CVE-2026-0067: Medium severity llvm compiler-rt vulnerability
In multiple functions of ubsanthrowingruntime.cpp, there is a possible way to cause a permanent denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/external/dng_sdkto a version that resolves this vulnerability.Fixed in 17-next:2026-06-01 - Upgrade
Upgrade
android/platform/external/dng_sdkto a version that resolves this vulnerability.Fixed in 15:2026-06-01 - Upgrade
Upgrade
android/platform/external/dng_sdkto a version that resolves this vulnerability.Fixed in 16:2026-06-01 - Upgrade
Upgrade
android/platform/external/dng_sdkto a version that resolves this vulnerability.Fixed in 16-qpr2:2026-06-01 - Upgrade
Upgrade
android/platform/external/dng_sdkto a version that resolves this vulnerability.Fixed in 14:2026-06-01
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0067?
The severity of CVE-2026-0067 is medium with a score of 5.5.
How do I fix CVE-2026-0067?
To fix CVE-2026-0067, update to the latest version of Google Android or llvm compiler-rt that addresses this vulnerability.
What type of vulnerability is CVE-2026-0067?
CVE-2026-0067 is a logic error vulnerability that can lead to a denial of service.
Does CVE-2026-0067 require user interaction for exploitation?
No, CVE-2026-0067 does not require user interaction for exploitation.
What impact does CVE-2026-0067 have?
The impact of CVE-2026-0067 is a possible local denial of service with no additional execution privileges needed.