Use-After-Free Vulnerability in EVS AIDL HAL by Android

CVE-2026-58927

What is CVE-2026-58927?

A vulnerability exists in the EVS AIDL HAL, caused by a Use-After-Free issue due to a data race on an unsynchronized std::weak_ptr within EvsEnumerator::openCamera(). This problem can arise from concurrent calls made by a privileged UID, which may lead to an inconsistent state for weak_ptr. As a result, this can enable virtual calls through a freed object's vtable, allowing for the execution of arbitrary code within the hal_evs_default process, which poses significant security risks.

References