CVE-2026-0032

Published: Mar 2, 2026Modified: Mar 6, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected (1)

Products: Google: Android

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Android	All versions

Related CWEs

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (3)

https://android.googlesource.com/kernel/common/+/048aebb861d2f3ed4d260a4c9f4e72a43cae9b1e

Source: security@android.com

PatchProduct

https://android.googlesource.com/kernel/common/+/33eb6bde43d03bd826214bbb390de62ca19621b9

Source: security@android.com

PatchProduct

https://source.android.com/docs/security/bulletin/2026/2026-03-01

Source: security@android.com

Timeline

No history available yet.