# Google Pixel Firmware vulnerabilities Source: https://junglewise.ai/threats/technologies/pixel-firmware Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/pixel-firmware.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 27 vulnerabilities in Google Pixel Firmware: 18 in the last 7 days and 26 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-59601, was published on 10 November 2026. Nothing in the last four weeks, down from 8 vulnerabilities in the four before. ## Counts - Last 7 days: 18 - Last 30 days: 18 - Last 90 days: 26 - All time: 27 (0 critical, 0 exploited in the wild) ## About Google Pixel Firmware Firmware for Google Pixel mobile devices. ## Latest Google Pixel Firmware vulnerabilities - [CVE-2026-59601: Google Pixel firmware heap buffer overflow in CLDMA audio processing](https://junglewise.ai/threats/cve-2026-59601-in-calculatesamplerate-of-cldma-alcedo-cc-there-is-a-possible) (info, published 10 Nov 2026) - [CVE-2026-59587: Google Pixel firmware out-of-bounds write in NCI command handler](https://junglewise.ai/threats/cve-2026-59587-in-stpropnci-prop-st-build-set-custom-polling-cmd-of-stpropnci) (info, published 10 Nov 2026) - [CVE-2026-59574: Google Pixel firmware out of bounds read/write in log formatting](https://junglewise.ai/threats/cve-2026-59574-in-notifypollingloopframes-of-hal-fwlog-cc-there-is-a-possible) (info, published 10 Nov 2026) - [CVE-2026-58808: Google Pixel firmware information disclosure on warm reset](https://junglewise.ai/threats/cve-2026-58808-in-multiple-locations-there-is-a-possible-way-to-dump-secure) (info, published 10 Nov 2026) - [CVE-2026-58805: Google Pixel firmware memory bounds check in secure boot](https://junglewise.ai/threats/cve-2026-58805-in-multiple-locations-there-is-a-possible-way-to-zero-arbitrary) (info, published 10 Nov 2026) - [CVE-2026-58799: Google Pixel firmware out of bounds write in rmmi_utility](https://junglewise.ai/threats/cve-2026-58799-in-multiple-functions-of-rmmi-utility-c-there-is-a-possible-way) (info, published 10 Nov 2026) - [CVE-2026-58797: Google Pixel firmware logic error in register_dump_dpa](https://junglewise.ai/threats/cve-2026-58797-in-register-dump-dpa-of-sswrp-pcie-c-there-is-a-possible-logic) (info, published 10 Nov 2026) - [CVE-2026-58788: Google Pixel out-of-bounds write in stpropnci_process_std](https://junglewise.ai/threats/cve-2026-58788-in-stpropnci-process-std-of-stpropnci-std-cc-there-is-a-possible) (info, published 10 Nov 2026) - [CVE-2026-58705: Google Pixel firmware out-of-bounds heap write in gscan](https://junglewise.ai/threats/cve-2026-58705-in-handleevent-of-gscan-cpp-there-is-a-possible-way-to-trigger-an) (info, published 10 Nov 2026) - [CVE-2026-58690: Google Pixel trusted execution environment out-of-bounds write](https://junglewise.ai/threats/cve-2026-58690-in-multiple-functions-of-bitmap-image-buffer-h-there-is-a) (info, published 10 Nov 2026) - [CVE-2026-58684: Google Pixel firmware permission bypass in ACFW](https://junglewise.ai/threats/cve-2026-58684-in-smmu-config-l3tt-of-smmu-c-there-is-a-possible-permission) (info, published 10 Nov 2026) - [CVE-2026-58680: Google Pixel firmware permission bypass in cpm_mbox](https://junglewise.ai/threats/cve-2026-58680-in-cpm-mbox-power-ctrl-sswrp-of-cpm-mbox-c-there-is-a-possible) (info, published 10 Nov 2026) - [CVE-2026-57043: TIPC Virtio device off-by-one memory corruption on probe failure](https://junglewise.ai/threats/cve-2026-57043-in-tipc-dev-probe-of-tipc-virtio-dev-c-there-is-a-possible-way-to) (info, published 10 Nov 2026) - [CVE-2026-57036: Google Pixel firmware logic error in GDMC VDU](https://junglewise.ai/threats/cve-2026-57036-in-send-vdu-directive-of-gdmc-gsp-dev-bmsm-plat-lga-vdu-c-there) (info, published 10 Nov 2026) - [CVE-2026-56966: Google Pixel firmware privilege escalation via stale memory mappings](https://junglewise.ai/threats/cve-2026-56966-in-committobuffer-of-hal-override-options-bundle-cc-there-is-a) (info, published 10 Nov 2026) - [CVE-2026-56933: Google Pixel firmware buffer overflow in AOC](https://junglewise.ai/threats/cve-2026-56933-in-recordaptx-of-efw-ap-transport-c-there-is-a-possible-non-heap) (info, published 10 Nov 2026) - [CVE-2026-56911: Google Pixel firmware heap buffer overflow in hwcrypto_proxy](https://junglewise.ai/threats/cve-2026-56911-in-handle-fips-hmac-req-of-hwcrypto-proxy-c-there-is-a-possible) (info, published 10 Nov 2026) - [CVE-2026-14447: Google Pixel firmware out-of-bounds address disclosure via off-by-one check](https://junglewise.ai/threats/cve-2026-14447-in-ext-mem-obj-get-page-of-memss-mfw-c-there-is-a-possible-way-to) (info, published 10 Nov 2026) - [CVE-2026-58726: Google Pixel GPCA permission bypass in FsmReleaseKey](https://junglewise.ai/threats/cve-2026-58726-google-pixel-gpca-permission-bypass-in-fsmreleasekey) (medium, CVSS 6.7, published 15 Sep 2026) - [CVE-2026-58710: Google Pixel BigOcean out-of-bounds write in film grain decoding](https://junglewise.ai/threats/cve-2026-58710-google-pixel-bigocean-out-of-bounds-write-in-film-grain-decoding) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-58698: Google Pixel firmware permission bypass in AP PMIC handler](https://junglewise.ai/threats/cve-2026-58698-google-pixel-firmware-permission-bypass-in-ap-pmic-handler) (medium, CVSS 6.7, published 15 Sep 2026) - [CVE-2026-58691: Google Pixel GPCA permission bypass in fsm.c](https://junglewise.ai/threats/cve-2026-58691-google-pixel-gpca-permission-bypass-in-fsm-c) (high, CVSS 8.4, published 15 Sep 2026) - [CVE-2026-56985: Google Pixel KeyMint type confusion privilege escalation](https://junglewise.ai/threats/cve-2026-56985-google-pixel-keymint-type-confusion-privilege-escalation) (high, CVSS 8.4, published 15 Sep 2026) - [CVE-2026-56958: Google Pixel kernel out-of-bounds read in gf_algo.c](https://junglewise.ai/threats/cve-2026-56958-google-pixel-kernel-out-of-bounds-read-in-gf-algo-c) (medium, CVSS 5.5, published 15 Sep 2026) - [CVE-2026-56892: Google Pixel Secure World information disclosure in ReadDataElement](https://junglewise.ai/threats/cve-2026-56892-google-pixel-secure-world-information-disclosure-in) (medium, CVSS 6.2, published 15 Sep 2026) ## Most severe Google Pixel Firmware vulnerabilities - [CVE-2026-58710: Google Pixel BigOcean out-of-bounds write in film grain decoding](https://junglewise.ai/threats/cve-2026-58710-google-pixel-bigocean-out-of-bounds-write-in-film-grain-decoding) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-58691: Google Pixel GPCA permission bypass in fsm.c](https://junglewise.ai/threats/cve-2026-58691-google-pixel-gpca-permission-bypass-in-fsm-c) (high, CVSS 8.4, published 15 Sep 2026) - [CVE-2026-56985: Google Pixel KeyMint type confusion privilege escalation](https://junglewise.ai/threats/cve-2026-56985-google-pixel-keymint-type-confusion-privilege-escalation) (high, CVSS 8.4, published 15 Sep 2026) - [CVE-2026-58726: Google Pixel GPCA permission bypass in FsmReleaseKey](https://junglewise.ai/threats/cve-2026-58726-google-pixel-gpca-permission-bypass-in-fsmreleasekey) (medium, CVSS 6.7, published 15 Sep 2026) - [CVE-2026-58698: Google Pixel firmware permission bypass in AP PMIC handler](https://junglewise.ai/threats/cve-2026-58698-google-pixel-firmware-permission-bypass-in-ap-pmic-handler) (medium, CVSS 6.7, published 15 Sep 2026) - [CVE-2026-56892: Google Pixel Secure World information disclosure in ReadDataElement](https://junglewise.ai/threats/cve-2026-56892-google-pixel-secure-world-information-disclosure-in) (medium, CVSS 6.2, published 15 Sep 2026) - [CVE-2026-56958: Google Pixel kernel out-of-bounds read in gf_algo.c](https://junglewise.ai/threats/cve-2026-56958-google-pixel-kernel-out-of-bounds-read-in-gf-algo-c) (medium, CVSS 5.5, published 15 Sep 2026) - [CVE-2026-0183: Google Pixel CPM information disclosure via confused deputy](https://junglewise.ai/threats/cve-2026-0183-google-pixel-cpm-information-disclosure-via-confused-deputy) (medium, CVSS 4.4, published 15 Sep 2026) - [CVE-2026-0131: Google Pixel libpixelimsmedia integer overflow in RtpPacket::decodePacket](https://junglewise.ai/threats/cve-2026-0131-google-pixel-libpixelimsmedia-integer-overflow-in-rtppacket) (info, CVSS 7.8, published 16 Jun 2026) - [CVE-2026-59601: Google Pixel firmware heap buffer overflow in CLDMA audio processing](https://junglewise.ai/threats/cve-2026-59601-in-calculatesamplerate-of-cldma-alcedo-cc-there-is-a-possible) (info, published 10 Nov 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 8 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 8 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 18 | 0 | 0 | ## Other Google technologies - [Google Chrome](https://junglewise.ai/threats/technologies/chrome): 3,930 vulnerabilities - [Google Android](https://junglewise.ai/threats/technologies/android): 628 vulnerabilities - [Google Chrome for iOS](https://junglewise.ai/threats/technologies/chrome-for-ios): 79 vulnerabilities - [Google Pixel](https://junglewise.ai/threats/technologies/google-pixel): 72 vulnerabilities - [Google Cloud Platform](https://junglewise.ai/threats/technologies/google-cloud-platform): 43 vulnerabilities - [Google Chromium V8](https://junglewise.ai/threats/technologies/chromium-v8): 41 vulnerabilities - [Google Chromium](https://junglewise.ai/threats/technologies/chromium): 37 vulnerabilities - [Google TensorFlow](https://junglewise.ai/threats/technologies/tensorflow): 31 vulnerabilities - [Google Pixel Devices](https://junglewise.ai/threats/technologies/pixel-devices): 27 vulnerabilities - [Google Android Framework](https://junglewise.ai/threats/technologies/android-framework): 22 vulnerabilities - [Google Chrome for Android](https://junglewise.ai/threats/technologies/chrome-for-android): 21 vulnerabilities - [Google ChromeOS](https://junglewise.ai/threats/technologies/chromeos): 20 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Google Pixel Firmware vulnerabilities", https://junglewise.ai/threats/technologies/pixel-firmware, 12 November 2026.