google android CVE-2026-58785 is a vulnerability in Google Android
Published on November 10, 2026

In update_user_consent of main.rs, there is a possible elevation of privilege due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

NVD

Vulnerability Analysis

CVE-2026-58785 can be exploited with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL
Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
HIGH
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

What is a Buffer Overflow Vulnerability?

The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

CVE-2026-58785 has been classified to as a Buffer Overflow vulnerability or weakness.


Products Associated with CVE-2026-58785

Want to know whenever a new CVE is published for Google Android? stack.watch will email you.

Affected Versions

Google Android Version Android kernel is affected by CVE-2026-58785