CVE-2026-57037: Android/:unknown: vulnerability

Q: Who is exposed to this issue?

Android devices that include the affected CHPP component are potentially exposed. The available data does not identify specific Android versions, device models, or build releases.

Q: What does an attacker need to exploit it?

Exploitation is local and requires no user interaction. The issue can lead to privilege escalation without requiring additional execution privileges.

Q: What is the potential impact?

An attacker may trigger an out-of-bounds read and corrupt task control structures, resulting in local escalation of privilege.

Published Nov 1, 2026

Updated

In getChppAppState of chppinit.cc, there is a possible way to trigger an out of bounds read and corrupt task control structures due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

Who is exposed to this issue?

Android devices that include the affected CHPP component are potentially exposed. The available data does not identify specific Android versions, device models, or build releases.

What does an attacker need to exploit it?

Exploitation is local and requires no user interaction. The issue can lead to privilege escalation without requiring additional execution privileges.

What is the potential impact?

An attacker may trigger an out-of-bounds read and corrupt task control structures, resulting in local escalation of privilege.

CVE-2026-57037: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the potential impact?