ASB-A-498369302: Integer Overflow

Q: What level of access does an attacker need to exploit this issue?

The issue is described as a local escalation of privilege vulnerability. Exploitation requires local access, but no additional execution privileges are needed.

Q: Does exploitation require user interaction?

No. The advisory states that user interaction is not needed for exploitation.

Q: What is the underlying vulnerability class?

The out-of-bounds write is caused by an integer overflow and is categorized as CWE: Integer Overflow.

Published Nov 1, 2026

Updated

In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:linux_kernel:>=:0<:2026-11-05

:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue is described as a local escalation of privilege vulnerability. Exploitation requires local access, but no additional execution privileges are needed.

Does exploitation require user interaction?

No. The advisory states that user interaction is not needed for exploitation.

What is the underlying vulnerability class?

The out-of-bounds write is caused by an integer overflow and is categorized as CWE: Integer Overflow.

ASB-A-498369302: Integer Overflow

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Does exploitation require user interaction?

What is the underlying vulnerability class?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Does exploitation require user interaction?

What is the underlying vulnerability class?