Skip to content
OpenAdvisories
Medium · 6.2 CVE-2026-59636 EUVD-2026-122673GHSA-f3xm-pp4m-rv42

In has_booted_successfully of sys_state_setup_otp_ta.c, there is a possible way to trigger a permanent denial of service via premature anti…

Published Nov 10, 2026 · Updated Nov 12, 2026 · Assigned by Google_Devices

Description

In has_booted_successfully of sys_state_setup_otp_ta.c, there is a possible way to trigger a permanent denial of service via premature anti-rollback fuse updates due to a logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References