PUB-A-477593252: Android/:unknown: vulnerability

Q: What attacker position is required to exploit this issue?

An attacker must be remote but proximal or adjacent to the affected device. No user interaction is required.

Q: Does exploitation require elevated privileges or additional execution privileges?

No. The issue can lead to code execution without requiring additional execution privileges.

Published Nov 1, 2026

Updated

In multiple functions of cnTai.cpp, there is a possible way to trigger an out of bounds write due to memory corruption. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What attacker position is required to exploit this issue?

An attacker must be remote but proximal or adjacent to the affected device. No user interaction is required.

Does exploitation require elevated privileges or additional execution privileges?

No. The issue can lead to code execution without requiring additional execution privileges.

PUB-A-477593252: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

What attacker position is required to exploit this issue?

Does exploitation require elevated privileges or additional execution privileges?

Company

Resources

Contact

Frequently Asked Questions

What attacker position is required to exploit this issue?

Does exploitation require elevated privileges or additional execution privileges?