● Android Bulletin · August 2026

Android Security Bulletin: August 2026 Qualcomm GPU Kernel Triage

Technical triage of Android's August 2026 release addressing critical Qualcomm Adreno GPU kernel memory corruption and HAL zero-days.

52
Total CVEs
1
GPU Kernel Zero-Day
8.4
CVSS Qualcomm
High
Hardware Patch Action

Executive Triage & Risk Verdict

The August 2026 bulletin highlights CVE-2024-33066 in Qualcomm's Adreno GPU kernel driver (kgsl). Malicious apps could trigger out-of-bounds memory writes in the GPU ring-buffer to compromise the device kernel.

Curated Vulnerability Triage Matrix

CVE Identifier Subsystem / Component Impact CVSS In-The-Wild Exploitation?
CVE-2024-33066Qualcomm Adreno GPU (kgsl)Kernel Memory Corruption8.4 HighYES (Targeted Spyware)
CVE-2024-33067Qualcomm Modem DSPBuffer Overflow7.8 HighNo
CVE-2024-33068Android System UIPermission Bypass6.2 MediumNo
FEATURED CODE TEARDOWN

Deep Dive: Qualcomm Adreno GPU Kernel Memory Corruption Teardown →

Examine the C diff in drivers/gpu/msm/kgsl.c adding boundary verification checks to GPU command batch allocations.

← Browse Full Security Directory All Platform Security Updates →