PT-2026-24453 · Google · Android+1

Christopher Wade · Published 2026-03-10 · Updated 2026-05-01 · CVE-2026-0124

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Google Android (affected versions not specified)

Description An out-of-bounds write condition exists due to a missing bounds check. This issue could allow for local escalation of privilege without requiring additional execution privileges or user interaction. The issue is reported to affect Pixel devices and could potentially lead to root access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-0124

Affected Products

Android

Pixel

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-0124 · Security Note
• https://source.android.com/docs/security/bulletin/pixel/2026/2026-03-01 · Vendor Advisory
• https://twitter.com/romashka_tea/status/2050166699169604087 · Twitter Post
• https://twitter.com/0dayPublishing/status/2031477461507096608 · Twitter Post
• https://source.android.com/security/bulletin/pixel/2026-03-01 · Note
• https://twitter.com/ptdbugs/status/2031623200333861331 · Twitter Post
• https://twitter.com/CVEnew/status/2031504093835841901 · Twitter Post
• https://twitter.com/vuldb/status/2031513575358083460 · Twitter Post
• https://t.me/cveNotify/155004 · Telegram Post