PT-2026-22682 · Unknown · Mem Protect

Published 2026-03-02 · Updated 2026-03-05 · CVE-2026-0038

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions mem protect (affected versions not specified)

Description A logic error exists in multiple functions within the mem protect.c file, potentially allowing for arbitrary code execution. Successful exploitation could lead to local privilege escalation without requiring additional execution privileges or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-0038

Affected Products

Mem Protect

References · 15

• https://android.googlesource.com/kernel/common/+/513ea99ae008b81dd266bf6e361627c058ddde41 · Patch
• https://android.googlesource.com/kernel/common/+/652b7b6bf9a62cc12c3a071bab4e92314f046739 · Patch
• https://android.googlesource.com/kernel/common/+/b23a5bfa1fb8f9525e21f095a87486a2bd856321 · Patch
• https://android.googlesource.com/kernel/common/+/f090d4b083a9ef4831f99e692c239542dd385cb4 · Patch
• https://source.android.com/docs/security/bulletin/2026/2026-03-01 · Vendor Advisory
• https://android.googlesource.com/kernel/common/+/7e1d15d29b7fe0f858926a8bcaf929b75db9e52a · Patch
• https://android.googlesource.com/kernel/common/+/1bf8033b56a45165602f8116e0a0d2e767f1e8ae · Patch
• https://android.googlesource.com/kernel/common/+/d884f499434c224285c30d460681f1ce76a8cf1f · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-0038 · Security Note
• https://reddit.com/r/ItalyInformatica/comments/1rluii7/android_security_bulletin_di_marzo_2026_129 · Reddit Post
• https://t.me/msrcreports/3310 · Telegram Post
• https://t.me/CVEtracker/46157 · Telegram Post
• https://source.android.com/security/bulletin/2026-03-01 · Note
• https://twitter.com/TheHackerWire/status/2028606270429913478 · Twitter Post
• https://t.me/cveNotify/153975 · Telegram Post