CVE-2026-28580

EPSS 0.07%
Veröffentlicht 01.06.2026 21:14:56
Zuletzt bearbeitet 22.07.2026 18:10:00
Erkennungen
Login

In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 4 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version 16.0 Update -

Google ≫ Android Version 16.0 Update qpr2_beta_1

Google ≫ Android Version 16.0 Update qpr2_beta_2

Google ≫ Android Version 16.0 Update qpr2_beta_3

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.07%	0.001

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://source.android.com/docs/security/bulletin/2026/2026-06-01

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-28580

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-28580

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-28580

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-28580