{"id":"CVE-2026-59582","kind":"vulnerability","aliases":["CVE-2026-59582"],"related":[],"title":"Android UcePublishManager: integer overflow lets remote attacker crash process","description":"In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"An integer overflow in the StartTimer function of UcePublishManager.cpp can trigger a process abort during timer calculation. A remote attacker can use it to crash the affected process without any extra privileges or user interaction.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"UcePublishManager","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["android","other"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:29+00:00","first_seen_at":"2026-11-10T20:46:12+00:00","triaged_at":"2026-11-10T20:50:00+00:00","updated_at":"2026-11-10T20:50:00+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-10T20:50:00Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Android UcePublishManager: integer overflow lets remote attacker crash process","impact":"low","summary":"An integer overflow in the StartTimer function of UcePublishManager.cpp can trigger a process abort during timer calculation. A remote attacker can use it to crash the affected process without any extra privileges or user interaction.","audience":"everyone","category":"other","nicknames":[],"who_cares":["android"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"remote attacker crashes the affected process, denial of service","analyst_note":"Identify the affected product and Android version from the NVD entry and the vendor bulletin; the sources give no products or fixed versions.","how_to_check":"unknown","plain_action":"","product_name":"UcePublishManager","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000639,"input_tokens":4533,"output_tokens":371,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A '-59582':12A,15A 'abort':31B,66C 'addit':85C 'affect':44B 'android':1A,17B 'attack':7A,37B 'calcul':34B,69C 'could':76C 'crash':8A,42B 'cve':10A,13A 'denial':80C 'due':70C 'execut':86C 'exploit':95C 'extra':48B 'function':24B 'integ':3A,19B,73C 'interact':52B,90C 'lead':77C 'let':5A 'need':88C,93C 'overflow':4A,20B,74C 'possibl':60C 'privileg':49B,87C 'process':9A,30B,45B,65C 'remot':6A,36B,79C 'servic':82C 'starttim':23B,54C 'timer':33B,68C 'trigger':28B,63C 'ucepublishmanag':2A 'ucepublishmanager':16A 'ucepublishmanager.cpp':26B,56C 'use':39B 'user':51B,89C 'way':61C 'without':46B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":["ucepublishmanager"],"ptokens":["ucepublishmanager"],"labels":["android","other","unknown","vendor"],"campaign_type":null,"search_a":"'-2026':11A,14A '-59582':12A,15A 'android':1A 'attack':7A 'crash':8A 'cve':10A,13A 'integ':3A 'let':5A 'overflow':4A 'process':9A 'remot':6A 'ucepublishmanag':2A 'ucepublishmanager':16A","search_b":"'abort':31B 'affect':44B 'android':17B 'attack':37B 'calcul':34B 'crash':42B 'extra':48B 'function':24B 'integ':19B 'interact':52B 'overflow':20B 'privileg':49B 'process':30B,45B 'remot':36B 'starttim':23B 'timer':33B 'trigger':28B 'ucepublishmanager.cpp':26B 'use':39B 'user':51B 'without':46B","search_c":"'abort':66C 'addit':85C 'calcul':69C 'could':76C 'denial':80C 'due':70C 'execut':86C 'exploit':95C 'integ':73C 'interact':90C 'lead':77C 'need':88C,93C 'overflow':74C 'possibl':60C 'privileg':87C 'process':65C 'remot':79C 'servic':82C 'starttim':54C 'timer':68C 'trigger':63C 'ucepublishmanager.cpp':56C 'user':89C 'way':61C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:29+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-59582","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59582","severity":null,"published_at":"2026-11-10T20:19:29+00:00","modified_at":"2026-11-10T20:19:29+00:00","first_seen_at":"2026-11-10T20:46:12+00:00","fetched_at":"2026-11-10T20:46:12+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}