PT-2026-4713 · Google · Android

Published 2026-01-25 · Updated 2026-06-01 · CVE-2026-0042

Mitre

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

In multiple functions of ubsan throwing runtime.cpp, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2026-0042

Affected Products

Android

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-0042 · Security Note
• https://twitter.com/GrapheneOS/status/2015510661019644403 · Twitter Post
• https://source.android.com/docs/security/bulletin/2026/2026-06-01 · Note