Skip to content
OpenAdvisories
High · 8.4 CVE-2026-59597 EUVD-2026-122645GHSA-3gg5-c6wj-93mx

In bindDataService of DataServiceManager.java, there is a possible way to retain privileged tunnel management permissions across configurat…

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by Google_Devices

Description

In bindDataService of DataServiceManager.java, there is a possible way to retain privileged tunnel management permissions across configuration updates due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References