CVE-2026-0164: In Modem, there is a possible out of bounds write due to a missing bounds check

Synopsis

An out-of-bounds write vulnerability exists in the Android kernel Modem component due to a missing bounds check. The flaw is reachable over the network by any low-privilege authenticated user, with no victim interaction required. Successful exploitation gives an attacker full remote code execution on the affected device. HarborGuard tracks this advisory and will make a patched-image rebuild available the moment an upstream fix is published.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable Modem component is reachable over the network, meaning an attacker must be able to send traffic to the target device across a network path.

• AuthenticationRequired

  Any low-privilege account is sufficient; no administrative or elevated credentials are needed beyond basic authenticated access.

• Victim interactionNot required

  No action is required from a user on the targeted device for exploitation to succeed.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and does not depend on race conditions, specific memory layouts, or other variable environmental factors.

Blast Radius

• A successful attacker achieves remote code execution within the Modem component of the Android kernel, gaining control of code running in that context.
• Confidentiality impact is high: the attacker reads memory contents accessible to the Modem component, which may include sensitive modem state, network credentials, or data in transit.
• Integrity impact is high: the attacker writes arbitrary data to memory, allowing modification of modem behavior, persisted configuration, or data flowing through the component.
• Availability impact is high: the attacker crashes or destabilizes the Modem component, disrupting all network connectivity on the affected device.