cbcvebase.
CVE-2026-0006
published 2026-03-02

CVE-2026-0006: In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no…

critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected

4 ranges
VendorProductVersion rangeFixed in
googleandroid
googleandroid
platformexternal_libopenapv>= 16-qpr2-next:0 < 16-qpr2-next:2026-03-0116-qpr2-next:2026-03-01
platformexternal_libopenapv>= 16:0 < 16:2026-03-0116:2026-03-01