Out-of-Bounds Read Vulnerability in Android's Bitmap Component

CVE-2026-58997

What is CVE-2026-58997?

A vulnerability exists in the validateImageInfo function of Bitmap.cpp that may lead to an out-of-bounds read. This flaw arises due to a precondition check failure, which could potentially allow an attacker to gain local access to sensitive information without requiring additional execution privileges. Exploitation of this issue does not necessitate any user interaction, making it particularly concerning for user data protection.

References