{"id":"ASB-A-509578318","details":"In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-509578318","CVE-2026-59010"],"modified":"2026-11-02T17:11:12.602857165Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/system/keymint","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/keymint/+/b277bd5a1508a6890a810d7faf9e336d12a7f24b"],"severity":"High","spl":"2026-11-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-509578318.json"}},{"package":{"name":"platform/system/keymint","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"types":["DoS"],"fixes":["https://android.googlesource.com/platform/system/keymint/+/55662cefcb3bd3728d981d40acda3a369305f156"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-509578318.json"}},{"package":{"name":"platform/system/keymint","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["DoS"],"fixes":["https://android.googlesource.com/platform/system/keymint/+/72652e5a1c540b06a5239350e902942da7840b83"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-509578318.json"}},{"package":{"name":"platform/system/keymint","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["DoS"],"fixes":["https://android.googlesource.com/platform/system/keymint/+/5b009679a2c32d0d653f901dd09ef71941eb6624"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-509578318.json"}},{"package":{"name":"platform/system/keymint","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["DoS"],"fixes":["https://android.googlesource.com/platform/system/keymint/+/e5515f8955e225ad739ac4345f9ef81553998b43"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-509578318.json"}}],"schema_version":"1.9.2"}