Out-of-Bounds Write Vulnerability in Android Wear by Google
CVE-2026-58977
Currently unrated
What is CVE-2026-58977?
A vulnerability exists in the is_valid_header function within timed_cache_item.c in Android Wear, where a missing bounds check can lead to an out-of-bounds write. This flaw may allow an attacker to escalate privileges locally, necessitating system execution privileges for the exploit. The vulnerability does not require any user interaction for exploitation, putting users at heightened risk.
Affected Version(s)
Android 17