CVE-2026-0120

CWE-787 — Out-of-bounds Write4 documents4 sources

Severity

9.8CRITICAL

EPSS

0.2%

top 54.40%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Google Android

Timeline

PublishedMar 10

Description

In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶Android:unknown:Pixel-family specific:0 — Pixel-family specific:2026-03-05

▶CVEListV5google/androidAndroid kernel

🔴Vulnerability Details

GHSA

GHSA-mvj6-pf6m-p6vf: In modem, there is a possible out of bounds write due to an incorrect bounds check↗2026-03-10

▶

CVEList

CVE-2026-0120: In modem, there is a possible out of bounds write due to an incorrect bounds check↗2026-03-10

▶

OSV

CVE-2026-0120: In modem, there is a possible out of bounds write due to an incorrect bounds check↗2026-03-01

▶