CVE-2026-0135: In Modem, there is a possible out of bounds read due to a missing bounds check

Synopsis

An out-of-bounds read vulnerability exists in the Android kernel Modem component due to a missing bounds check. The flaw is reachable locally by any low-privilege process without requiring user interaction, as described by the CVSS vector. Successful exploitation gives an attacker full read, write, and execution control over the affected system, enabling remote code execution at the same privilege level. No fix version has been published yet; HarborGuard tracks the advisory and will surface a patched-image rebuild the moment upstream releases one.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host; no over-the-network path to the vulnerable component is required (AV:L).

• AuthenticationRequired

  Any low-privilege account on the system is sufficient to trigger the vulnerability; no elevated or administrative credentials are needed (PR:L).

• Victim interactionNot required

  No user action such as opening a file or clicking a link is required for exploitation (UI:N).

• Attack complexityDetail

  The exploit is reliable and condition-free, with no race conditions or specific memory-layout requirements needed (AC:L).

Blast Radius

• A successful attacker reads arbitrary memory regions from the Modem component, exposing sensitive data held in kernel address space.
• The attacker writes to out-of-bounds memory, allowing modification of kernel data structures or persisted state.
• Full code execution is achievable within the compromised process context, giving the attacker control over the affected system's modem subsystem.
• All three pillars of confidentiality, integrity, and availability are rated HIGH, meaning the attacker can crash the modem service entirely in addition to reading and modifying data.