EIP-2026-100029

PRE-CVE

Google Android - Insufficient Binder Message Verification Pointer Leak

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100029. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit leverages a vulnerability in Android's Binder IPC mechanism where attacker-controlled binder handles are misinterpreted as string data, leading to memory address leakage of system services like 'permission', 'package', and 'clipboard'. The PoC demonstrates this by echoing leaked addresses via the clipboard service.

Description

Google Android - Insufficient Binder Message Verification Pointer Leak

Exploits (1)

exploitdb WORKING POC VERIFIED
by Google Security Research · textdosandroid
https://www.exploit-db.com/exploits/40449

This exploit leverages a vulnerability in Android's Binder IPC mechanism where attacker-controlled binder handles are misinterpreted as string data, leading to memory address leakage of system services like 'permission', 'package', and 'clipboard'. The PoC demonstrates this by echoing leaked addresses via the clipboard service.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Android (specific versions not specified, likely affecting multiple versions)
No auth needed
Prerequisites: Access to a vulnerable Android device · Ability to install and run the PoC APK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026