CVE-2026-0139

Analyzed Analyzed - Analysis Complete

BaseFortify

Publication date: 2026-06-16

Last updated on: 2026-06-17

Assigner: Google Devices

Description

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-16

Last Modified

2026-06-17

Generated

2026-10-16

AI Q&A

2026-06-16

EPSS Evaluated

2026-10-14

NVD

CVE-2026-0139

EUVD

EUVD-2026-37173

Affected Vendors & Products

Vendor	Product	Version / Range
google	android	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Modem component and is caused by a missing bounds check, which leads to a possible out of bounds write.

Because of this flaw, an attacker could execute remote code without needing any additional execution privileges or user interaction.

Impact Analysis

The vulnerability could allow an attacker to execute arbitrary code remotely on the affected system.

Since no user interaction or extra privileges are required, the attacker could potentially take control of the system or cause it to behave unexpectedly.

Hi! I’m here to help you understand CVE-2026-0139. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70