Android Bulletin · August 2026

Android Security Bulletin: August 2026 Qualcomm GPU Kernel Triage

Technical triage of Android's August 2026 release addressing critical Qualcomm Adreno GPU kernel memory corruption and HAL zero-days.

52
Total CVEs
1
GPU Kernel Zero-Day
8.4
CVSS Qualcomm
High
Hardware Patch Action

Triage Exécutif et Verdict de Risque

The August 2026 bulletin highlights CVE-2024-33066 in Qualcomm's Adreno GPU kernel driver (kgsl). Malicious apps could trigger out-of-bounds memory writes in the GPU ring-buffer to compromise the device kernel.

Matrice de Triage des Vulnérabilités

Identifiant CVE Sous-système / Composant Impact CVSS Exploitation Active ?
CVE-2024-33066Qualcomm Adreno GPU (kgsl)Kernel Memory Corruption8.4 HighYES (Targeted Spyware)
CVE-2024-33067Qualcomm Modem DSPBuffer Overflow7.8 HighNo
CVE-2024-33068Android System UIPermission Bypass6.2 MediumNo
ANALYSE DE CODE DÉTAILLÉE

Deep Dive: Qualcomm Adreno GPU Kernel Memory Corruption Teardown →

Examine the C diff in drivers/gpu/msm/kgsl.c adding boundary verification checks to GPU command batch allocations.

← Parcourir l'Annuaire de Sécurité Tous les Bulletins de Sécurité →