CVE-2026-58854

HighCVSS 7.8/10Last modified Oct 7, 2026

Description

In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-843

Affected software

Vendor	Product	Versions
Google	Android	17; 16-qpr2; 16; 15; 14

References

https://source.android.com/docs/security/bulletin/2026/2026-10-01Patch, Vendor Advisory

Timeline

Published: Oct 5, 2026
Last modified: Oct 7, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-588563.3In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. Th CVE-2026-588597.8In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escalation of privilege wi CVE-2026-58865.3Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive info CVE-2026-588657.5In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to CVE-2026-58874.3Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to bypa CVE-2026-588747.8In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead CVE-2026-58886.5Uninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information CVE-2026-588807.0In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to loca CVE-2026-58894.3Cryptographic Flaw in PDFium in Google Chrome prior to 147.0.7727.55 allowed an attacker to read potentially sensitive information from encr CVE-2026-58905.3Race in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process CVE-2026-58914.3Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the rend CVE-2026-58926.6Insufficient policy enforcement in PWAs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer p