● Android Bulletin · August 2026

Android Security Bulletin: August 2026 Qualcomm GPU Kernel Triage

Technical triage of Android's August 2026 release addressing critical Qualcomm Adreno GPU kernel memory corruption and HAL zero-days.

52
Total CVEs
1
GPU Kernel Zero-Day
8.4
CVSS Qualcomm
High
Hardware Patch Action

漏洞风险分类与修复裁决

The August 2026 bulletin highlights CVE-2024-33066 in Qualcomm's Adreno GPU kernel driver (kgsl). Malicious apps could trigger out-of-bounds memory writes in the GPU ring-buffer to compromise the device kernel.

重点漏洞分类评级矩阵

CVE 编号 核心子系统 / 组件 影响程度 CVSS 是否在野利用？
CVE-2024-33066Qualcomm Adreno GPU (kgsl)Kernel Memory Corruption8.4 HighYES (Targeted Spyware)
CVE-2024-33067Qualcomm Modem DSPBuffer Overflow7.8 HighNo
CVE-2024-33068Android System UIPermission Bypass6.2 MediumNo
深度源码剖析

Deep Dive: Qualcomm Adreno GPU Kernel Memory Corruption Teardown →

Examine the C diff in drivers/gpu/msm/kgsl.c adding boundary verification checks to GPU command batch allocations.

← 浏览完整安全目录 所有平台安全更新 →