Detections
Analytics
CVE-2026-0187
medium
Description
In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
References
https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01