CVE-2026-0141: Medium severity Google Android vulnerability
In decodeAppPacket of RtcpAppPacket.cpp, there is a possible OOB read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Operational
Fix the source code by adding appropriate bounds checking in decodeAppPacket (RtcpAppPacket.cpp) to prevent the out-of-bounds read, then rebuild and deploy the patched binaries.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0141?
The severity of CVE-2026-0141 is classified as medium with a CVSS score of 4.3.
How do I fix CVE-2026-0141?
To address CVE-2026-0141, ensure that your Google Android device is updated to the latest security patch provided by the manufacturer.
What type of vulnerability is CVE-2026-0141?
CVE-2026-0141 is a vulnerability that allows for a possible out-of-bounds read due to missing bounds checks.
What could be the impact of CVE-2026-0141?
The impact of CVE-2026-0141 could lead to remote information disclosure without requiring additional execution privileges or user interaction.
Is user interaction needed to exploit CVE-2026-0141?
No, user interaction is not needed for the exploitation of CVE-2026-0141.