CVE-2026-0151: In IntfGraphCreate of intfgraph

Synopsis

An integer overflow leading to an out-of-bounds write exists in the IntfGraphCreate function of intfgraph.c in the Android kernel. The flaw is reachable over the network by any authenticated user with a low-privilege account, requiring no victim interaction, and successful exploitation gives an attacker full remote code execution on the affected device. HarborGuard is tracking this advisory and will make a patched-image rebuild available the moment an upstream fix is published.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable code path is reachable over the network, meaning an attacker must be able to send requests to the exposed service across the internet or an internal network.

• AuthenticationRequired

  A low-privilege account is sufficient; no elevated or administrative credentials are needed to reach the vulnerable function.

• Victim interactionNot required

  No user action such as clicking a link or opening a file is needed; the attacker can trigger the flaw without any participation from a victim.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and does not depend on race conditions, specific memory layouts, or other variable environmental factors.

Blast Radius

• An attacker achieves remote code execution in the Android kernel context, gaining control over the affected device at the OS level.
• Confidential data stored on the device, including credentials, session tokens, and application data, is readable by the attacker.
• The attacker can modify or corrupt persisted files, application data, and kernel state on the device.
• The attacker can crash or destabilize kernel services, disrupting device operation entirely.