Skip to content
OpenAdvisories
High · 8.4 CVE-2026-58964 EUVD-2026-115400GHSA-6rjc-8jrj-7rp5

In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation. This could lead to loc…

Published Nov 2, 2026 · Updated Nov 4, 2026 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 17, 16-qpr2, 16, 15, 14 —

Advisories 2

References