CVE-2026-58868

Google Android

Not yet assessed

In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

In the news

• Boletín de seguridad de Android: noviembre 2026 · INCIBE-CERT