CVE-2026-0123 - Vulnerability Analysis

Overview

EfwApTransport contains an out of bounds write caused by missing bounds check in ProcessRxRing function, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

Severity & Score

Impact

Local attackers can escalate privileges, potentially gaining unauthorized access or control over the system.

Mitigation

Update to the latest version containing the fix.

References

• https://source.android.com/security/bulletin/pixel/2026-03-01
• https://source.android.com/docs/security/bulletin/2026/2026-03-01

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner