A-508727728: Buffer Overflow

Q: What level of access does an attacker need to exploit this issue?

Exploitation requires System execution privileges, so it is relevant to attackers who can already execute code in the System context. No user interaction is required.

Q: What is the potential impact if exploitation succeeds?

The issue could allow local escalation of privilege. It is caused by a heap buffer overflow in handle_fips_hmac_req of hwcrypto_proxy.c.

Published Nov 1, 2026

Updated

In handlefipshmacreq of hwcryptoproxy.c, there is a possible heap buffer overflow due to missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Exploitation requires System execution privileges, so it is relevant to attackers who can already execute code in the System context. No user interaction is required.

What is the potential impact if exploitation succeeds?

The issue could allow local escalation of privilege. It is caused by a heap buffer overflow in handle_fips_hmac_req of hwcrypto_proxy.c.

A-508727728: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?