CVE-2026-0187

Description

In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

References

• https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01