In TzPipelineInputExtractor of TzPipelineInputExtractor.cpp, there is a possible Logic check bypass due to a logic error in the code. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
History

Fri, 13 Nov 2026 22:45:00 +0000

Type Values Removed Values Added
Title Logic Check Bypass in Android TzPipelineInputExtractor Enables Local Privilege Escalation

Fri, 13 Nov 2026 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-693
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


Fri, 13 Nov 2026 13:00:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google android
Vendors & Products Google
Google android

Thu, 12 Nov 2026 20:45:00 +0000

Type Values Removed Values Added
Title Logic Check Bypass Allows Local Privilege Escalation on Android
Weaknesses CWE-285
CWE-732

Thu, 12 Nov 2026 03:00:00 +0000

Type Values Removed Values Added
Title Logic Check Bypass Allows Local Privilege Escalation on Android
Weaknesses CWE-285
CWE-732

Tue, 10 Nov 2026 19:30:00 +0000

Type Values Removed Values Added
Description In TzPipelineInputExtractor of TzPipelineInputExtractor.cpp, there is a possible Logic check bypass due to a logic error in the code. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: Google_Devices

Published: 2026-11-10T19:22:18.533Z

Updated: 2026-11-13T14:43:10.286Z

Reserved: 2026-07-06T06:27:19.075Z

Link: CVE-2026-59607

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-11-10T20:19:31.073

Modified: 2026-11-13T15:17:54.860

Link: CVE-2026-59607

cve-icon Redhat

No data.