PT-2026-49789 · Google · Android

Published 2026-06-16 · Updated 2026-06-16 · CVE-2026-0130

NVD

CVSS v3.1

3.5

Low

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

Fix

Out of bounds Read

Heap Based Buffer Overflow

Weakness Enumeration

CWE-125

CWE-122

Related Identifiers

CVE-2026-0130

Affected Products

Android

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-0130 · Security Note
• https://source.android.com/docs/security/bulletin/pixel/2026/2026-06-01 · Note