PT-2026-49810 · Google · Android

Published 2026-06-16 · Updated 2026-06-16 · CVE-2026-0152

NVD

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In OSMMapPMRGeneric of pmr os.c, there is a possible way to leverage a system call to system call to maliciously expand the VMA out of bounds due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2026-0152

Affected Products

Android

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-0152 · Security Note
• https://source.android.com/docs/security/bulletin/pixel/2026/2026-06-01 · Note