medium4.4

CVE-2026-0197

In VPU, there is a possible information dislclosure due to a logic error in the code.

Impact

In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

Vendor	Product	Affected versions
Google	Android	All versions

Weakness classification

CWE-200

References

NVD record
CVE.org record
https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01