CVE-2026-58789

In s_gen_tile_param of multiple files, there is a possible way to trigger an out of bounds write in tile parameter arrays due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

• CWE-787

• https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01

Published

Nov 10, 2026

Last Modified

Nov 10, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-58782In multiple locations, there is a possible denial of service…6.2
• CVE-2026-58783In multiple locations, there is a possible denial of service…4.4
• CVE-2026-58785In update_user_consent of main.rs, there is a possible eleva…6.7
• CVE-2026-58786In cnm_memset of hevc_decoder, there is a possible Non-Heap …7.8
• CVE-2026-58787In chppWifiRangingEventNotification of clients/wifi.c, there…8.8
• CVE-2026-58788In stpropnci_process_std of stpropnci_std.cc, there is a pos…8.4
• CVE-2026-5879Insufficient validation of untrusted input in ANGLE in Googl…8.8
• CVE-2026-58790In CMD_ENC_SET_PARAM of encoder, there is a possible Non-Hea…7.8
• CVE-2026-58791In pic_timing of hevc_decoder, there is a possible Non-Heap …7.8
• CVE-2026-58796In multiple functions of AndroidManifest.xml, there is a pos…8.4
• CVE-2026-58797In register_dump_dpa of sswrp_pcie.c, there is a possible Lo…3.3
• CVE-2026-58798In multiple functions of cn_Tai.cpp, there is a possible way…8.8