● Android Bulletin · August 2026

Android Security Bulletin: August 2026 Qualcomm GPU Kernel Triage

Technical triage of Android's August 2026 release addressing critical Qualcomm Adreno GPU kernel memory corruption and HAL zero-days.

52
Total CVEs
1
GPU Kernel Zero-Day
8.4
CVSS Qualcomm
High
Hardware Patch Action

Анализ рисков и вердикт безопасности

The August 2026 bulletin highlights CVE-2024-33066 in Qualcomm's Adreno GPU kernel driver (kgsl). Malicious apps could trigger out-of-bounds memory writes in the GPU ring-buffer to compromise the device kernel.

Матрица приоритизации уязвимостей

Идентификатор CVE Подсистема / Компонент Последствия CVSS Активная эксплуатация?
CVE-2024-33066Qualcomm Adreno GPU (kgsl)Kernel Memory Corruption8.4 HighYES (Targeted Spyware)
CVE-2024-33067Qualcomm Modem DSPBuffer Overflow7.8 HighNo
CVE-2024-33068Android System UIPermission Bypass6.2 MediumNo
РАЗБОР ИСХОДНОГО КОДА

Deep Dive: Qualcomm Adreno GPU Kernel Memory Corruption Teardown →

Examine the C diff in drivers/gpu/msm/kgsl.c adding boundary verification checks to GPU command batch allocations.

← Полный каталог уязвимостей Все бюллетени безопасности →