Out-of-Bounds Read Vulnerability in Android Codebook by Google
CVE-2026-59007

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
2 November 2026

What is CVE-2026-59007?

An out-of-bounds read vulnerability exists in the decode_packed_entry_number function of the codebook.c file in Google's Android operating system. This flaw arises from a logic error in the code which can be exploited to disclose sensitive information remotely. Notably, the exploitation does not require any execution privileges or user interaction, making it particularly concerning for users and administrators.

Affected Version(s)

Android 17

Android 16-qpr2

Android 16

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.