A-511308410: Android/:unknown: vulnerability

Q: What level of access does an attacker need to exploit this issue?

The issue can be exploited locally and does not require additional execution privileges. User interaction is not required.

Q: What is the potential impact of successful exploitation?

Successful exploitation could allow execution of code from non-secure memory in the security coprocessor, leading to escalation of privilege.

Q: Is a non-default configuration required for exploitation?

No. The issue is attributed to an insecure default value, indicating that the affected default behavior is relevant to exploitation.

Published Nov 1, 2026

Updated

In multiple functions of mpu.c, there is a possible way to execute code from non-secure memory in the security coprocessor due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue can be exploited locally and does not require additional execution privileges. User interaction is not required.

What is the potential impact of successful exploitation?

Successful exploitation could allow execution of code from non-secure memory in the security coprocessor, leading to escalation of privilege.

Is a non-default configuration required for exploitation?

No. The issue is attributed to an insecure default value, indicating that the affected default behavior is relevant to exploitation.

A-511308410: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

Is a non-default configuration required for exploitation?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

Is a non-default configuration required for exploitation?