pub-a-518786047

osv_android
Description

In HostLinkBase::chreIpiHandler of host_link.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References
Linked Vulnerabilities

No linked vulnerabilities found.

{
  "affected": [
    {
      "database_specific": {
        "source": "https://storage.googleapis.com/android-osv/PUB-A-518786047.json"
      },
      "ecosystem_specific": {
        "severity": "Moderate",
        "spl": "2026-11-05",
        "types": [
          "EoP"
        ]
      },
      "package": {
        "ecosystem": "Android",
        "name": ":unknown:"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": ":0"
            },
            {
              "fixed": ":2026-11-05"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "Device specific"
      ]
    }
  ],
  "aliases": [
    "A-518786047",
    "CVE-2026-58781"
  ],
  "details": "In HostLinkBase::chreIpiHandler of host_link.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.",
  "id": "PUB-A-518786047",
  "modified": "2026-11-04T16:48:29.960526221Z",
  "published": "2026-11-01T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://source.android.com/security/bulletin/2026-11-01"
    }
  ],
  "schema_version": "1.9.2"
}
View JSON API Download JSON