PUB-A-506291862: Android/:unknown: vulnerability

Q: What level of access does an attacker need to exploit this issue?

The issue is locally exploitable and does not require additional execution privileges. No user interaction is required.

Q: What information could be exposed?

A logic error in km_os_regen_salt may allow recovery of deleted keys, resulting in local information disclosure.

Published Nov 1, 2026

Updated

In kmosregensalt of storage.c, there is a possible way to recover deleted keys due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue is locally exploitable and does not require additional execution privileges. No user interaction is required.

What information could be exposed?

A logic error in km_os_regen_salt may allow recovery of deleted keys, resulting in local information disclosure.

PUB-A-506291862: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What information could be exposed?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What information could be exposed?