CVE-2026-28664
HighCVSS 7.8Summary
In the WriteImageToDisk function of runtime_image.cc, there is a possible file tampering due to a logic error in the code. This could lead to local privilege escalation without additional execution privileges. User interaction is not required for exploitation.
Risk Assessment
Risk of file tampering, potentially allowing an attacker to modify critical data and escalate privileges.
Recommendation
It is recommended to update the system to a patched version and restrict access to image writing functions.
Other vulnerabilities in Android
See all- CVE-2026-49932High
In the parseParts function of PduParser.java, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to local privilege escalation without additional execution privileges. User interaction is not required for exploitation.
- CVE-2026-49927High
In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to local privilege escalation without additional execution privileges. User interaction is not required for exploitation.
- CVE-2016-0833High
Android allows users to cause a denial of service.
- CVE-2026-49883Critical
In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permission check. This could lead to local information disclosure without additional execution privileges. User interaction is not needed.
- CVE-2025-48595HighActively exploited
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This leads to local escalation of privilege with no additional execution privileges needed and no user interaction.
- CVE-2025-48626Critical
In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2016-3877Critical
Unspecified vulnerability in Android before 2016-09-01 has unknown impact and attack vectors.
- CVE-2026-49189High
Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to invoke administrative operations.
- CVE-2026-24088High
A cryptographic issue while processing a specific partition allows unauthorized write access to load a customized bootloader.
- CVE-2026-28586Low
In multiple functions of AppOpsService.java, there is a missing permission check due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed.
Original NVD description (English source)
In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.