Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 3 min 166 bronnen 1 kritiek 14 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-0035

HIGH · 8.4 CVSS Gepubliceerd: CWE-125

Beschrijving

In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Vendors

Google

Affected products

Android

References