Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-28662

Android · buffer overflow

cve-program · severity unknownCVSS unknownCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-28662

Published

In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-28662

Published

Android

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Google",
                    "product": "Android",
                    "versions": [
                        {
                            "version": "17",
                            "status": "affected"
                        },
                        {
                            "version": "16-qpr2",
                            "status": "affected"
                        },
                        {
                            "version": "16",
                            "status": "affected"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON