CVE-2026-0124
Out-of-Bounds Write in [Component] Causes Local Privilege Escalation
Publication date: 2026-03-10
Last updated on: 2026-03-11
Assigner: Google Devices
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| android | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is caused by a missing bounds check that allows an out of bounds write. This means that the software writes data outside the allocated memory area, which can corrupt memory and lead to unexpected behavior.
Exploitation of this vulnerability can lead to a local escalation of privilege without requiring any additional execution privileges or user interaction.
How can this vulnerability impact me? :
The impact of this vulnerability is a local escalation of privilege, meaning an attacker who already has some access to the system can gain higher privileges.
No additional execution privileges or user interaction are needed to exploit this vulnerability, which increases the risk.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
I don't know