Android: ns_GetUserData OOB Write Enables Remote Priv Escalation
CVE-2026-0111 Published on March 10, 2026

In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Vendor Advisory NVD


Products Associated with CVE-2026-0111

Want to know whenever a new CVE is published for Google Android? stack.watch will email you.

Google Android
 

Affected Versions

Google Android Version Android kernel is affected by CVE-2026-0111