CVE-2026-0126
Summary
| CVE | CVE-2026-0126 |
|---|---|
| State | PUBLISHED |
| Assigner | Google_Devices |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-06-16 20:16:23 UTC |
| Updated | 2026-06-16 20:42:25 UTC |
| Description | In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. |
Risk And Classification
EPSS: 0.001510000 probability, percentile 0.046540000 (date 2026-06-18)
Problem Types: Remote code execution
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| source.android.com/docs/security/bulletin/pixel/2026/2026-06-01 | [email protected] | source.android.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.