High severity8.4NVD Advisory· Published Mar 10, 2026· Updated Jun 17, 2026

CVE-2026-0117

Description

In mfc_dec_dqbuf of mfc_dec_v4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Android2 versions
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
- (no CPE)range: Android kernel
Android X86/android-x86llm-fuzzy

Patches

Vulnerability mechanics

References

source.android.com/docs/security/bulletin/2026/2026-03-01nvdVendor Advisory
source.android.com/docs/security/bulletin/pixel/2026/2026-03-01nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.546
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000