CVE-2026-58938 | Google Android up to 17 MPEG4Extractor MPEG4Extractor.cpp parseChunk denial of service

A vulnerability, which was classified as critical, was found in Google Android 14/15/16/16-qpr2/17. The affected element is the function parseChunk of the file MPEG4Extractor.cpp of the component MPEG4Extractor. Such manipulation leads to denial of service.

This vulnerability is referenced as CVE-2026-58938. It is possible to launch the attack remotely. No exploit is available.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More