CVE-2026-0119

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
6.8MEDIUM
EPSS
0.0%
top 98.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Android
Timeline
PublishedMar 10

Description

In usim_SendMCCMNCIndMsg of usim_Registration.c, there is a possible out of bounds write due to memory corruption. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 0.9 | Impact: 5.9

Affected Packages2 packages

▶Android:unknown:Pixel-family specific:0 — Pixel-family specific:2026-03-05
▶CVEListV5google/androidAndroid kernel

🔴Vulnerability Details

3
GHSA
GHSA-wxv3-cvhr-6w8f: In usim_SendMCCMNCIndMsg of usim_Registration↗2026-03-10
▶
CVEList
CVE-2026-0119: In usim_SendMCCMNCIndMsg of usim_Registration↗2026-03-10
▶
OSV
CVE-2026-0119: In usim_SendMCCMNCIndMsg of usim_Registration↗2026-03-01
▶
CVE-2026-0119 (MEDIUM CVSS 6.8) | In usim_SendMCCMNCIndMsg of usim_Re | cvebase.io