CVE-2026-59623: Android/:unknown: vulnerability

Q: What access does an attacker need to exploit this issue?

The issue can be exploited remotely and does not require additional execution privileges or user interaction.

Q: What is the likely impact of successful exploitation?

Successful exploitation can trigger an unhandled out-of-range exception in CompareTelUris and crash the affected process, resulting in denial of service.

Published Nov 1, 2026

Updated

In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process crash due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The issue can be exploited remotely and does not require additional execution privileges or user interaction.

What is the likely impact of successful exploitation?

Successful exploitation can trigger an unhandled out-of-range exception in CompareTelUris and crash the affected process, resulting in denial of service.

CVE-2026-59623: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?