Memory Corruption Vulnerability in AudioSdpParser of Android Products
CVE-2026-0162

8.8HIGH

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
16 June 2026

What is CVE-2026-0162?

A memory corruption vulnerability exists in the AudioSdpParser component of Android. This issue arises from a type confusion in the ParsePayloads function, potentially enabling attackers to execute arbitrary code remotely without requiring user interaction. Successful exploitation can lead to unauthorized actions within the affected systems, making it crucial for users to stay updated with patches provided by the vendor.

Affected Version(s)

Android Android kernel

References

https://source.android.com/docs/security/bulletin/pixel/2...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.