CVE-2026-58936

Google Android

Aún sin evaluar

In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

En las noticias

• Boletín de seguridad de Android: noviembre 2026 · INCIBE-CERT