CVE-2026-0177 in Androidinformazioni

Riassunto

di MITRE • 15/09/2026

In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

Google Devices

Prenotare

23/10/2025

Divulgazione

15/09/2026

Moderazione

accettato

CPE

pronto

EPSS

0.00000

KEV

no

Attività

molto basso

Settore

Lawfirm, Police, ...

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-0177
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-0177
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-0177/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!