PUB-A-514745541: Android/:unknown: vulnerability

Q: What access does an attacker need to exploit this issue?

The issue is described as enabling local privilege escalation with no additional execution privileges needed. Exploitation does not require user interaction.

Q: What security control can be bypassed?

A logic error in check_constraint_monotonicity of lib.rs may allow stored security policies to be downgraded, bypassing rollback protection.

Published Nov 1, 2026

Updated

In checkconstraintmonotonicity of lib.rs, there is a possible way to downgrade stored security policies and bypass rollback protection due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The issue is described as enabling local privilege escalation with no additional execution privileges needed. Exploitation does not require user interaction.

What security control can be bypassed?

A logic error in check_constraint_monotonicity of lib.rs may allow stored security policies to be downgraded, bypassing rollback protection.

PUB-A-514745541: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What security control can be bypassed?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What security control can be bypassed?