In multiple locations, there is a possible way to modify coprocessor instruction and data memory from non-secure software due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interact…
6.2Medium
CVE-2026-59031
Description
In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Weakness (CWE):
CWE-693
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
References and patches
CPE matches (NVD) (5)
cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*cpe:2.3:o:google:android:16.0:qpr2:*:*:*:*:*:*cpe:2.3:o:google:android:17.0:-:*:*:*:*:*:*