Out-of-Bounds Write Vulnerability in Android Device Firmware

CVE-2026-58773

What is CVE-2026-58773?

In the link_load_gnss_image function of the link_device.c file, there exists a potential out-of-bounds write vulnerability due to insufficient bounds checking. This flaw may allow attackers to execute arbitrary code, leading to local privilege escalation. Notably, this vulnerability can be exploited without requiring user interaction, heightening its severity. It primarily impacts the Android Device Firmware, raising concerns for security across various Android devices, including Pixel models.

References