{"id":"CVE-2026-0169","kind":"vulnerability","aliases":["CVE-2026-0169"],"related":[],"title":"Android: debug code lets local apps bind a privileged overlay service","description":"In multiple functions of Android.bp, there is a possible way to bind to a privileged debug overlay service due to test or debugging code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"Test or debugging code in Android.bp exposes a privileged debug overlay service that can be bound to. A local app or process can use it to escalate its privileges on the device.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","infrastructure","mobile"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:17:20+00:00","first_seen_at":"2026-11-10T20:46:00+00:00","triaged_at":"2026-11-10T20:54:15+00:00","updated_at":"2026-11-10T20:54:15+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:54:15Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Android: debug code lets local apps bind a privileged overlay service","impact":"high","summary":"Test or debugging code in Android.bp exposes a privileged debug overlay service that can be bound to. A local app or process can use it to escalate its privileges on the device.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["android","mobile"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"local app gains elevated system privileges on the device","analyst_note":"Find the Android Security Bulletin entry for CVE-2026-0169 to confirm affected versions, the patch level and whether a fix has shipped.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Affects Android devices, where the flaw is in the system build of the Android platform rather than in apps a person installs. The sources do not say which Android versions or device builds are affected, or which fix ships with which update.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000653,"input_tokens":4525,"output_tokens":401,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-0169':14A,17A '-2026':13A,16A 'addit':87C 'android':1A,18B 'android.bp':26B,57C 'app':6A,40B 'bind':7A,64C 'bound':36B 'code':3A,24B,76C 'could':78C 'cve':12A,15A 'debug':2A,23B,30B,68C,75C 'devic':52B 'due':71C 'escal':47B,82C 'execut':88C 'exploit':97C 'expos':27B 'function':55C 'infrastructur':19B 'interact':92C 'lead':79C 'let':4A 'local':5A,39B,81C 'mobil':20B 'multipl':54C 'need':90C,95C 'overlay':10A,31B,69C 'possibl':61C 'privileg':9A,29B,49B,67C,84C,89C 'process':42B 'servic':11A,32B,70C 'test':21B,73C 'use':44B 'user':91C 'way':62C","nicknames":[],"mitigations":[],"who_affected":"Affects Android devices, where the flaw is in the system build of the Android platform rather than in apps a person installs. The sources do not say which Android versions or device builds are affected, or which fix ships with which update.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["android","infrastructure","mobile","unknown"],"campaign_type":null,"search_a":"'-0169':14A,17A '-2026':13A,16A 'android':1A 'app':6A 'bind':7A 'code':3A 'cve':12A,15A 'debug':2A 'let':4A 'local':5A 'overlay':10A 'privileg':9A 'servic':11A","search_b":"'android':18B 'android.bp':26B 'app':40B 'bound':36B 'code':24B 'debug':23B,30B 'devic':52B 'escal':47B 'expos':27B 'infrastructur':19B 'local':39B 'mobil':20B 'overlay':31B 'privileg':29B,49B 'process':42B 'servic':32B 'test':21B 'use':44B","search_c":"'addit':87C 'android.bp':57C 'bind':64C 'code':76C 'could':78C 'debug':68C,75C 'due':71C 'escal':82C 'execut':88C 'exploit':97C 'function':55C 'interact':92C 'lead':79C 'local':81C 'multipl':54C 'need':90C,95C 'overlay':69C 'possibl':61C 'privileg':67C,84C,89C 'servic':70C 'test':73C 'user':91C 'way':62C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:17:20+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-0169","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0169","severity":null,"published_at":"2026-11-10T20:17:20+00:00","modified_at":"2026-11-10T20:17:20+00:00","first_seen_at":"2026-11-10T20:46:00+00:00","fetched_at":"2026-11-10T20:46:00+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}