CVE-2026-58968 | Google Android 16/16-qpr2/17 oapv_vlc.c oapvd_vlc_metadata double free

November 2, 2026 Yanac

A vulnerability classified as very critical has been found in Google Android 16/16-qpr2/17. This vulnerability affects the function oapvd_vlc_metadata of the file oapv_vlc.c. The manipulation leads to double free.

This vulnerability is uniquely identified as CVE-2026-58968. The attack is possible to be carried out remotely. No exploit exists.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More