PT-2026-45591 · Google · Android

Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-0085

NVD

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-0085

Affected Products

Android

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-0085 · Security Note
• https://source.android.com/docs/security/bulletin/2026/2026-06-01 · Note