In VPU, there is a possible use-after-free read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "severity": "High", "types": [ "ID" ], "spl": "2026-03-05" }
"https://storage.googleapis.com/android-osv/PUB-A-466090114.json"