CVE-2026-0051: Input Validation
In multiple functions of ubsanthrowingruntime.cpp, there is a possible way to cause a system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/external/dng_sdkto a version that resolves this vulnerability.Fixed in 17-next:2026-06-01 - Upgrade
Upgrade
android/platform/external/dng_sdkto a version that resolves this vulnerability.Fixed in 15:2026-06-01 - Upgrade
Upgrade
android/platform/external/dng_sdkto a version that resolves this vulnerability.Fixed in 16:2026-06-01 - Upgrade
Upgrade
android/platform/external/dng_sdkto a version that resolves this vulnerability.Fixed in 16-qpr2:2026-06-01 - Upgrade
Upgrade
android/platform/external/dng_sdkto a version that resolves this vulnerability.Fixed in 14:2026-06-01
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0051?
The severity of CVE-2026-0051 is classified as medium with a CVSS score of 6.5.
What does CVE-2026-0051 affect?
CVE-2026-0051 affects Google Android and the llvm compiler-rt UBSan runtime (LLVM).
How can CVE-2026-0051 be exploited?
CVE-2026-0051 can be exploited through improper input validation, leading to a remote denial of service.
Is user interaction required for exploiting CVE-2026-0051?
No, user interaction is not needed for the exploitation of CVE-2026-0051.
What is the risk of CVE-2026-0051?
CVE-2026-0051 has a risk rating of 38, indicating a potential impact on system stability.