Out of Bounds Read Vulnerability in Android Framework by Google

CVE-2026-58988

What is CVE-2026-58988?

The vulnerability exists within the isValid function of ShimConverter.cpp, where a lack of appropriate bounds checking may allow for out of bounds read operations. This flaw could expose sensitive local information without the need for any additional execution privileges. Moreover, exploitation does not require user interaction, heightening the risk for affected systems.

References