncoderNode](https://junglewise.ai/threats/cve-2026-56974-google-pixel-libpixelimsmedia-out-of-bounds-write-in) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-56923: Google Pixel kernel race condition memory corruption in tipc_virtio_dev](https://junglewise.ai/threats/cve-2026-56923-google-pixel-kernel-race-condition-memory-corruption-in-tipc) (medium, CVSS 6.4, published 15 Sep 2026) ## Most severe Google Pixel Devices vulnerabilities - [CVE-2026-56974: Google Pixel libpixelimsmedia out-of-bounds write in AudioRtpPayloadEncoderNode](https://junglewise.ai/threats/cve-2026-56974-google-pixel-libpixelimsmedia-out-of-bounds-write-in) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-58766: ARM SMMU-v3 privilege escalation due to logic error](https://junglewise.ai/threats/cve-2026-58766-arm-smmu-v3-privilege-escalation-due-to-logic-error) (high, CVSS 7.8, published 15 Sep 2026) - [CVE-2026-56906: Linux kernel use-after-free in eventpoll](https://junglewise.ai/threats/cve-2026-56906-in-ep-free-of-eventpoll-c-there-is-a-possible-use-after-free-due) (high, CVSS 7, published 6 Oct 2026) - [CVE-2026-56989: Google Pixel out-of-bounds write privilege escalation](https://junglewise.ai/threats/cve-2026-56989-google-pixel-out-of-bounds-write-privilege-escalation) (medium, CVSS 6.7, published 15 Sep 2026) - [CVE-2026-56952: Android permission bypass in GDMC message handler](https://junglewise.ai/threats/cve-2026-56952-in-platform-msg-handler-init-of-default-msg-handlers-c-there-is-a) (medium, CVSS 6.7, published 6 Oct 2026) - [CVE-2026-56923: Google Pixel kernel race condition memory corruption in tipc_virtio_dev](https://junglewise.ai/threats/cve-2026-56923-google-pixel-kernel-race-condition-memory-corruption-in-tipc) (medium, CVSS 6.4, published 15 Sep 2026) - [CVE-2026-0177: Google GSA out-of-bounds read in AES-GCM crypto operation](https://junglewise.ai/threats/cve-2026-0177-google-gsa-out-of-bounds-read-in-aes-gcm-crypto-operation) (medium, CVSS 4.4, published 15 Sep 2026) - [CVE-2026-0125: Google Pixel VPU use after free in vpu_ioctl.c](https://junglewise.ai/threats/cve-2026-0125-google-pixel-vpu-use-after-free-in-vpu-ioctl-c) (info, CVSS 7.8, published 16 Jun 2026) - [CVE-2026-59609: PowerVR GPU kernel use-after-free in fence identifier handling](https://junglewise.ai/threats/cve-2026-59609-in-fence-manager-extract-iif-of-fence-manager-c-there-is-a) (info, published 10 Nov 2026) - [CVE-2026-59607: Google Pixel Face Auth TA privilege escalation in TzPipelineInputExtractor](https://junglewise.ai/threats/cve-2026-59607-in-tzpipelineinputextractor-of-tzpipelineinputextractor-cpp-there) (info, published 10 Nov 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 7 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 5 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 2 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 19 | 0 | 0 | ## Other Google technologies - [Google Chrome](https://junglewise.ai/threats/technologies/chrome): 3,930 vulnerabilities - [Google Android](https://junglewise.ai/threats/technologies/android): 628 vulnerabilities - [Google Chrome for iOS](https://junglewise.ai/threats/technologies/chrome-for-ios): 79 vulnerabilities - [Google Pixel](https://junglewise.ai/threats/technologies/google-pixel): 72 vulnerabilities - [Google Cloud Platform](https://junglewise.ai/threats/technologies/google-cloud-platform): 43 vulnerabilities - [Google Chromium V8](https://junglewise.ai/threats/technologies/chromium-v8): 41 vulnerabilities - [Google Chromium](https://junglewise.ai/threats/technologies/chromium): 37 vulnerabilities - [Google TensorFlow](https://junglewise.ai/threats/technologies/tensorflow): 31 vulnerabilities - [Google Pixel Firmware](https://junglewise.ai/threats/technologies/pixel-firmware): 27 vulnerabilities - [Google Android Framework](https://junglewise.ai/threats/technologies/android-framework): 22 vulnerabilities - [Google Chrome for Android](https://junglewise.ai/threats/technologies/chrome-for-android): 21 vulnerabilities - [Google ChromeOS](https://junglewise.ai/threats/technologies/chromeos): 20 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Google Pixel Devices vulnerabilities", https://junglewise.ai/threats/technologies/pixel-devices, 12 November 2026.