Skip to content
OpenAdvisories
High · 7.4 CVE-2026-0112 EUVD-2026-10838GHSA-jff3-c959-gf82

In vpu_open_inst of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privile…

Published Mar 10, 2026 · Updated Mar 12, 2026 · Assigned by Google_Devices

Vendor: Google Product: Android Platform: Android

Description

In vpu_open_inst of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References