PUB-A-511307188: Android/:unknown: vulnerability
Published Nov 1, 2026
·Updated
In multiple functions of verifier.rs, there is a possible way to bypass secure boot signature verification via fault injection due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
1 affected componentFixes available
android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05
Pixel-family specific:2026-11-05
Event History
Nov 1, 2026
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software