PUB-A-509566666: Android/:unknown: vulnerability

Q: Who is realistically exposed to this issue?

Android systems that include the affected Trusty secure-world context-switch code may be exposed. Exploitation is local and requires execution privileges, so it is not described as remotely exploitable from the provided information.

Q: What does an attacker need to exploit it?

The attacker needs local execution privileges and user interaction. The issue is a logic error that can leak secure-world register state, resulting in information disclosure.

Q: How can I determine whether a device is affected?

The provided data identifies the affected component as services/spd/trusty/trusty.c, specifically trusty_context_switch, but does not provide affected Android versions, builds, or fixed versions. Verify the source or vendor security update status against the referenced Android security bulletin.

Published Nov 1, 2026

Updated

In trustycontextswitch of services/spd/trusty/trusty.c, there is a possible Secure world register state leak due to a logic error in the code. This could lead to local information disclosure with execution privileges needed. User interaction is for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

Who is realistically exposed to this issue?

Android systems that include the affected Trusty secure-world context-switch code may be exposed. Exploitation is local and requires execution privileges, so it is not described as remotely exploitable from the provided information.

What does an attacker need to exploit it?

The attacker needs local execution privileges and user interaction. The issue is a logic error that can leak secure-world register state, resulting in information disclosure.

How can I determine whether a device is affected?

The provided data identifies the affected component as services/spd/trusty/trusty.c, specifically trusty_context_switch, but does not provide affected Android versions, builds, or fixed versions. Verify the source or vendor security update status against the referenced Android security bulletin.

PUB-A-509566666: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

What does an attacker need to exploit it?

How can I determine whether a device is affected?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What does an attacker need to exploit it?

How can I determine whether a device is affected?