CVE-2026-0122
Published: 10 March 2026
Summary
CVE-2026-0122 is a high-severity Out-of-bounds Write (CWE-787) vulnerability in Google Android. Its CVSS base score is 8.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked at the 9.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 RA-5 (Vulnerability Monitoring and Scanning) and SI-16 (Memory Protection).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Mandates timely remediation of identified flaws, directly addressing the memory corruption vulnerability in CVE-2026-0122 through patching as provided in the Android security bulletin.
Implements memory protection mechanisms such as address space randomization and stack guards to prevent out-of-bounds write exploits leading to remote code execution.
Requires vulnerability scanning and monitoring to identify memory corruption issues like CVE-2026-0122 in Android components for prioritized remediation.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Memory corruption (CWE-787) with out-of-bounds write enables local arbitrary code execution without privileges or user interaction, directly mapping to client-side exploitation technique T1203.
NVD Description
In multiple places, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Deeper analysisAI
CVE-2026-0122 is a vulnerability involving a possible out-of-bounds write due to memory corruption in multiple places within Android components. Published on 2026-03-10 with a CVSS v3.1 base score of 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), it is linked to CWE-787 and can lead to remote code execution without requiring additional execution privileges or user interaction.
A local attacker can exploit this vulnerability due to its low attack complexity, lack of privilege requirements, and absence of user interaction. Successful exploitation enables remote code execution, resulting in high impacts to confidentiality, integrity, and availability.
The Android security bulletin at https://source.android.com/docs/security/bulletin/2026/2026-03-01 provides details on affected versions and available patches for mitigation.
Details
- CWE(s)