PT-2026-24450 · Vpu · Vpu

Published 2026-03-10 · Updated 2026-03-11 · CVE-2026-0121

Positive Technologies · (AI Summary)

CVSS v3.1

2.9

Low

AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions VPU (affected versions not specified)

Description A use-after-free read issue exists in VPU due to a race condition. Successful exploitation of this issue could lead to local information disclosure and does not require additional execution privileges or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Race Condition

Weakness Enumeration

CWE-416

CWE-362

Related Identifiers

CVE-2026-0121

Affected Products

Vpu

References · 7

• https://source.android.com/docs/security/bulletin/pixel/2026/2026-03-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0121 · Security Note
• https://source.android.com/docs/security/bulletin/2026/2026-03-01 · Vendor Advisory
• https://twitter.com/vuln_tracker/status/2031544555309613433 · Twitter Post
• https://t.me/cveNotify/155001 · Telegram Post
• https://source.android.com/security/bulletin/pixel/2026-03-01 · Note
• https://twitter.com/CVEnew/status/2031504097040388337 · Twitter Post