ASB-A-505573349: Integer Overflow

Q: What level of access does an attacker need to exploit this issue?

The issue is described as enabling local escalation of privilege. An attacker would need local access to the affected device, but no additional execution privileges are needed.

Q: Is user interaction required for exploitation?

No. The available information states that user interaction is not needed for exploitation.

Q: Which component is affected?

The affected software is android/platform/frameworks/native. The issue involves possible out-of-bounds writes caused by integer overflow in multiple locations.

Published Nov 1, 2026

Updated

In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

4 affected componentsFixes available

android/platform/frameworks/native>=17-qpr2-next:0<17-qpr2-next:2026-11-01

17-qpr2-next:2026-11-01

android/platform/frameworks/native>=16:0<16:2026-11-01

16:2026-11-01

android/platform/frameworks/native>=16-qpr2:0<16-qpr2:2026-11-01

16-qpr2:2026-11-01

android/platform/frameworks/native>=17:0<17:2026-11-01

17:2026-11-01

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue is described as enabling local escalation of privilege. An attacker would need local access to the affected device, but no additional execution privileges are needed.

Is user interaction required for exploitation?

No. The available information states that user interaction is not needed for exploitation.

Which component is affected?

The affected software is android/platform/frameworks/native. The issue involves possible out-of-bounds writes caused by integer overflow in multiple locations.

ASB-A-505573349: Integer Overflow

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Is user interaction required for exploitation?

Which component is affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Is user interaction required for exploitation?

Which component is affected?