PatchSiren cyber security CVE debrief
CVE-2026-0135 Google CVE debrief
CVE-2026-0135 is a vulnerability in Modem that could lead to remote code execution with no additional execution privileges needed. The vulnerability is due to a missing bounds check, which could lead to an out of bounds read. User interaction is not needed for exploitation. The CVE was published on [cvePublishedAt](https://www.cve.org/CVERecord?id=CVE-2026-0135) and last modified on [cveModifiedAt](https://nvd.nist.gov/vuln/detail/CVE-2026-0135).
- Vendor
- Product
- Android
- CVSS
- HIGH 7.8
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-16
- Original CVE updated
- 2026-06-17
- Advisory published
- 2026-06-16
- Advisory updated
- 2026-06-17
Who should care
Users of affected Android devices should apply patches as soon as available.
Technical summary
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Defensive priority
high
Recommended defensive actions
- Apply patches as soon as available
- Use secure communication protocols
Evidence notes
Vendor: Unknown Vendor, Product: Android
Official resources
-
CVE-2026-0135 CVE record
CVE.org
-
CVE-2026-0135 NVD detail
NVD
-
Source item URL
nvd_modified
- Source reference
CVE-2026-0135 was published on 2026-06-16T20:16:24.350Z and last modified on 2026-06-16T20:42:25.013Z.