Not scored
CVE-2026-28662
Google Android vulnerability
GoogleAndroid
Status
- Not in CISA KEV
- Associated threat actor: DoppelCart
Exploit probabilityEPSSchecked 24 Oct
0.2%probability of exploitation in the next 30 days
Higher than 6% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Coverage 2 articles · 2 outlets
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 9 Sep · 17:06 UTC | SecurityWeek | Google Patches 180 Android Flaws, Including Critical Wi-Fi RCE |
| Thu 10 Sep · 19:11 UTC | The Hacker News | Android Update Fixes Critical Wi-Fi Flaw Amid Rising Attack Risks |
- Android Update Fixes Critical Wi-Fi Flaw Amid Rising Attack RisksThe Hacker News
- Google Patches 180 Android Flaws, Including Critical Wi-Fi RCESecurityWeek · first in our coverage