{"id":"CVE-2026-58815","published":"2026-10-05T19:17:24.423","lastModified":"2026-10-07T14:45:22.323","description":"In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-119"],"vendors":["google"],"products":["android"],"references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-10-01","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A memory safety flaw in Google's Android platform allows attackers to write beyond allocated buffer boundaries, potentially enabling local privilege escalation without requiring additional execution privileges or user interaction.","exploitability":"Exploitation is relatively straightforward as it requires only local access with existing user privileges, and no user interaction is needed for the vulnerability to be triggered.","blast_radius":"The flaw could affect a wide range of Android devices and applications that rely on the vulnerable memory handling functions, potentially allowing attackers to gain elevated system privileges on affected devices.","remediation":"Apply the latest Android security patch update which includes fixes for this memory safety issue.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","memory-safety","android"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:57:01.039Z"}}