Xint Code Discovers Three High Sev Bugs in Android

In June, Android acknowledged three high-sev bugs (CVSS of 7.8+) found and reported by the Xint team that have now been patched as of June 5, 2026. The high severity scores came in part because no user interaction is needed for exploit.

CVE-2026-0095 

Base Score: 8.0

Description: In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption within the privileged Bluetooth process due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation

CVE-2026-0138 

Base Score: 7.8

Description: In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0143 

Base Score: 7.8

Description: In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.