8.4

CVE-2026-58699

EPSS 0.11%
Veröffentlicht 15.09.2026 18:34:36
Zuletzt bearbeitet 18.09.2026 13:05:34
Erkennungen
Login

In Vp9DecEndOfStream of vp9hwd_output.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.11%	0.017

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	8.4	2.5	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-58699

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-58699

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-58699

EUVD