Denial of Service Vulnerability in Android Product by Google
CVE-2026-58985

Currently unrated

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
2 November 2026

What is CVE-2026-58985?

A logic error in the handleConnectInternal function of RpcServerTrusty.cpp leads to a potential denial of service in certain Android products. This vulnerability allows an attacker to exploit the logic flaw without requiring elevated privileges or user interaction, potentially disrupting operations and affecting the integrity of service.

Affected Version(s)

Android 17

Android 16-qpr2

References

https://source.android.com/docs/security/bulletin/2026/20...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.