PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-0158 Google CVE debrief

A missing permission check in the Camera application on Android devices could allow local information disclosure. This issue is rated as Medium severity. The vulnerability exists due to insufficient permission checks in the Camera app, potentially allowing unauthorized access to photos. Defenders should assess exposure and prioritize patching for affected Android devices. The issue has a CVSS score of 4, indicating a Medium severity level. The CVE record and NVD entry provide additional details on the vulnerability.

Vendor
Google
Product
Android
CVSS
MEDIUM 4
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-16
Original CVE updated
2026-10-25
Advisory published
2026-06-16
Advisory updated
2026-10-25

Who should care

Defenders responsible for managing and securing Android devices, particularly those with Camera application updates available, should assess exposure and prioritize patching.

Why it matters

Defenders should prioritize verifying and applying patches for affected Android devices to prevent potential information disclosure through the Camera application.

  • Verify patch availability and apply updates to prevent potential information disclosure
  • Review device configurations to ensure Camera application security

Technical summary

A missing permission check in the Camera application on Android devices could allow local information disclosure. This issue is rated as Medium severity with a CVSS score of 4. The vulnerability exists due to insufficient permission checks in the Camera app, potentially allowing unauthorized access to photos. The issue has been publicly disclosed and defenders should prioritize verifying and applying patches for affected Android devices.

Defensive priority

Defenders should prioritize verifying and applying patches for affected Android devices, particularly those with Camera application updates available.

Recommended defensive actions

  • Verify and apply patches for affected Android devices
  • Review device configurations and ensure Camera application updates are applied
  • Monitor device logs for potential exploitation attempts

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its description, CVSS score, and affected products. The vulnerability is caused by a missing permission check in the Camera application, which could allow local information disclosure. The issue is rated as Medium severity with a CVSS score of 4. The NVD entry and CVE record do not provide information on known or unknown affected scope, but defenders should verify patch availability and apply updates to to at

Sources and references

Verified primary and authoritative sources

  • CVE-2026-0158 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-0158

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-0158 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-0158

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.