CVE-2026-0112 PUBLISHED CVSS 7.400000095367432 HIGH

In vpu_open_inst of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS 0.01% · 0.5th percentile

Risk Scores

CVSS v3.1
7.400000095367432
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.01%
0.5th percentile

Affected Products

VendorProductVersions
GoogleAndroidAndroid kernel
googleandroid

Timeline

References

Open in Interactive Console →