CVE-2026-0030

HighCVSS 8.4/10Last modified Jun 17, 2026

Description

In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Mar 2, 2026
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-00318.4In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalatCVE-2026-00327.8In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to local eCVE-2026-00348.4In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper input validation. ThCVE-2026-00358.4In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic erCVE-2026-00367.8In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to locaCVE-2026-00378.4In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation CVE-2026-00388.4In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead CVE-2026-00396.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This couldCVE-2026-00406.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead toCVE-2026-00416.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow. This could lead to remoteCVE-2026-00425.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to resource exhaustion. This couldCVE-2026-00435.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could
CVE-2026-0030: High severity, CVSS 8.4 | Vulnix