Detections
Analytics
CVE-2026-0127
medium
Description
In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible out-of-bounds read due to memory corruption. This could lead to remote denial of service causing a communication processor crash with no additional execution privileges needed. User interaction is not needed for exploitation.
References
https://source.android.com/docs/security/bulletin/pixel/2026/2026-06-01