CVE-2026-0177

MediumCVSS 4.4/10Last modified Sep 21, 2026

Description

In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-120CWE-125

Affected software

VendorProductVersions
GoogleAndroidAndroid kernel

References

Timeline

Published
Sep 15, 2026
Last modified
Sep 21, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-0178In multiple functions of arm-smmu-v3.c, there is a possible way to bypass direct memory access isolation via stale stream table entries due CVE-2026-01796.7In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege witCVE-2026-01834.4In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System exeCVE-2026-01866.7In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalCVE-2026-01876.7In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could leadCVE-2026-01898.4In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of CVE-2026-0191In event_set_sub of acropora_event.c, there is a possible Logic error due to a logic error in the code. This could lead to local escalation CVE-2026-01926.7In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privileCVE-2026-0193In handle_rx_msg of tipc_virtio_dev, there is a possible Double Fetch TOCTOU due to Double Fetch. This could lead to local information disclCVE-2026-01948.4In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege wiCVE-2026-0195In fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct memory access fills due to a logic error. ThCVE-2026-01974.4In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with S
CVE-2026-0177: Medium severity, CVSS 4.4 | Vulnix