CVE-2026-58838

MediumCVSS 4.0/10Last modified Nov 10, 2026

Description

In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 4.0/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
GoogleAndroid17; 16-qpr2; 16; 15; 14

References

Timeline

Published
Nov 2, 2026
Last modified
Nov 10, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-588397.8In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation ofCVE-2026-58848.8Insufficient validation of untrusted input in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised thCVE-2026-588417.8In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This couldCVE-2026-588448.4In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check. This could lead to local escalation ofCVE-2026-588458.4In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege CVE-2026-588467.8In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation ofCVE-2026-588478.4In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the code. This could lead to local escalation CVE-2026-588487.0In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalCVE-2026-58856.5Insufficient validation of untrusted input in WebML in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to obtain pCVE-2026-588537.5In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check. This could lead to remote denCVE-2026-588547.8In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with noCVE-2026-588563.3In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. Th
CVE-2026-58838: Medium severity, CVSS 4.0 | Vulnix