PT-2026-22678 · Google · Google Android

Vincent Donnefort · Published 2026-03-02 · Updated 2026-03-03 · CVE-2026-0030

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Android (affected versions not specified)

Description An issue exists in the host check page state range function within mem protect.c that may allow for a local escalation of privilege. The problem is caused by an incorrect bounds check, potentially leading to an out-of-bounds write. Exploitation does not require user interaction or additional execution privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-0030

Affected Products

Google Android

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-0030 · Security Note
• https://source.android.com/docs/security/bulletin/2026/2026-03-01 · Vendor Advisory
• https://android.googlesource.com/kernel/common/+/986614312222d4b3bdcf16840cdb4abdaed8a42d · Patch
• https://android.googlesource.com/kernel/common/+/f3a4b4d4a1fe2aface7de74ac257b8705b6de472 · Patch
• https://android.googlesource.com/kernel/common/+/aff2255dbe38dc7c57bac8d3ba9feed989289b20 · Patch
• https://twitter.com/vuldb/status/2028562780341854401 · Twitter Post
• https://t.me/CVEtracker/46151 · Telegram Post
• https://source.android.com/security/bulletin/2026-03-01 · Note
• https://twitter.com/VulmonFeeds/status/2028739862891766006 · Twitter Post
• https://twitter.com/TheHackerWire/status/2028580946002452919 · Twitter Post