Skip to content
OpenAdvisories
Unscored CVE-2026-58796 EUVD-2026-122783GHSA-4m7x-r5wg-f944

In multiple functions of AndroidManifest.xml, there is a possible way to trigger unauthorized firmware updates via exported broadcast recei…

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by Google_Devices

Description

In multiple functions of AndroidManifest.xml, there is a possible way to trigger unauthorized firmware updates via exported broadcast receivers due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References