CVE-2026-0106

The Android VPU driver is vulnerable to a local privilege escalation (EoP) due to a missing bounds check in the vpu_mmap component of the vpu_ioctl function. This flaw allows an attacker to perform an arbitrary address mmap , potentially granting a low-privileged userland context arbitrary read/w...