Skip to content
OpenAdvisories
High · 8.0 CVE-2026-28662 EUVD-2026-73991GHSA-h8r6-j72f-ccjh

In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead …

Published Sep 8, 2026 · Updated Sep 10, 2026 · Assigned by google_android

Description

In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 17, 16-qpr2, 16 —

Advisories 1

References