CVE-2026-0111

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
9.8CRITICAL
EPSS
0.2%
top 54.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Android
Timeline
PublishedMar 10

Description

In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶Android:unknown:Pixel-family specific:0 — Pixel-family specific:2026-03-05
▶CVEListV5google/androidAndroid kernel

🔴Vulnerability Details

3
GHSA
GHSA-225v-w4gw-cgwv: In ns_GetUserData of ns_SmscbUtilities↗2026-03-10
▶
CVEList
CVE-2026-0111: In ns_GetUserData of ns_SmscbUtilities↗2026-03-10
▶
OSV
CVE-2026-0111: In ns_GetUserData of ns_SmscbUtilities↗2026-03-01
▶
CVE-2026-0111 (CRITICAL CVSS 9.8) | In ns_GetUserData of ns_SmscbUtilit | cvebase.io