{"id":"CVE-2026-59626","kind":"vulnerability","aliases":["CVE-2026-59626"],"related":[],"title":"UssiController SendInfo use-after-free lets remote attackers escalate privileges","description":"In SendInfo of UssiController.cpp, there is a possible way to corrupt memory via a dangling connection listener pointer due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"In SendInfo of UssiController.cpp, a dangling connection listener pointer causes a use-after-free, corrupting memory. The description says a remote attacker could escalate privileges without extra execution privileges or user interaction.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"UssiController.cpp","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["other","unknown-product"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:32+00:00","first_seen_at":"2026-11-10T20:46:15+00:00","triaged_at":"2026-11-10T20:49:34+00:00","updated_at":"2026-11-10T20:49:34+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-11-10T20:49:34Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"UssiController SendInfo use-after-free lets remote attackers escalate privileges","impact":"high","summary":"In SendInfo of UssiController.cpp, a dangling connection listener pointer causes a use-after-free, corrupting memory. The description says a remote attacker could escalate privileges without extra execution privileges or user interaction.","audience":"businesses","category":"other","nicknames":[],"who_cares":["unknown-product"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"remote code or privilege escalation via memory corruption","analyst_note":"Identify the affected product and its vendor from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-59626; the file name suggests an Android/AOSP component, so check the vendor bulletin and fixed build.","how_to_check":"unknown","plain_action":"","product_name":"UssiController.cpp","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000666,"input_tokens":4535,"output_tokens":424,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-59626':14A,17A 'addit':90C 'attack':9A,45B 'caus':32B 'connect':29B,71C 'corrupt':38B,66C 'could':46B,81C 'cve':12A,15A 'dangl':28B,70C 'descript':41B 'due':74C 'escal':10A,47B,85C 'execut':51B,91C 'exploit':100C 'extra':50B 'free':6A,37B,79C 'interact':55B,95C 'lead':82C 'let':7A 'listen':30B,72C 'memori':39B,67C 'need':93C,98C 'pointer':31B,73C 'possibl':63C 'privileg':11A,48B,52B,87C,92C 'product':22B 'remot':8A,44B,84C 'say':42B 'sendinfo':2A,24B,57C 'unknown':21B 'unknown-product':20B 'use':4A,35B,77C 'use-after-fre':3A,34B 'user':54B,94C 'ussicontrol':1A 'ussicontroller.cpp':18A,26B,59C 'via':68C 'way':64C 'without':49B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["ussicontrollercpp"],"ptokens":["cpp","ussicontroller"],"labels":["other","unknown","unknownproduct","vendor"],"campaign_type":null,"search_a":"'-2026':13A,16A '-59626':14A,17A 'attack':9A 'cve':12A,15A 'escal':10A 'free':6A 'let':7A 'privileg':11A 'remot':8A 'sendinfo':2A 'use':4A 'use-after-fre':3A 'ussicontrol':1A 'ussicontroller.cpp':18A","search_b":"'attack':45B 'caus':32B 'connect':29B 'corrupt':38B 'could':46B 'dangl':28B 'descript':41B 'escal':47B 'execut':51B 'extra':50B 'free':37B 'interact':55B 'listen':30B 'memori':39B 'pointer':31B 'privileg':48B,52B 'product':22B 'remot':44B 'say':42B 'sendinfo':24B 'unknown':21B 'unknown-product':20B 'use':35B 'use-after-fre':34B 'user':54B 'ussicontroller.cpp':26B 'without':49B","search_c":"'addit':90C 'connect':71C 'corrupt':66C 'could':81C 'dangl':70C 'due':74C 'escal':85C 'execut':91C 'exploit':100C 'free':79C 'interact':95C 'lead':82C 'listen':72C 'memori':67C 'need':93C,98C 'pointer':73C 'possibl':63C 'privileg':87C,92C 'remot':84C 'sendinfo':57C 'use':77C 'user':94C 'ussicontroller.cpp':59C 'via':68C 'way':64C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:32+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-59626","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59626","severity":null,"published_at":"2026-11-10T20:19:32+00:00","modified_at":"2026-11-10T20:19:32+00:00","first_seen_at":"2026-11-10T20:46:15+00:00","fetched_at":"2026-11-10T20:46:15+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}