CVE-2026-0134
published 2026-06-16CVE-2026-0134: In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory reset due to a logic error in the code. This could lead to local…
PriorityP424
EPSS
0.07%
0.1th percentile
In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory reset due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Google Android kernel Factory Reset recovery_ui.cpp information disclosure
vuldb·2026-06-16
CVE-2026-0134 [LOW] Google Android kernel Factory Reset recovery_ui.cpp information disclosure
A vulnerability has been found in Google Android kernel and classified as critical. This affects an unknown part of the file recovery_ui.cpp of the component Factory Reset Handler. This manipulation causes information disclosure.
This vulnerability is registered as CVE-2026-0134. The attack needs to be launched locally. No exploit is available.
GHSA
In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory reset due to a logic error in the code.
ghsa_unreviewed·2026-06-16
CVE-2026-0134 [LOW] CWE-1188 In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory reset due to a logic error in the code.
In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory reset due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-06-16
Published