ГлавнаяУязвимости → CVE-2026-0110
9.8критическая

CVE-2026-0110

Описание

In MM_DATA_IND of cn_NrSmMsgHdlrFromMM.cpp, there is a possible EoP due to memory corruption. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Затрагиваемое ПО
Google Android
CVSS
Балл9.8 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://source.android.com/docs/security/bulletin/2026/2026-03-01https://source.android.com/docs/security/bulletin/pixel/2026/2026-03-01