CVE-2026-0162: High severity Google Chromium vulnerability
In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type confusion. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in Pixel-family specific:2026-06-05
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0162?
CVE-2026-0162 has a high severity rating of 8.8 according to the CVSS 3.1 scoring.
What impact does CVE-2026-0162 have on systems?
CVE-2026-0162 can lead to remote code execution due to memory corruption caused by type confusion.
Is user interaction required to exploit CVE-2026-0162?
No, user interaction is not needed for the exploitation of CVE-2026-0162.
How can I mitigate the risks associated with CVE-2026-0162?
To mitigate the risks of CVE-2026-0162, ensure that you are using the latest versions of Google Chromium and Google Android that include the security patches.
Which software is affected by CVE-2026-0162?
CVE-2026-0162 affects Google Chromium and Google Android.