Skip to content
OpenAdvisories
Unscored CVE-2026-0195 EUVD-2026-122699GHSA-fc49-h97v-jc74

In fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct memory access fills due to a logic error. T…

Published Nov 10, 2026 · Assigned by Google_Devices

Description

In fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct memory access fills due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References