CVE-2026-0169

In multiple functions of Android.bp, there is a possible way to bind to a privileged debug overlay service due to test or debugging code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

• https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01

Published

Nov 10, 2026

Last Modified

Nov 10, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-0160In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDe…8.8
• CVE-2026-0161In numberOfReportBlocks of RtpSession.cpp, there is a possib…8.8
• CVE-2026-0162In ParsePayloads of AudioSdpParser.cpp, there is a possible …8.8
• CVE-2026-0163In multiple functions of vpu_ioctl.c, there is a possible us…9.8
• CVE-2026-0164In Modem, there is a possible out of bounds write due to a m…8.8
• CVE-2026-0165In several functions of the RTCP packet decoder, there is a …6.5
• CVE-2026-0170In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possib…8.8
• CVE-2026-0171In multiple locations, there is a possible out-of-bounds wri…8.8
• CVE-2026-0175In multiple locations, there is a possible way to bypass key…
• CVE-2026-0177In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possibl…4.4
• CVE-2026-0178In multiple functions of arm-smmu-v3.c, there is a possible …
• CVE-2026-0179In Bootloader, there is a possible permission bypass due to …6.7