Skip to content
OpenAdvisories
Unscored CVE-2026-59583 EUVD-2026-122636GHSA-x9hx-v473-f4qv

In FormCredentials of SipAuHelper.cpp, there is a possible way to disclose authentication credentials in cleartext via a scheme downgrade d…

Published Nov 10, 2026 · Assigned by Google_Devices

Description

In FormCredentials of SipAuHelper.cpp, there is a possible way to disclose authentication credentials in cleartext via a scheme downgrade due to improper input validation. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References