CVE-2026-0115

In Trusted Execution Environment, there is a possible key leak due to side channel information disclosure. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

Score

CVSS 3.1 2.1 Low

Status

Analyzed - dsap-vuln-management@google.com

Published

2026-03-10

Last modified

2026-03-11

Weaknesses

CWE-1300

Affected products

• Android (Google)

References

• https://source.android.com/docs/security/bulletin/2026/2026-03-01
• https://source.android.com/docs/security/bulletin/pixel/2026/2026-03-01