CVE-2026-0019

Description

In SettingsLib, there is a possible way to disable system components due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Traduire en français

Produits concernés

• Google Android

Scores CVSS

Faiblesses (CWE)

• CWE-269

Références

• https://source.android.com/docs/security/bulletin/android-17 Vendor Advisory
• http://seclists.org/fulldisclosure/2026/Sep/95
• http://www.openwall.com/lists/oss-security/2026/09/29/10

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories