Android Open Source Project, Android Security Bulletin
android-security-bulletin · A · candidate
https://source.android.com/docs/security/bulletin/2026/2026-11-01
2026-11-08 run 2026-11-08T0256Z-intel: added as candidate. Monthly first-party Android and Pixel bulletin (2026-11-01 edition published 2026-11-02, revised 2026-11-06) with the critical Framework flaws and the limited-exploitation flag; reads cleanly with `extract`; no Android record existed.
Cited in 3 entries
Citation cadence
Citation days per ISO week (23 weeks of coverage span, total 3).
- Android telephony ('SMS of Death'): one hidden WAP Push message crashes the phone process and drops calls, emergency calls included; fixed for Android 14 to 17 at the 2026-11-01 security patch level per Google's bulletin row for CVE-2026-58882, the identifier BleepingComputer gives; Android 12 and 13 stay exposed, public proof of concept2026-11-02
- CVE-2026-58704: Google Pixel zero-click privilege escalation out of the cellular modem sandbox, listed in CISA KEV as exploited2026-09-17
- CVE-2025-48595, Android Framework: actively-exploited integer-overflow privilege escalation2026-06-03