CVE-2026-0121 PUBLISHED CVSS 2.9000000953674316 LOW

In VPU, there is a possible use-after-free read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS 0.01% · 0.3th percentile

Risk Scores

CVSS v3.1
2.9000000953674316
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.01%
0.3th percentile

Affected Products

VendorProductVersions
googleandroid
GoogleAndroidAndroid kernel

Timeline

References

Open in Interactive Console →