A-503546721: Android/:unknown: vulnerability

Q: What does an attacker need to exploit this issue?

The issue can be exploited remotely and does not require user interaction or additional execution privileges.

Q: What is the potential impact if exploitation succeeds?

Successful exploitation could allow escalation of privilege through an out-of-bounds write in PresenceDecoderV1::DecodeDataElements.

Published Nov 1, 2026

Updated

In PresenceDecoderV1::DecodeDataElements of presencedecoderv1.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=:0<:2026-11-05

:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What does an attacker need to exploit this issue?

The issue can be exploited remotely and does not require user interaction or additional execution privileges.

What is the potential impact if exploitation succeeds?

Successful exploitation could allow escalation of privilege through an out-of-bounds write in PresenceDecoderV1::DecodeDataElements.

A-503546721: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?