PUB-A-511545157: Android/:unknown: vulnerability

Q: What level of access does an attacker need to exploit this issue?

Exploitation requires System execution privileges. No user interaction is needed once that level of access is available.

Q: What is the likely impact of successful exploitation?

Successful exploitation could cause local information disclosure through an out-of-bounds read during quantization table lookup.

Published Nov 1, 2026

Updated

In getCodecQp of GC2AV1Enc.cpp, there is a possible way to trigger an out of bounds read during quantization table lookup due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Exploitation requires System execution privileges. No user interaction is needed once that level of access is available.

What is the likely impact of successful exploitation?

Successful exploitation could cause local information disclosure through an out-of-bounds read during quantization table lookup.

PUB-A-511545157: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?