PT-2026-24448 · Unknown · Usim Registration.C

Published 2026-03-10 · Updated 2026-03-10 · CVE-2026-0119

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions versions prior to 2026-0119

Description An out-of-bounds write due to memory corruption exists in the usim SendMCCMNCIndMsg function within usim Registration.c. Successful exploitation of this issue may lead to physical escalation of privilege without requiring additional execution privileges or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-0119

Affected Products

Usim Registration.C

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-0119 · Security Note
• https://source.android.com/docs/security/bulletin/2026/2026-03-01 · Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2026-03-01 · Note
• https://t.me/cveNotify/154999 · Telegram Post
• https://twitter.com/CVEnew/status/2031504099103928421 · Twitter Post