A-503542266: Android/platform/packages/services/builtinprintservice vulnerability

Q: What access does an attacker need to exploit this issue?

The issue can be exploited remotely and does not require additional execution privileges or user interaction.

Q: What is the expected impact of successful exploitation?

Successful exploitation could cause a remote denial of service through a stack buffer overflow in multiple ipphelper.c functions.

Q: Which component should be assessed for exposure?

Assess deployments containing android/platform/packages/services/builtinprintservice, particularly where its IPP-related functionality may be reachable remotely.

Published Nov 1, 2026

Updated

In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

6 affected componentsFixes available

android/platform/packages/services/builtinprintservice>=17-qpr2-next:0<17-qpr2-next:2026-11-01

17-qpr2-next:2026-11-01

android/platform/packages/services/builtinprintservice>=15:0<15:2026-11-01

15:2026-11-01

android/platform/packages/services/builtinprintservice>=16:0<16:2026-11-01

16:2026-11-01

android/platform/packages/services/builtinprintservice>=16-qpr2:0<16-qpr2:2026-11-01

16-qpr2:2026-11-01

android/platform/packages/services/builtinprintservice>=17:0<17:2026-11-01

17:2026-11-01

android/platform/packages/services/builtinprintservice>=14:0<14:2026-11-01

14:2026-11-01

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The issue can be exploited remotely and does not require additional execution privileges or user interaction.

What is the expected impact of successful exploitation?

Successful exploitation could cause a remote denial of service through a stack buffer overflow in multiple ipphelper.c functions.

Which component should be assessed for exposure?

Assess deployments containing android/platform/packages/services/builtinprintservice, particularly where its IPP-related functionality may be reachable remotely.

A-503542266: Android/platform/packages/services/builtinprintservice vulnerability

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the expected impact of successful exploitation?

Which component should be assessed for exposure?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the expected impact of successful exploitation?

Which component should be assessed for exposure?