A-510952857: Android/:unknown: vulnerability

Q: Who is realistically exposed to this issue?

Android systems containing the affected access_control_enable code in multiple files may be exposed if the insecure default value is present in the relevant firewall registers. Exploitation is local and requires System execution privileges.

Q: What does an attacker need to exploit it?

An attacker needs local access with System execution privileges. No user interaction is required.

Q: Are default configurations affected?

The issue is caused by an insecure default value in unclaimed firewall registers, so systems using that default may be affected.

Q: What is the potential impact after exploitation?

The vulnerability could allow secure coprocessors to be released from reset, resulting in local escalation of privilege.

Published Nov 1, 2026

Updated

In accesscontrolenable of multiple files, there is a possible way to release secure coprocessors from reset via unclaimed firewall registers due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

Who is realistically exposed to this issue?

Android systems containing the affected access_control_enable code in multiple files may be exposed if the insecure default value is present in the relevant firewall registers. Exploitation is local and requires System execution privileges.

What does an attacker need to exploit it?

An attacker needs local access with System execution privileges. No user interaction is required.

Are default configurations affected?

The issue is caused by an insecure default value in unclaimed firewall registers, so systems using that default may be affected.

What is the potential impact after exploitation?

The vulnerability could allow secure coprocessors to be released from reset, resulting in local escalation of privilege.

A-510952857: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

What does an attacker need to exploit it?

Are default configurations affected?

What is the potential impact after exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What does an attacker need to exploit it?

Are default configurations affected?

What is the potential impact after exploitation?