CVE-2026-0136
published 2026-06-16CVE-2026-0136: In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution…
PriorityP344high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.27%
17.7th percentile
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Google Android out-of-bounds
vuldb·2026-06-16
CVE-2026-0136 [CRITICAL] Google Android out-of-bounds
A vulnerability, which was classified as critical, has been found in Google Android. The affected element is an unknown function. Performing a manipulation results in out-of-bounds read.
This vulnerability is identified as CVE-2026-0136. The attack can be initiated remotely. There is not any exploit available.
GHSA
In Modem, there is a possible out of bounds read due to a missing bounds check.
ghsa_unreviewed·2026-06-16
CVE-2026-0136 [MEDIUM] CWE-120 In Modem, there is a possible out of bounds read due to a missing bounds check.
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2023-52971 mariadb: MariaDB Server Crash
bugzilla·2025-03-08·CVSS 4.9
CVE-2023-52971 [MEDIUM] CVE-2023-52971 mariadb: MariaDB Server Crash
CVE-2023-52971 mariadb: MariaDB Server Crash
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 10
Via RHSA-2026:0136 https://access.redhat.com/errata/RHSA-2026:0136
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Via RHSA-2026:0247 https://access.redhat.com/errata/RHSA-2026:0247
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 8
Via RHSA-2026:6435 https://access.redhat.com/errata/RHSA-2026:6435
Bugzilla
CVE-2023-52970 mariadb: MariaDB Server Crash via Item_direct_view_ref
bugzilla·2025-03-08·CVSS 4.9
CVE-2023-52970 [MEDIUM] CVE-2023-52970 mariadb: MariaDB Server Crash via Item_direct_view_ref
CVE-2023-52970 mariadb: MariaDB Server Crash via Item_direct_view_ref
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transformer_for_where.
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Via RHSA-2025:19584 https://access.redhat.com/errata/RHSA-2025:19584
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 8
Via RHSA-2025:19572 https://access.redhat.com/errata/RHSA-2025:19572
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 10
Via RHSA-2026:0136 https://access.redhat.com/errata/RHSA-2026:0136
---
This issue has been addressed in the fo
2026-06-16
Published