A-507771255: Input Validation

Q: What level of access does an attacker need to exploit this issue?

An attacker needs local access. No additional execution privileges and no user interaction are required.

Q: What is the expected impact of successful exploitation?

The stated impact is a local denial of service caused by type confusion from improper input validation in aoc_unlocked_ioctl_handle_ion_fd of aoc.c.

Published Nov 1, 2026

Updated

In aocunlockedioctlhandleionfd of aoc.c, there is a possible type confusion due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=:0<:2026-11-05

:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

An attacker needs local access. No additional execution privileges and no user interaction are required.

What is the expected impact of successful exploitation?

The stated impact is a local denial of service caused by type confusion from improper input validation in aoc_unlocked_ioctl_handle_ion_fd of aoc.c.

A-507771255: Input Validation

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the expected impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the expected impact of successful exploitation?