● Android Bulletin · August 2026

Android Security Bulletin: August 2026 Qualcomm GPU Kernel Triage

Technical triage of Android's August 2026 release addressing critical Qualcomm Adreno GPU kernel memory corruption and HAL zero-days.

52
Total CVEs
1
GPU Kernel Zero-Day
8.4
CVSS Qualcomm
High
Hardware Patch Action

보안 릴리스 분석 및 위험성 평가

The August 2026 bulletin highlights CVE-2024-33066 in Qualcomm's Adreno GPU kernel driver (kgsl). Malicious apps could trigger out-of-bounds memory writes in the GPU ring-buffer to compromise the device kernel.

핵심 취약점 트리아지 매트릭스

CVE 식별자 서브시스템 / 구성 요소 영향 CVSS 실제 악용 여부?
CVE-2024-33066Qualcomm Adreno GPU (kgsl)Kernel Memory Corruption8.4 HighYES (Targeted Spyware)
CVE-2024-33067Qualcomm Modem DSPBuffer Overflow7.8 HighNo
CVE-2024-33068Android System UIPermission Bypass6.2 MediumNo
주목할 코드 분석

Deep Dive: Qualcomm Adreno GPU Kernel Memory Corruption Teardown →

Examine the C diff in drivers/gpu/msm/kgsl.c adding boundary verification checks to GPU command batch allocations.

← 전체 보안 디렉터리 보기 모든 플랫폼 보안 업데이트 →