Unscored CVE-2026-57005 EUVD-2026-122744GHSA-j76m-cr39-wx3m

In EuiccPort.buildUiccAccessRule of EuiccPort.java, there is a possible Confused Deputy due to a confused deputy. This could lead to remote…

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by Google_Devices

Vendor: Google Product: Android Platform: Android

Description

In EuiccPort.buildUiccAccessRule of EuiccPort.java, there is a possible Confused Deputy due to a confused deputy. This could lead to remote escalation of privilege with execution privileges needed. User interaction is for exploitation.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	Android kernel	—

Advisories 1

WID-SEC-2026-4457 Google Android Pixel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 10, 2026

References

https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01