CVE-2026-59575: Android/:unknown: vulnerability
Published Nov 1, 2026
·Updated
In stpropncicbobservemodesuspend of stpropncipropandroid.cc, there is a possible way to trigger an out of bounds write into global state due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
1 affected componentFixes available
android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05
Pixel-family specific:2026-11-05
Event History
Nov 1, 2026
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software