CVE-2026-58868Not scored
Google Android vulnerability
Google · Android
Not in CISA KEV
No EPSS score yet. The score appears once FIRST publishes it.
Not scored yet. NVD has not published a CVSS score.
DescriptionNVD
In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 3 Nov.
- Google fixes 216 Android flaws in November security updateSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.