Use After Free Vulnerability in Android Products by Google
CVE-2026-0163

9.8CRITICAL

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
4 August 2026

What is CVE-2026-0163?

A significant vulnerability exists in the Android operating system, specifically within the vpu_ioctl.c file, where multiple functions permit a use after free scenario. This flaw could allow an attacker to escalate privileges remotely without requiring any interaction from users, making it particularly dangerous. Proper attention is needed to mitigate risks associated with this vulnerability, as it can potentially expose systems to unauthorized access and compromise.

Affected Version(s)

Android Android kernel

References

https://source.android.com/docs/security/bulletin/pixel/2...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.