Use After Free Vulnerability in Android Products by Google
CVE-2026-0163
9.8CRITICAL
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-0163?
A significant vulnerability exists in the Android operating system, specifically within the vpu_ioctl.c file, where multiple functions permit a use after free scenario. This flaw could allow an attacker to escalate privileges remotely without requiring any interaction from users, making it particularly dangerous. Proper attention is needed to mitigate risks associated with this vulnerability, as it can potentially expose systems to unauthorized access and compromise.
Affected Version(s)
Android Android kernel
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.