CVE-2026-58944

Summary

A confused deputy flaw in ActivityTaskManagerService.java allows a background app to launch another app without user interaction, leading to local privilege escalation by bypassing intended access controls.

Exploitability

Exploitation requires local access and no additional privileges or user interaction, but is limited to the attacker already having compromised or controlled a background application.

Blast radius

Successful exploitation could allow an attacker to execute arbitrary code in the context of another app or system component, potentially compromising confidentiality, integrity, and availability of the device.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the patch released in Android Security Bulletin 2026-07 (or later), which addresses CVE-2026-58944 by correcting the permission check in moveTaskToFrontLocked.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.