CVE-2026-58882 | Google Android up to 17 WapPushOverSms.java decodeWapPdu out-of-bounds

A vulnerability classified as critical was found in Google Android 14/15/16/16-qpr2/17. This issue affects the function decodeWapPdu of the file WapPushOverSms.java. The manipulation results in out-of-bounds read.

This vulnerability was named CVE-2026-58882. The attack may be performed from remote. There is no available exploit.

It is best practice to apply a patch to resolve this issue.VulDB Recent EntriesRead More