PT-2026-4710 · Unknown · Grapheneos

Published 2026-01-25 · Updated 2026-06-02 · CVE-2026-0039

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions GrapheneOS versions prior to 2026030200

Description An integer overflow in multiple functions within ubsan throwing runtime.cpp can lead to a persistent denial of service. This issue allows for remote denial of service without requiring additional execution privileges or user interaction.

Recommendations Update to version 2026030200.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2026-07680

CVE-2026-0039

Affected Products

Grapheneos

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-0039 · Security Note
• https://bdu.fstec.ru/vul/2026-07680 · Security Note
• https://source.android.com/docs/security/bulletin/2026/2026-06-01 · Vendor Advisory
• https://source.android.com/docs/security/bulletin/2026/2026-06-01?hl=ru · Note
• https://twitter.com/canyie2977/status/2061669859419992171 · Twitter Post
• https://twitter.com/GrapheneOS/status/2015510661019644403 · Twitter Post
• https://twitter.com/grok/status/2029071561940930806 · Twitter Post
• https://twitter.com/grok/status/2029073355710595490 · Twitter Post