In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "fixes": [ "https://android.googlesource.com/platform/system/keymint/+/b277bd5a1508a6890a810d7faf9e336d12a7f24b" ], "severity": "High", "spl": "2026-11-01", "types": [ "DoS" ] }
"https://storage.googleapis.com/android-osv/ASB-A-509578318.json"
{ "fixes": [ "https://android.googlesource.com/platform/system/keymint/+/55662cefcb3bd3728d981d40acda3a369305f156" ], "severity": "High", "spl": "2026-11-01", "types": [ "DoS" ] }
{ "fixes": [ "https://android.googlesource.com/platform/system/keymint/+/72652e5a1c540b06a5239350e902942da7840b83" ], "severity": "High", "spl": "2026-11-01", "types": [ "DoS" ] }
{ "fixes": [ "https://android.googlesource.com/platform/system/keymint/+/5b009679a2c32d0d653f901dd09ef71941eb6624" ], "severity": "High", "spl": "2026-11-01", "types": [ "DoS" ] }
{ "fixes": [ "https://android.googlesource.com/platform/system/keymint/+/e5515f8955e225ad739ac4345f9ef81553998b43" ], "severity": "High", "spl": "2026-11-01", "types": [ "DoS" ] }