CVE-2026-0169

In multiple functions of Android.bp, there is a possible way to bind to a privileged debug overlay service due to test or debugging code.

In multiple functions of Android.bp, there is a possible way to bind to a privileged debug overlay service due to test or debugging code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

10. Nov 2026

Ausgewertete Quellen

• Android
  https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01
• NVD
  CVE-2026-0169