Skip to content
OpenAdvisories
Medium · 6.7 CVE-2026-58977 EUVD-2026-115625GHSA-q43p-4rrg-2cqw

In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local e…

Published Nov 2, 2026 · Updated Nov 4, 2026 · Assigned by google_android

Description

In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 17 —

Advisories 1

References