pub-a-530002430

osv_android
Description

In GetTwiddledMiptreeSparsePageMap of texmgmt.c, there is a possible way to trigger an out of bounds write due to a logic error. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References
Linked Vulnerabilities

No linked vulnerabilities found.

{
  "affected": [
    {
      "database_specific": {
        "source": "https://storage.googleapis.com/android-osv/PUB-A-530002430.json"
      },
      "ecosystem_specific": {
        "severity": "High",
        "spl": "2026-11-05",
        "types": [
          "RCE"
        ]
      },
      "package": {
        "ecosystem": "Android",
        "name": ":unknown:"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": ":0"
            },
            {
              "fixed": ":2026-11-05"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "Device specific"
      ]
    }
  ],
  "aliases": [
    "A-530002430",
    "CVE-2026-59625"
  ],
  "details": "In GetTwiddledMiptreeSparsePageMap of texmgmt.c, there is a possible way to trigger an out of bounds write due to a logic error. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.",
  "id": "PUB-A-530002430",
  "modified": "2026-11-04T16:48:29.960526221Z",
  "published": "2026-11-01T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://source.android.com/security/bulletin/2026-11-01"
    }
  ],
  "schema_version": "1.9.2"
}
View JSON API Download JSON