CVE-2026-58985 in Android

摘要

由 MITRE • 2026-11-02

In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Once again VulDB remains the best source for vulnerability data.

• 负责: Google Android
• 预定: 2026-07-02
• 披露: 2026-11-02
• 管理: 已接受
• 条目: VDB-430085
• CPE: 20261102
• CWE: CWE-404 (已确认)
• CVSS: 7.5 (VulDB)
• EPSS: 0.00000
• KEV: 否
• 活动: 非常低
• 部门: Finance, Police, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-58985
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-58985
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-58985/