In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-0006US | — | Exploit | ||
In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privile… | ||||
02
references
External citations — patches, advisories, analysis.
- https://android.googlesource.com/platform/external/libopenapv/+/86a76fd73bf7636af018331d4419eaa56ca95083FIX
- https://android.googlesource.com/platform/external/libopenapv/+/c81fcd419c489dd4aa9efd0ed41fb6c38f853b4fFIX
- https://android.googlesource.com/platform/external/libopenapv/+/cf0a0e7a810e5a0f6e50f433c1d723b12160e8ddFIX
- https://source.android.com/security/bulletin/2026-03-01ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan