CVE-2026-0163: Use After Free
Published Aug 4, 2026
·Updated
In multiple functions of vpuioctl.c, there is a possible use after free due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
1 affected component
Google Android
Event History
Aug 4, 2026
CVE Published
via MITRE·06:31 PM
Data Sourced
via MITRE·06:31 PM
DescriptionWeakness
Data Sourced
via NVD·07:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-0163?
CVE-2026-0163 has a risk score of 80, indicating a high severity vulnerability.
2
What type of vulnerability is CVE-2026-0163?
CVE-2026-0163 is classified as a use after free vulnerability.
3
How could CVE-2026-0163 be exploited?
CVE-2026-0163 could be exploited remotely to escalate privileges without requiring additional execution privileges.
4
Is user interaction needed for the exploitation of CVE-2026-0163?
No, user interaction is not needed for the exploitation of CVE-2026-0163.
5
How do I fix CVE-2026-0163?
Fixing CVE-2026-0163 requires applying security updates provided by the vendor to address the use after free issue.