EUVD-2026-73991
GHSA-h8r6-j72f-ccjh
Severity by source
AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Adjacent vector confirmed by Wi-Fi Direct radio range requirement; PR:L reflects minimal P2P peer-discovery association needed before sending bootstrap request.
Primary rating from Vendor (android).
CVSS VectorVendor: android
Lifecycle Timeline
5DescriptionCVE.org
In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
AnalysisAI
Heap buffer overflow in Android's Wi-Fi P2P (Wi-Fi Direct) provision discovery handler enables proximal unauthenticated attackers to achieve remote code execution on affected devices without requiring user interaction. The flaw resides in p2p_process_prov_disc_bootstrap_req() within p2p_pd.c, where a malformed provision discovery bootstrap request triggers an out-of-bounds write on the heap. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The target device must be running Android 16, Android 16-QPR2, or Android 17 with Wi-Fi P2P (Wi-Fi Direct) functionality enabled - this is enabled by default on Android when Wi-Fi is on, as P2P discovery can occur passively. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.0 vector (AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) captures the core risk well: adjacency requirement limits the attack surface to devices physically within Wi-Fi Direct range, but low complexity and no user interaction mean that once in range, exploitation is straightforward. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the September 2026 Android Security Bulletin patches available at https://source.android.com/docs/security/bulletin/2026/2026-09-01, which address this vulnerability in Android 16, Android 16-QPR2, and Android 17. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Android 16, 16-QPR2, and Android 17 devices and alert stakeholders to the vulnerability; disable Wi-Fi Direct where operationally feasible. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-122 – Heap-based Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today