Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Android | unaffected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Thu, 12 Nov 2026 03:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Cleartext Credential Disclosure via Scheme Downgrade in Android SipAuHelper | |
| Weaknesses | CWE-20 |
Tue, 10 Nov 2026 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In FormCredentials of SipAuHelper.cpp, there is a possible way to disclose authentication credentials in cleartext via a scheme downgrade due to improper input validation. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation. | |
| References |
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: Google_Devices
Published:
Updated: 2026-11-10T19:22:03.094Z
Reserved: 2026-07-06T06:23:27.542Z
Link: CVE-2026-59583
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-11-10T20:19:29.360
Modified: 2026-11-10T21:46:34.203
Link: CVE-2026-59583
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-11-12T03:00:06Z
-
CWE-20
Improper Input Validation