CVE-2026-0158: Low severity Google Android vulnerability
In Camera, there is a possible unauthorized way to access photos due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Add and enforce a permission check before granting access to photos in the Camera component to prevent unauthorized local information disclosure.
Camera permission_check = enforced
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0158?
The severity of CVE-2026-0158 is rated as low with a score of 3.3.
What type of vulnerability is identified in CVE-2026-0158?
CVE-2026-0158 is identified as a possible unauthorized way to access photos due to a missing permission check.
What impact does CVE-2026-0158 have on user data?
CVE-2026-0158 could lead to local information disclosure of photos without requiring additional execution privileges.
Is user interaction needed to exploit CVE-2026-0158?
No, user interaction is not needed for exploitation of CVE-2026-0158.
How can I mitigate the risks associated with CVE-2026-0158?
To mitigate the risks associated with CVE-2026-0158, ensure that your Android device is updated to the latest security patch.