{"id":"CVE-2026-58841","published":"2026-10-05T19:17:24.753","lastModified":"2026-10-07T15:13:02.650","description":"In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-269"],"vendors":["google"],"products":["android"],"references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-10-01","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A logic error in VirtualAudioControllerTest.java allows local users to bypass permission checks and escalate privileges without needing additional execution privileges. This affects Google's Android platform and could enable attackers to gain elevated access to system resources.","exploitability":"Exploitation is straightforward with no user interaction required, needing only local access to trigger the permission bypass in the virtual audio controller test functions.","blast_radius":"The flaw could impact all Android devices running affected versions, potentially allowing attackers to execute arbitrary code with system-level privileges and access sensitive data.","remediation":"Upgrade to Android 15 or later, as this version contains the fixed implementation of VirtualAudioControllerTest.java that resolves the permission bypass vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","android","permission-bypass"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:56:55.665Z"}}