Medium · 4.3 CVE-2026-0129 EUVD-2026-37212GHSA-c466-9244-9cr2

In RtcpByePacket::decodeByePacket, there is a possible due to a missing bounds check. This could lead to remote information disclosure with…

Published Jun 16, 2026 · Updated Sep 16, 2026 · Assigned by Google_Devices

Vendor: Google Product: Android Platform: Android

Description

In RtcpByePacket::decodeByePacket, there is a possible due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	Android kernel	—

Advisories 1

WID-SEC-2026-1980 Pixel Patchday Juni 2026: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 4, 2026

References

https://source.android.com/docs/security/bulletin/pixel/2026/2026-06-01