CVE-2026-0095

In l2cfcrclonebuf of l2cfcr.cc, there is a possible way to trigger controlled heap corruption within the privileged Bluetooth process due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-0095

A vulnerability in the l2c_fcr_clone_buf function of l2c_fcr.cc within the Android operating system allows for controlled heap corruption inside the privileged Bluetooth process . This flaw is caused by an integer overflow and can lead to local escalation of privilege without requiring additional...