Heap Buffer Overflow Vulnerability in btif_storage.cc of Android Devices
CVE-2026-58835

8.8HIGH

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
5 October 2026

What is CVE-2026-58835?

A vulnerability exists in the btif_storage.cc component of Android, where a heap buffer overflow can occur, potentially allowing attackers to execute arbitrary code remotely without requiring any user interaction. This weakness increases the risk of unauthorized access and manipulation of affected devices, making timely mitigation essential for users.

Affected Version(s)

Android 17

Android 16-qpr2

Android 16

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.