CVE-2026-0113 - Vulnerability Analysis

Overview

ns_GetUserData in ns_SmscbUtilities.c contains an out of bounds write caused by incorrect bounds check, letting remote attackers escalate privileges without additional execution privileges, exploit requires no user interaction.

Severity & Score

Impact

Remote attackers can escalate privileges without needing additional execution rights, potentially gaining unauthorized access.

Mitigation

Update to the latest version containing the fix.

References

• https://source.android.com/security/bulletin/pixel/2026-03-01
• https://source.android.com/docs/security/bulletin/2026/2026-03-01
• https://source.android.com/docs/security/bulletin/pixel/2026/2026-03-01

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner