Denial of Service Vulnerability in Android's Legacy.rs Module

CVE-2026-59010

What is CVE-2026-59010?

A vulnerability exists in the legacy.rs module of Android software where a missing bounds check can lead to a denial of service situation. This flaw may allow an attacker to exploit the deserialization process, potentially resulting in a local denial of service with no additional execution privileges needed. Notably, user interaction is not required for this vulnerability to be exploited, which increases its risk potential. It is crucial for users to remain aware of this issue to mitigate any possible attacks.

References