CVE-2026-59612: Buffer Overflow

Q: What access and conditions are required for exploitation?

Exploitation requires execution privileges and user interaction. The impact is described as a local escalation of privilege rather than a remote compromise.

Q: Are affected Android versions or specific devices identified?

No affected Android versions, device models, or build identifiers are provided. The software entry lists Android with an unknown version.

Published Nov 1, 2026

Updated

In bufferingperiod of avcdecoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What access and conditions are required for exploitation?

Exploitation requires execution privileges and user interaction. The impact is described as a local escalation of privilege rather than a remote compromise.

Are affected Android versions or specific devices identified?

No affected Android versions, device models, or build identifiers are provided. The software entry lists Android with an unknown version.

CVE-2026-59612: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

What access and conditions are required for exploitation?

Are affected Android versions or specific devices identified?

Company

Resources

Contact

Frequently Asked Questions

What access and conditions are required for exploitation?

Are affected Android versions or specific devices identified?