CVE-2026-0165 - In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a missing bounds check · CoreCVE

Back Back to CVE browser

MEDIUM

In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a missing bounds check

Published Jun 16, 2026

6.5

MEDIUM

CVSS 3.1

EPSS 0.18%

Description

In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

Vendor Google Product Android Default
unaffected
- Version
  Android kernel
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
Android kernel	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-120

Classic Buffer Overflow

CWE-125

Out-of-bounds Read

References (1)

https://source.android.com/docs/security/bulletin/pixel/2026/2026-06-01
Vendor Advisory

Link	Providers	Tags
https://source.android.com/docs/security/bulletin/pixel/2026/2026-06-01		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Google_Devices

Published Jun 16, 2026

Updated Sep 16, 2026

Reserved Oct 23, 2025

Link CVE-2026-0165

CISA Vulnrichment

Updated Jun 16, 2026

Status Modified

Modified Sep 16, 2026

Link CVE-2026-0165

Severity n/a

Public date n/a

Links CVE-2026-0165