CVE-2026-0030

CVSS 3.1: 8.4 high
EPSS: <1%p5
Published: Mar 2, 2026 · Mar 2, 2026
Modified: Jun 17, 2026

Analyze CVE-2026-0030 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Vendors: google

Products: android

Weakness: CWE-787

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

3 stories

Google Confirms CVE-2026-21385 in Qualcomm Android Component Exploited

The Hacker NewsMar 4, 04:27 UTC · Mar 4, 2026VulnerabilityExploitedCVE-2026-21385 CVE-2026-0006 CVE-2026-0047+83 · 1 read

Android devices hit by exploited Qualcomm flaw CVE-2026

Security AffairsMar 3, 10:03 UTC · Mar 3, 2026VulnerabilityExploitedCVE-2026-21385 CVE-2026-0006 CVE-2026-0047+84 · 3 reads

Android's March 2026 security patch fixes over 100 flaws, one under targeted exploitation

Help Net SecurityMar 3, 00:00 UTC · Mar 3, 2026VulnerabilityExploitedCVE-2026-21385 CVE-2026-0006 CVE-2025-48631+84 · 1 read