CVE-2026-58956 | Google Android up to 17 avb_rsa.c modpowF4 privileges management

November 2, 2026 Yanac

A vulnerability marked as very critical has been reported in Google Android 14/15/16/16-qpr2/17. Affected is the function modpowF4 of the file avb_rsa.c. Performing a manipulation results in improper privilege management.

This vulnerability is reported as CVE-2026-58956. The attack is possible to be carried out remotely. No exploit exists.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More