Out-of-Bounds Write Vulnerability in Android's hppsfilter.c
CVE-2026-58966

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
2 November 2026

What is CVE-2026-58966?

The hppsfilter component of Android is impacted by an out-of-bounds write vulnerability stemming from a stack buffer overflow in multiple functions of hppsfilter.c. This issue allows for local escalation of privilege without requiring any additional execution privileges or user interaction for exploitation. It is crucial for users and administrators to apply the latest security updates to mitigate this vulnerability.

Affected Version(s)

Android 17

Android 16-qpr2

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.