CVE-2026-58925 | Google Android up to 17 setExtendedInfo/getExtendedInfo use after free

A vulnerability described as critical has been identified in Google Android 14/15/16/16-qpr2/17. This impacts the function setExtendedInfo/getExtendedInfo of the component android.hardware.automotive.evs-default HAL service. Executing a manipulation can lead to use after free.

This vulnerability is registered as CVE-2026-58925. The attack needs to be launched locally. No exploit is available.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More