Skip to content
OpenAdvisories
Medium · 6.2 CVE-2026-58817 EUVD-2026-115580GHSA-549h-8vfm-4722

In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improper input validation.…

Published Nov 2, 2026 · Updated Nov 3, 2026 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 17, 16-qpr2, 16, 15, 14 —

Advisories 2

References