High severity8.4NVD Advisory· Published Sep 15, 2026· Updated Sep 18, 2026
CVE-2026-58699
CVE-2026-58699
Description
In Vp9DecEndOfStream of vp9hwd_output.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
1- source.android.com/docs/security/bulletin/pixel/2026/2026-09-01nvdVendor Advisory
News mentions
2- Google Android: 25 Vulnerabilities Disclosed, Enabling Local Privilege EscalationVypr Intelligence · Sep 15, 2026
- Android-x86: Thirteen Vulnerabilities Disclosed, Ranging from Critical to Medium SeverityVypr Intelligence · Sep 15, 2026