In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "severity": "High", "spl": "2026-11-05", "types": [ "RCE" ] }
"https://storage.googleapis.com/android-osv/PUB-A-503505702.json"