CVE-2026-59582
In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
What each source reports
OSVPUB-A-517375526 No score
In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
- Record
PUB-A-517375526- Updated
- 2026-11-05
Affected packages
| Package | Affected | Fixed |
|---|---|---|
:unknown:Android |
Pixel-family specific:0 up to Pixel-family specific:2026-11-05, plus listed versions Pixel-family specific |
Pixel-family specific:2026-11-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-59582 is a vulnerability with no CVSS score yet in :unknown:, published November 1, 2026. No source lists public exploit code. Fixed in :unknown: Pixel-family specific:2026-11-05.