PUB-A-516880239: Integer Overflow
Published Nov 1, 2026
·Updated
In BitmapImageBuffer of bitmapimagebuffer.h, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
Affected Software
1 affected componentFixes available
android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05
Pixel-family specific:2026-11-05
Event History
Nov 1, 2026
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software