Memory Corruption Vulnerability in Android Products Affected by Google
CVE-2026-58854

7.8HIGH

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
5 October 2026

What is CVE-2026-58854?

Recent findings indicate a vulnerability in Google Android products where memory corruption can occur due to type confusion in several system components. This flaw allows for local escalation of privilege without requiring additional execution permissions or user interaction, potentially exposing sensitive data or functionalities. It is crucial for users to stay informed and apply necessary security updates to mitigate risks associated with this vulnerability.

Affected Version(s)

Android 17

Android 16-qpr2

Android 16

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.