Heap Buffer Overflow in FrameDecoder.cpp Affecting Android by Google
CVE-2026-58868

Currently unrated

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
2 November 2026

Badges

👾 Exploit Exists📰 News Worthy

What is CVE-2026-58868?

A severe heap buffer overflow vulnerability has been identified in the onOutputReceived function of FrameDecoder.cpp within the Android operating system. This flaw could potentially allow an attacker to exploit the vulnerability remotely, leading to unauthorized code execution without requiring any user interaction or additional privileges. This security issue underscores the importance of keeping Android devices updated to its latest version to mitigate exposure to such risks.

Affected Version(s)

Android 17

Android 16-qpr2

Android 16

News Articles

favicon imageThe Hacker News

Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction

Google fixes 216 Android flaws, including 23 Critical bugs and a remote code execution vulnerability requiring no user interaction.

15 hours ago

References

https://source.android.com/docs/security/bulletin/2026/20...

Timeline

  • 👾

    Exploit known to exist

  • 📰

    First article discovered by The Hacker News

  • Vulnerability published

  • Vulnerability Reserved

.