GHSA-wxv3-cvhr-6w8f

GHSA-wxv3-cvhr-6w8f PUBLISHED CVSS 6.800000190734863 MEDIUM

In usim_SendMCCMNCIndMsg of usim_Registration.c, there is a possible out of bounds write due to memory corruption. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Risk Scores

CVSS 3.1

6.800000190734863

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Timeline

Mar 10, 2026 CVE Published
Mar 11, 2026 CVE Updated
Apr 10, 2026 Security Advisory

References

https://nvd.nist.gov/vuln/detail/CVE-2026-0119 advisory
https://source.android.com/docs/security/bulletin/2026/2026-03-01 url
https://source.android.com/security/bulletin/pixel/2026-03-01 url

Open in Interactive Console →