CVE-2026-57013: Android/:unknown: vulnerability

Q: What level of access does an attacker need to exploit this issue?

Exploitation requires local System execution privileges. User interaction is not required.

Q: Are devices using the default configuration potentially affected?

Yes. The issue is caused by an insecure default value involving unclaimed firewall registers, so configurations retaining that default are potentially exposed.

Published Nov 1, 2026

Updated

In accesscontrolenable of multiple files, there is a possible way to release secure coprocessors from reset via unclaimed firewall registers due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Exploitation requires local System execution privileges. User interaction is not required.

Are devices using the default configuration potentially affected?

Yes. The issue is caused by an insecure default value involving unclaimed firewall registers, so configurations retaining that default are potentially exposed.

CVE-2026-57013: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Are devices using the default configuration potentially affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Are devices using the default configuration potentially affected?