ASB-A-517377188: Android/platform/frameworks/base vulnerability

Q: What level of access does an attacker need to exploit this issue?

The issue is described as a local escalation of privilege and requires no additional execution privileges. Exploitation does not require user interaction.

Q: Which components should be prioritized for investigation and remediation?

The affected software is android/platform/frameworks/base and android/platform/packages/services/mms. Devices or builds incorporating either component should be assessed against the referenced Android security bulletin.

Published Nov 1, 2026

Updated

In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

4 affected componentsFixes available

android/platform/frameworks/base>=17-qpr2-next:0<17-qpr2-next:2026-11-01

17-qpr2-next:2026-11-01

android/platform/packages/services/mms>=17-qpr2-next:0<17-qpr2-next:2026-11-01

17-qpr2-next:2026-11-01

android/platform/frameworks/base>=17:0<17:2026-11-01

17:2026-11-01

android/platform/packages/services/mms>=17:0<17:2026-11-01

17:2026-11-01

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue is described as a local escalation of privilege and requires no additional execution privileges. Exploitation does not require user interaction.

Which components should be prioritized for investigation and remediation?

The affected software is android/platform/frameworks/base and android/platform/packages/services/mms. Devices or builds incorporating either component should be assessed against the referenced Android security bulletin.

ASB-A-517377188: Android/platform/frameworks/base vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which components should be prioritized for investigation and remediation?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which components should be prioritized for investigation and remediation?