A-511807786: Android/:unknown: vulnerability

Q: What level of access does an attacker need to exploit this issue?

Exploitation is local and does not require additional execution privileges. No user interaction is required.

Q: What is the potential impact of successful exploitation?

A successful exploit could allow local escalation of privilege by bypassing secure buffer size validation using an unknown handle.

Q: Which Android versions or devices are affected?

The provided information identifies Android but does not specify affected versions, device models, or component versions.

Published Nov 1, 2026

Updated

In TOSSecureBufferCheckSize of securebuffer.c, there is a possible way to bypass secure buffer size validation via an unknown handle due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Exploitation is local and does not require additional execution privileges. No user interaction is required.

What is the potential impact of successful exploitation?

A successful exploit could allow local escalation of privilege by bypassing secure buffer size validation using an unknown handle.

Which Android versions or devices are affected?

The provided information identifies Android but does not specify affected versions, device models, or component versions.

A-511807786: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

Which Android versions or devices are affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

Which Android versions or devices are affected?