Out-of-Bounds Read Vulnerability in Android by Google

CVE-2026-58731

What is CVE-2026-58731?

The vulnerability resides in multiple functions of the physmem_extmem_linux.c file, where uninitialized data is present. This flaw allows for an out-of-bounds read, which can result in local information disclosure. Notably, the exploitation of this vulnerability does not require any additional execution privileges or user interaction, making it a potential risk for users of the affected Android products. Addressing this issue is crucial for maintaining the security and integrity of the device.

References