CVE-2026-0039

MediumCVSS 6.5/10Last modified Jul 22, 2026

Description

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jun 1, 2026
Last modified
Jul 22, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-00406.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead toCVE-2026-00416.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow. This could lead to remoteCVE-2026-00425.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to resource exhaustion. This couldCVE-2026-00435.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This couldCVE-2026-00446.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an integer overflow. This cCVE-2026-00457.8In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code. TCVE-2026-00466.2In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attacCVE-2026-00478.4In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permisCVE-2026-00486.8In hide of WindowState.java, there is a possible way to trick the user into approving permissions due to a tapjacking/overlay attack. This cCVE-2026-00496.2In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead CVE-2026-00503.3In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This couCVE-2026-00516.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a system crash due to improper input validation. This
CVE-2026-0039: Medium severity, CVSS 6.5 | Vulnix