CVE-2026-58865
7.5 HIGHPublished 2026-10-05 · Updated 2026-10-07
AI risk analysis
- Summary
- The flaw is a missing bounds check in PduParser.java that can lead to persistent denial of service when processing SMS PDUs. This affects Google's Android platform and allows remote attackers to cause system unresponsiveness without needing any privileges or user interaction.
- Exploitability
- Exploitation is straightforward with no prerequisites needed as the vulnerability is remotely triggerable through malformed SMS PDUs without requiring user interaction or additional execution privileges.
- Blast radius
- The impact could be significant across Android devices that process SMS messages, potentially causing widespread service disruption on affected platforms.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to Android Security Patch Level 2026-05-05 or later, which contains the fix for this vulnerability.
denial-of-servicesmsandroid
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-119
Vendors
Products
android
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-58859
- HIGHCVE-2026-49880
- HIGHCVE-2026-49937
- HIGHCVE-2026-55286
- HIGHCVE-2026-58815
- HIGHCVE-2026-100242PoC
- HIGHCVE-2026-100660PoC
- HIGHCVE-2026-100661PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.