PUB-A-513170242: Input Validation

Q: What does an attacker need to exploit this issue?

The issue is described as remotely exploitable and does not require user interaction. Exploitation requires System execution privileges.

Q: What is the likely impact if exploitation succeeds?

Successful exploitation could disclose authentication credentials in cleartext by downgrading the authentication scheme.

Published Nov 1, 2026

Updated

In FormCredentials of SipAuHelper.cpp, there is a possible way to disclose authentication credentials in cleartext via a scheme downgrade due to improper input validation. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What does an attacker need to exploit this issue?

The issue is described as remotely exploitable and does not require user interaction. Exploitation requires System execution privileges.

What is the likely impact if exploitation succeeds?

Successful exploitation could disclose authentication credentials in cleartext by downgrading the authentication scheme.

PUB-A-513170242: Input Validation

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the likely impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the likely impact if exploitation succeeds?