CVE-2026-0118 - Vulnerability Analysis

Overview

oobconfig contains a broken access control caused by a logic error, letting local attackers bypass carrier restrictions and escalate privileges, exploit requires no additional execution privileges or user interaction.

Severity & Score

Impact

Local attackers can bypass carrier restrictions and escalate privileges without additional execution rights or user interaction.

Mitigation

Update to the latest version.

References

• https://source.android.com/security/bulletin/pixel/2026-03-01
• https://source.android.com/docs/security/bulletin/2026/2026-03-01
• https://source.android.com/docs/security/bulletin/pixel/2026/2026-03-01

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner