CVE-2026-58926 | Google Android 15/16/16-qpr2/17 EVS HAL doneWithFrame/setMaxFramesInFlight use after free

A vulnerability was found in Google Android 15/16/16-qpr2/17 and classified as very critical. This issue affects the function doneWithFrame/setMaxFramesInFlight of the component EVS HAL. Executing a manipulation can lead to use after free.

This vulnerability is handled as CVE-2026-58926. It is possible to launch the attack on the local host. There is not any exploit available.

It is best practice to apply a patch to resolve this issue.VulDB Recent EntriesRead More