CVE-2026-58859

Summary

A denial of service vulnerability in Google's Android platform allows local attackers to escalate privileges without needing additional execution privileges. The flaw occurs when uncaught exceptions lead to system instability, potentially enabling privilege escalation.

Exploitability

Exploitation is relatively straightforward for local attackers with minimal preconditions, requiring no user interaction and no additional execution privileges beyond initial access.

Blast radius

The vulnerability could affect a wide range of Android devices and applications, potentially allowing attackers to gain elevated privileges across multiple system components and services.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Android 15 or later to address this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.