Permission Bypass Vulnerability in Bootloader by Android Inc.

CVE-2026-58678

What is CVE-2026-58678?

A vulnerability exists in the Bootloader due to a logic error in the code, potentially allowing attackers to bypass permission settings. This flaw can facilitate a local escalation of privileges, enabling unauthorized access with elevated system execution privileges. Notably, exploitation of this vulnerability does not require user interaction, posing a significant risk to affected devices. Organizations should remain vigilant and implement necessary mitigation measures to safeguard their systems.

References