EUVD-2026-74022
GHSA-r7p6-r9pv-h9xv
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Requires prior local code execution (AV:L/PR:L); multiple overflow sites make triggering straightforward (AC:L); successful privilege escalation yields full device control (C:H/I:H/A:H).
Primary rating from Vendor (android).
CVSS VectorVendor: android
Lifecycle Timeline
4DescriptionCVE.org
In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required.
AnalysisAI
Local privilege escalation affects Android versions 16, 16-qpr2, and 17 via heap-based buffer overflow triggered by integer overflow in multiple framework locations. An attacker with basic local code execution (low-privileged app or shell) can exploit the memory safety flaw - requiring no additional privileges or user interaction - to gain full control of the device, compromising confidentiality, integrity, and availability. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires local code execution on an Android 16, 16-QPR2, or 17 device - meaning the attacker must have an installed application or interactive shell session with at least low-privilege user-level access. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.8 (High) rating is well-calibrated for this class of vulnerability: local privilege escalation with full CIA impact (C:H/I:H/A:H) but bounded by requiring prior code execution on the device (AV:L/PR:L). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the September 2026 Android Security Bulletin patches via the standard Android OTA update mechanism or vendor security patch level update. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all organizational devices running Android 16, 16-qpr2, or 17 to establish baseline exposure. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today