A-511811378: Android/:unknown: vulnerability

Q: Who is realistically exposed to this issue?

Android systems containing the affected tipc_virtio_dev.c code path may be exposed. Exploitation is described as local and does not require user interaction.

Q: What access does an attacker need to exploit it?

The issue requires System execution privileges. The available data does not indicate that an unprivileged application can exploit it directly.

Q: What is the potential impact of successful exploitation?

The probe-failure cleanup logic can corrupt memory, which could enable local privilege escalation. The stated target privilege level is System execution privileges.

Q: Can this be exploited without a user approving or opening anything?

Yes. User interaction is not needed for exploitation.

Published Nov 1, 2026

Updated

In tipcdevprobe of tipcvirtiodev.c, there is a possible way to corrupt memory via an off-by-one cleanup loop on probe failure due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

Who is realistically exposed to this issue?

Android systems containing the affected tipc_virtio_dev.c code path may be exposed. Exploitation is described as local and does not require user interaction.

What access does an attacker need to exploit it?

The issue requires System execution privileges. The available data does not indicate that an unprivileged application can exploit it directly.

What is the potential impact of successful exploitation?

The probe-failure cleanup logic can corrupt memory, which could enable local privilege escalation. The stated target privilege level is System execution privileges.

Can this be exploited without a user approving or opening anything?

Yes. User interaction is not needed for exploitation.

A-511811378: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

What access does an attacker need to exploit it?

What is the potential impact of successful exploitation?

Can this be exploited without a user approving or opening anything?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What access does an attacker need to exploit it?

What is the potential impact of successful exploitation?

Can this be exploited without a user approving or opening anything?