CVE-2026-0121 PUBLISHED

Assigner: Google_Devices
Reserved: 23.10.2025 Published: 10.03.2026 Updated: 10.03.2026

In VPU, there is a possible use-after-free read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Product Status

Vendor Google
Product Android
Versions Default: unaffected
  • Version Android kernel is affected

References

Problem Types

  • Information disclosure