A-517375526: Integer Overflow

Q: What level of access does an attacker need to exploit this issue?

No additional execution privileges are needed. Exploitation also does not require user interaction.

Q: What is the practical impact of successful exploitation?

Successful exploitation can trigger a process abort, resulting in a remote denial of service.

Q: Is the affected Android version or a fixed version identified?

No affected Android version or fixed version is provided in the available data.

Published Nov 1, 2026

Updated

In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

No additional execution privileges are needed. Exploitation also does not require user interaction.

What is the practical impact of successful exploitation?

Successful exploitation can trigger a process abort, resulting in a remote denial of service.

Is the affected Android version or a fixed version identified?

No affected Android version or fixed version is provided in the available data.

A-517375526: Integer Overflow

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the practical impact of successful exploitation?

Is the affected Android version or a fixed version identified?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the practical impact of successful exploitation?

Is the affected Android version or a fixed version identified?