CVE-2026-0156
Description
A missing null check in checkSsrcCollisionOnRcv of RtpSession.cpp leads to a memory safety issue, allowing remote denial of service on Pixel devices without user interaction.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
A missing null check in checkSsrcCollisionOnRcv of RtpSession.cpp leads to a memory safety issue, allowing remote denial of service on Pixel devices without user interaction.
Vulnerability
In checkSsrcCollisionOnRcv of RtpSession.cpp, a missing null check creates a memory safety issue. This affects Pixel devices running software versions prior to the 2026-06-05 security patch level. The vulnerability is present in the RTP session handling component and is reachable without any special configuration or elevated privileges.
Exploitation
An unauthenticated remote attacker can send a crafted network packet to trigger the missing null check, causing a memory safety failure. No user interaction or additional execution privileges are required; the attack only requires network access to the affected device.
Impact
Successful exploitation leads to a denial of service (DoS) condition, potentially crashing the device or making it unresponsive. The description does not indicate any information disclosure or remote code execution.
Mitigation
The issue is fixed in the June 2026 Pixel Update Bulletin, corresponding to security patch level 2026-06-05 or later [1]. Users should update their Pixel devices to this patch level. No workarounds are available.
AI Insight generated on Jun 16, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.
References
1News mentions
0No linked articles in our index yet.