CVE-2026-0043

MediumCVSS 5.5/10Last modified Jul 22, 2026

Description

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jun 1, 2026
Last modified
Jul 22, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-00446.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an integer overflow. This cCVE-2026-00457.8In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code. TCVE-2026-00466.2In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attacCVE-2026-00478.4In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permisCVE-2026-00486.8In hide of WindowState.java, there is a possible way to trick the user into approving permissions due to a tapjacking/overlay attack. This cCVE-2026-00496.2In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead CVE-2026-00503.3In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This couCVE-2026-00516.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a system crash due to improper input validation. This CVE-2026-00526.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead toCVE-2026-00543.3In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission cheCVE-2026-00556.2In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller (DPC) into an invalid dirCVE-2026-00563.3In setTo of ResourceTypes.cpp, there is a possible read out of bounds due to an incorrect bounds check. This could lead to local information
CVE-2026-0043: Medium severity, CVSS 5.5 | Vulnix