EUVD-2026-37571

🗓️ 17 Jun 2026 07:15:28Reported by EUVDType

In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Reporter	Title	Published	Views	Family All 4
Android Security Bulletins	Android 17 Security Release NotesStay organized with collectionsSave and categorize content based on your preferences.	16 Jun 202600:00	–	androidsecurity
CVE	CVE-2026-0083	17 Jun 202607:15	–	cve
Cvelist	CVE-2026-0083	17 Jun 202607:15	–	cvelist
Positive Technologies	PT-2026-50235	17 Jun 202600:00	–	ptsecurity

[
  {
    "enisaIdVendor": [
      {
        "id": "c0928c0a-0757-3dd1-92d5-c5fa43f5f8d0",
        "vendor": {
          "name": "Google"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "2d6c50da-15ac-327b-b41b-611428b2dc8b",
        "product": {
          "name": "Android",
          "vendor": {
            "name": "Google"
          }
        },
        "product_version": "17"
      }
    ]
  }
]

Source	Link
source	www.source.android.com/docs/security/bulletin/android-17

17 Jun 2026 07:15Current

5.6Medium risk

Vulners AI Score5.6

CVSS 410