SecBoard
Zurück zur CVE-Übersicht

CVE-2026-58880

HIGH(7.0)

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Risk Signal Score18/100 — NIEDRIG
  • CVSS 7 — Hoch

Erwähnungen (letzte 60 Tage)

Artikel

EPSS-Score

0.1%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

7

Technische Schwere

Beschreibung

In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Betroffene Produkte

  • cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*
  • cpe:2.3:o:google:android:16.0:qpr2_beta_1:*:*:*:*:*:*
  • cpe:2.3:o:google:android:16.0:qpr2_beta_2:*:*:*:*:*:*
  • cpe:2.3:o:google:android:16.0:qpr2_beta_3:*:*:*:*:*:*
  • cpe:2.3:o:google:android:17.0:-:*:*:*:*:*:*

Referenzen