Exploit for SQL Injection in Google Android

CVE-2026-0075 ContactsProvider Research PoC A controlled-la...

CVE-2026-0075

A local elevation-of-privilege vulnerability exists in Android's ContactsProvider2 component. Multiple functions are susceptible to SQL injection , which could allow an attacker to access the contacts database without requiring additional execution privileges or user interaction. Affected AOSP ve...