VYPR
Unrated severityNVD Advisory· Published Jun 16, 2026· Updated Jun 16, 2026

CVE-2026-0138

CVE-2026-0138

Description

Out-of-bounds write in lwis_io_buffer_write on Pixel devices leads to local escalation of privilege with System privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Out-of-bounds write in lwis_io_buffer_write on Pixel devices leads to local escalation of privilege with System privileges.

Vulnerability

In lwis_io_buffer_write of lwis_io_buffer.c, a memory corruption vulnerability allows an out-of-bounds write. This affects Pixel devices running a security patch level prior to 2026-06-05 as described in the June 2026 Pixel Update Bulletin [1]. The bug is reachable when the kernel component processes IO buffer operations.

Exploitation

An attacker must already have System execution privileges on the device. No user interaction is required. The exploit likely involves crafting a malicious IO buffer request that triggers the out-of-bounds write during the lwis_io_buffer_write function call.

Impact

Successful exploitation leads to local escalation of privilege. The attacker can write beyond the intended buffer bounds, potentially corrupting kernel memory and gaining elevated privileges, which may result in full compromise of the device.

Mitigation

Google addressed this vulnerability in the June 2026 Pixel Update Bulletin. Devices updated to the 2026-06-05 security patch level or later are protected. Users should ensure their Pixel devices receive the latest security update [1].

AI Insight generated on Jun 16, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Patches

0

No patches discovered yet.

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

1

News mentions

0

No linked articles in our index yet.