CVE-2026-0080: Integer Overflow
In multiple functions of ubsanthrowingruntime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/external/dng_sdkto a version that resolves this vulnerability.Fixed in 17-next:2026-06-01 - Upgrade
Upgrade
android/platform/external/dng_sdkto a version that resolves this vulnerability.Fixed in 15:2026-06-01 - Upgrade
Upgrade
android/platform/external/dng_sdkto a version that resolves this vulnerability.Fixed in 16:2026-06-01 - Upgrade
Upgrade
android/platform/external/dng_sdkto a version that resolves this vulnerability.Fixed in 16-qpr2:2026-06-01 - Upgrade
Upgrade
android/platform/external/dng_sdkto a version that resolves this vulnerability.Fixed in 14:2026-06-01
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0080?
CVE-2026-0080 has a medium severity score of 6.5.
What software is affected by CVE-2026-0080?
CVE-2026-0080 affects Google Android and the llvm compiler-rt (UBSan runtime) from LLVM.
How do I fix CVE-2026-0080?
To fix CVE-2026-0080, ensure you are using the latest version of the affected software as it may contain patches for this vulnerability.
What type of vulnerability is CVE-2026-0080?
CVE-2026-0080 is categorized as an integer overflow vulnerability that can lead to a remote denial of service.
Does CVE-2026-0080 require user interaction for exploitation?
No, CVE-2026-0080 does not require user interaction to be exploited.