Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
There is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-10 | 4 | Disclosure3General1 |
| 2026-03-11 | 1 | Disclosure1 |
| 2026-05-01 | 1 | Patch1 |
CVE-2026-0114 https://www.cve.org/CVERecord?id=CVE-2026-0114 CVE-2026-0120 https://www.cve.org/CVERecord?id=CVE-2026-0120 CVE-2026-0122 https://www.cve.org/CVERecord?id=CVE-2026-0122 CVE-2026-0124 Reported by Christopher Wade https://www.cve.org/CVERecord?id=CVE-2026-0124
Post summary
The text lists four CVE identifiers with links to their CVE.org pages but provides no additional detail or context.
@Google @GooglePixel_US gateekeping the tools won't make vulnerabilities in the iROM less exploitable btw (CVE-2026-0124, b/308585798, reported in 2023, the reason why Google has disabled Pixel ROM Recovery on the Pixel 8a)
Post summary
The tweet notes that Google has disabled Pixel ROM Recovery on the Pixel 8a in response to CVE-2026-0124, serving as a vendor‑issued mitigation rather than an exploit disclosure.
CVE: CVE-2026-0124 PT-Identifier: PT-2026-24453 Vendor: Google Product: Android CVSS: 10.0 Credits: Christopher Wade Description: There is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-0124 • https://source.android.com/docs/security/bulletin/pixel/2026/2026-03-01 #dbugs_vuln
Post summary
CVE-2026-0124 is a high‑severity out‑of‑bounds write vulnerability in Android that can lead to local privilege escalation without user interaction; the post provides a technical description and references but no evidence of active exploitation, PoC, or patch.
We have just added an important vulnerability affecting Google Android (CVE-2026-0124) https://vuldb.com/?id.350260
Post summary
The text announces the addition of CVE-2026-0124 as a new vulnerability affecting Android, but offers no further technical or exploitation details.
CVE-2026-0124 There is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. … https://www.cve.org/CVERecord?id=CVE-2026-0124
Post summary
The text announces CVE‑2026‑0124, describing a missing bounds check that could lead to out‑of‑bound writes and local privilege escalation, but it offers no PoC, exploit code, active exploitation evidence, or patch information.
🚨 CVE-2026-0124: Google (CVSS: 10.0)... Perfect 10.0 CVSS score OOB write in Pixel devices = instant root with zero user interaction - Google's nightmare scenar... https://zerodaysignal.com/vulnerability/CVE-2026-0124 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet announces CVE‑2026‑0124 as a severe (CVSS 10.0) zero‑day vulnerability that allows out‑of‑band writes on Pixel devices, potentially granting root without user interaction. No PoC, exploit code, or patch information is included.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | android | - | - | - |