CVE-2026-0132: In Modem, there is a possible out of bounds write due to a heap buffer overflow

Synopsis

A heap buffer overflow in the Android Modem component allows an attacker to write past the end of an allocated memory region, which can be reached remotely over a network connection with only a low-privilege account. Successful exploitation gives the attacker full remote code execution on the affected device with no additional privileges required, enabling complete compromise of confidentiality, integrity, and availability. HarborGuard tracks this advisory and will make a patched-image rebuild available the moment an upstream fix is published.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable Modem component is reachable over the network, so an attacker must be able to send traffic to the exposed service to trigger the heap buffer overflow.

• AuthenticationRequired

  A low-privilege account is sufficient; no administrative or elevated credentials are needed beyond basic authenticated access.

• Victim interactionNot required

  No user action such as clicking a link or opening a file is needed; the attacker can trigger exploitation without any victim participation.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and does not depend on race conditions, specific memory layouts, or other variable environmental factors.

Blast Radius

• Attacker executes arbitrary code remotely on the affected Android device at the privilege level of the Modem component.
• Attacker reads sensitive data stored on the device, including credentials, session tokens, and application data.
• Attacker modifies or deletes files, configuration, and persisted application state on the device.
• Attacker crashes or destabilizes the Modem component or broader system, disrupting all connectivity and device availability.