CVE-2026-0109: Android Package Vulnerability in Pixel Watch Family Leading to Denial of Service
Summary
CVE-2026-0109: In dhd_tcpdata_info_get of dhd_ip.c, there is a possible Denial of Service due to a precondition check failure. Affects :unknown: versions >= Pixel Watch family:0, < Pixel Watch family:2026-03-05. Fixed in Pixel Watch family:2026-03-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The affected package is part of the Android ecosystem, specifically targeting the Pixel Watch family. This package is responsible for managing TCP data connections, ensuring efficient communication over the network. The vulnerability arises from a failure in precondition checks within the dhd_tcpdata_info_get function, which can lead to service disruptions.
Vulnerability Detail
In dhd_tcpdata_info_get of dhd_ip.c, there is a possible Denial of Service (DoS) due to a precondition check failure. This vulnerability allows for remote denial of service without requiring additional execution privileges or user interaction, making it a significant risk for users of the affected devices.
How To Fix
Minimum fixed version
Pixel Watch family:2026-03-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the available patch as soon as it is released.
Conclusion
The CVE-2026-0109 vulnerability poses a significant risk to users of the Pixel Watch family by potentially allowing remote denial of service. It is crucial to update devices to the patched version released on March 5, 2026, to ensure protection against this issue.
See every vulnerability recorded for :unknown: →
FAQ
CVE-2026-0109 is a vulnerability in the Android package for the Pixel Watch family that can lead to a Denial of Service due to a precondition check failure.
This vulnerability can cause your device to become unresponsive or lose network connectivity, impacting its functionality.
No, user interaction is not needed for exploitation, making it a more serious risk.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
While there are no specific workarounds, it is advisable to monitor your device for updates and apply them as soon as possible to mitigate the risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for :unknown:.
