CVE-2026-0124

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
10.0CRITICAL
EPSS
0.0%
top 94.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Android
Timeline
PublishedMar 10

Description

There is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Affected Packages2 packages

▶Android:unknown:Pixel-family specific:0 — Pixel-family specific:2026-03-05
▶CVEListV5google/androidAndroid Kernel

🔴Vulnerability Details

3
GHSA
GHSA-3w79-2w8p-46rm: There is a possible out of bounds write due to a missing bounds check↗2026-03-10
▶
CVEList
CVE-2026-0124: There is a possible out of bounds write due to a missing bounds check↗2026-03-10
▶
OSV
CVE-2026-0124: There is a possible out of bounds write due to a missing bounds check↗2026-03-01
▶
CVE-2026-0124 (CRITICAL CVSS 10) | There is a possible out of bounds w | cvebase.io