Out-of-Bounds Write Vulnerability in Android OS from Google
CVE-2026-58815

7.8HIGH

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
5 October 2026

What is CVE-2026-58815?

An out-of-bounds write vulnerability has been identified in the Android operating system, which occurs due to inadequate bounds checking in multiple components. This flaw allows for potential local escalation of privilege without requiring any additional execution privileges or user interaction for exploitation. Addressing this vulnerability is crucial for maintaining the integrity and security of devices running Android OS.

Affected Version(s)

Android 17

Android 16-qpr2

Android 16

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.