CVE-2026-58949 | Google Android up to 17 Stagefright StagefrightMetadataRetriever.cpp parseMetaData stack-based overflow

A vulnerability marked as critical has been reported in Google Android 14/15/16/16-qpr2/17. Affected by this issue is the function parseMetaData of the file StagefrightMetadataRetriever.cpp of the component Stagefright. Performing a manipulation results in stack-based buffer overflow.

This vulnerability is known as CVE-2026-58949. Remote exploitation of the attack is possible. No exploit is available.

To fix this issue, it is recommended to deploy a patch.VulDB Recent EntriesRead More