Memory Safety Vulnerability in Bluetooth Functionality of Android Products

CVE-2026-58990

What is CVE-2026-58990?

A memory safety issue has been identified in the Bluetooth functionality of various Android products due to an integer overflow in the l2c_fcr_process_peer_cfg_req function. This vulnerability allows for potential remote information disclosure, which can occur without the need for user interaction or elevated execution privileges. As a result, compromised devices may expose sensitive information, making it critical for users to be aware of and address this issue promptly.

References