CVE-2026-0136
Description
In Modem component of Pixel devices, missing bounds check allows remote out-of-bounds read, leading to denial of service without user interaction.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
In Modem component of Pixel devices, missing bounds check allows remote out-of-bounds read, leading to denial of service without user interaction.
Vulnerability
In the Modem component of supported Pixel devices, an out-of-bounds read vulnerability exists due to a missing bounds check. This affects devices running software prior to the June 2026 security patch level (2026-06-05). The bug can be triggered by specially crafted input processed by the modem driver.
Exploitation
An attacker with network access (e.g., over cellular or other wireless interfaces) can send malformed data to the modem without any prior authentication or user interaction. No elevated privileges are required. The attack involves delivering a sequence of network packets that bypass missing bounds validation, causing an out-of-bounds read.
Impact
Successful exploitation causes a remote denial of service (DoS) by crashing or freezing the modem, thereby disrupting cellular connectivity and voice/data services. The vulnerability does not enable code execution or privilege escalation according to the available disclosure.
Mitigation
Google addressed this issue in the June 2026 Pixel Update Bulletin, with devices receiving a security patch level of 2026-06-05 or later [1]. Users are strongly encouraged to apply these updates as soon as they become available. No workaround is publicly documented.
AI Insight generated on Jun 16, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Patches
0No patches discovered yet.
Vulnerability mechanics
No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.
References
1News mentions
0No linked articles in our index yet.