PT-2026-22679 · Unknown · Mem Protect

CVE-2026-0031 · Published 2026-03-02 · Updated 2026-03-03

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions mem protect (affected versions not specified)

Description The software contains a possible out-of-bounds write issue stemming from an integer overflow in multiple functions within the mem protect.c file. Successful exploitation of this issue could lead to local escalation of privilege without requiring additional execution privileges or user interaction. The vulnerable code involves an integer overflow that results in writing data beyond allocated memory boundaries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

AZL-79356

AZL-79382

CVE-2026-0031

Affected Products

Mem Protect

References · 11

• https://osv.dev/vulnerability/AZL-79382 · Vendor Advisory
• https://android.googlesource.com/kernel/common/+/986614312222d4b3bdcf16840cdb4abdaed8a42d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-0031 · Security Note
• https://android.googlesource.com/kernel/common/+/aff2255dbe38dc7c57bac8d3ba9feed989289b20 · Patch
• https://android.googlesource.com/kernel/common/+/f3a4b4d4a1fe2aface7de74ac257b8705b6de472 · Patch
• https://osv.dev/vulnerability/AZL-79356 · Vendor Advisory
• https://source.android.com/docs/security/bulletin/2026/2026-03-01 · Vendor Advisory
• https://source.android.com/security/bulletin/2026-03-01 · Note
• https://twitter.com/VulmonFeeds/status/2028716824443896124 · Twitter Post
• https://twitter.com/TheHackerWire/status/2028591122508030321 · Twitter Post
• https://t.me/CVEtracker/46152 · Telegram Post