{"id":"ASB-A-509578318", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-05T16:32:28.703711716Z", "aliases":["CVE-2026-59010", "A-509578318"], "details":"In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/system/keymint", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/keymint/+/b277bd5a1508a6890a810d7faf9e336d12a7f24b"], "severity":"High", "spl":"2026-11-01", "types":["DoS"]}}, {"package":{"name":"platform/system/keymint", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/keymint/+/55662cefcb3bd3728d981d40acda3a369305f156"], "severity":"High", "spl":"2026-11-01", "types":["DoS"]}}, {"package":{"name":"platform/system/keymint", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/keymint/+/72652e5a1c540b06a5239350e902942da7840b83"], "severity":"High", "spl":"2026-11-01", "types":["DoS"]}}, {"package":{"name":"platform/system/keymint", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/keymint/+/5b009679a2c32d0d653f901dd09ef71941eb6624"], "severity":"High", "spl":"2026-11-01", "types":["DoS"]}}, {"package":{"name":"platform/system/keymint", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/keymint/+/e5515f8955e225ad739ac4345f9ef81553998b43"], "severity":"High", "spl":"2026-11-01", "types":["DoS"]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}