CVE-2026-58936Not scored
Google Android vulnerability
Google · Android
Not in CISA KEV
No EPSS score yet. The score appears once FIRST publishes it.
Not scored yet. NVD has not published a CVSS score.
DescriptionNVD
In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 3 Nov.
- Google fixes 216 Android flaws in November security updateSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.