Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.9

VPU: Data Exposure Risk Through Malicious Actions

CVE-2026-0121
Summary

A security issue in VPU can lead to unauthorized access to sensitive data if an attacker takes certain malicious steps without needing any special permissions. This could happen if the system is not properly secured. To protect yourself, ensure you have the latest updates and patches installed for VPU.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software
VendorProductAffected versionsFix available
google android All versions –
Original title
In VPU, there is a possible use-after-free read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not need...
Original description
In VPU, there is a possible use-after-free read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Vulnerability type
CWE-362 Race Condition
CWE-416 Use After Free
Published: 10 Mar 2026 · Updated: 13 Mar 2026 · First seen: 10 Mar 2026