PUB-A-508715351: Buffer Overflow

Q: What level of access does an attacker need to exploit this issue?

The issue requires execution privileges, so an attacker must already be able to execute code locally on the affected device.

Q: Is user interaction required for exploitation?

Yes. Exploitation requires user interaction.

Q: What is the potential impact if exploitation succeeds?

Successful exploitation could allow local escalation of privilege.

Published Nov 1, 2026

Updated

In spmalloc of encoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue requires execution privileges, so an attacker must already be able to execute code locally on the affected device.

Is user interaction required for exploitation?

Yes. Exploitation requires user interaction.

What is the potential impact if exploitation succeeds?

Successful exploitation could allow local escalation of privilege.

PUB-A-508715351: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Is user interaction required for exploitation?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Is user interaction required for exploitation?

What is the potential impact if exploitation succeeds?