A-517376695: Use After Free

Q: What level of access does an attacker need to exploit this issue?

The issue can be exploited remotely and does not require additional execution privileges. No user interaction is needed.

Q: What is the potential impact of successful exploitation?

Successful exploitation could corrupt memory through a use-after-free condition involving a dangling connection pointer in the pending response queue. The reported impact is escalation of privilege.

Published Nov 1, 2026

Updated

In NotifySipResponse of SessionEx.cpp, there is a possible way to corrupt memory via a dangling connection pointer in the pending response queue due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue can be exploited remotely and does not require additional execution privileges. No user interaction is needed.

What is the potential impact of successful exploitation?

Successful exploitation could corrupt memory through a use-after-free condition involving a dangling connection pointer in the pending response queue. The reported impact is escalation of privilege.

A-517376695: Use After Free

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?