CVE-2026-28604

Summary

In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

VendorProductVersion RangeStatus
GoogleAndroid17affected
GoogleAndroid16-qpr2affected
GoogleAndroid16affected
GoogleAndroid15affected
GoogleAndroid14affected

Weaknesses

  • Remote code execution

References