CVE-2026-58781

In HostLinkBase::chreIpiHandler of host_link.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

• CWE-119

• https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01

Published

Nov 10, 2026

Last Modified

Nov 11, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5877Use after free in Navigation in Google Chrome prior to 147.0…8.8
• CVE-2026-58773In link_load_gnss_image of link_device.c, there is a possibl…6.7
• CVE-2026-58778In multiple locations, there is a possible use-after-free du…6.4
• CVE-2026-58779In multiple locations, there is a possible permission bypass…6.7
• CVE-2026-5878Incorrect security UI in Blink in Google Chrome prior to 147…4.3
• CVE-2026-58780In multiple locations, there is a possible out-of-bounds wri…9.8
• CVE-2026-58782In multiple locations, there is a possible denial of service…6.2
• CVE-2026-58783In multiple locations, there is a possible denial of service…4.4
• CVE-2026-58785In update_user_consent of main.rs, there is a possible eleva…6.7
• CVE-2026-58786In cnm_memset of hevc_decoder, there is a possible Non-Heap …7.8
• CVE-2026-58787In chppWifiRangingEventNotification of clients/wifi.c, there…8.8
• CVE-2026-58788In stpropnci_process_std of stpropnci_std.cc, there is a pos…8.4