Heap Buffer Overflow Vulnerability in Android ZipFileRO Component

CVE-2026-58995

What is CVE-2026-58995?

A memory safety issue has been identified in the ZipFileRO component that may lead to a heap buffer overflow. This vulnerability could potentially allow a local attacker to escalate privileges without requiring additional execution privileges. Exploitation of this vulnerability does not necessitate user interaction, making it particularly concerning. It is recommended to apply the latest security updates to mitigate potential risks.

References