{"id":"CVE-2026-58798","kind":"vulnerability","aliases":["CVE-2026-58798"],"related":[],"title":"Out-of-bounds write in cn_Tai.cpp could allow remote code execution","description":"In multiple functions of cn_Tai.cpp, there is a possible way to trigger an out of bounds write due to memory corruption. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"Several functions in cn_Tai.cpp can be made to write past the end of a memory buffer. The description says this could let a nearby attacker run code without user interaction or extra privileges.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["cn_tai.cpp","other"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:26+00:00","first_seen_at":"2026-11-10T20:46:11+00:00","triaged_at":"2026-11-10T20:51:37+00:00","updated_at":"2026-11-10T20:51:37+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-11-10T20:51:37Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Out-of-bounds write in cn_Tai.cpp could allow remote code execution","impact":"high","summary":"Several functions in cn_Tai.cpp can be made to write past the end of a memory buffer. The description says this could let a nearby attacker run code without user interaction or extra privileges.","audience":"businesses","category":"other","nicknames":[],"who_cares":["cn_Tai.cpp"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker runs code on the affected device without credentials","analyst_note":"Identify the product that ships cn_Tai.cpp (likely an Android or Android-based component via the NVD entry) and check for vendor advisory and affected versions.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000632,"input_tokens":4539,"output_tokens":357,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-58798':15A,18A 'addit':84C 'allow':9A 'attack':44B 'bound':4A,68C 'buffer':35B 'cn_tai.cpp':7A,19B,23B,57C 'code':11A,46B,80C 'corrupt':73C 'could':8A,40B,75C 'cve':13A,16A 'descript':37B 'due':70C 'end':31B 'execut':12A,81C,85C 'exploit':94C 'extra':51B 'function':21B,55C 'interact':49B,89C 'lead':76C 'let':41B 'made':26B 'memori':34B,72C 'multipl':54C 'nearbi':43B 'need':87C,92C 'out-of-bound':1A 'past':29B 'possibl':61C 'privileg':52B,86C 'proximal/adjacent':79C 'remot':10A,78C 'run':45B 'say':38B 'sever':20B 'trigger':64C 'user':48B,88C 'way':62C 'without':47B 'write':5A,28B,69C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["cntaicpp","other","unknown"],"campaign_type":null,"search_a":"'-2026':14A,17A '-58798':15A,18A 'allow':9A 'bound':4A 'cn_tai.cpp':7A 'code':11A 'could':8A 'cve':13A,16A 'execut':12A 'out-of-bound':1A 'remot':10A 'write':5A","search_b":"'attack':44B 'buffer':35B 'cn_tai.cpp':19B,23B 'code':46B 'could':40B 'descript':37B 'end':31B 'extra':51B 'function':21B 'interact':49B 'let':41B 'made':26B 'memori':34B 'nearbi':43B 'past':29B 'privileg':52B 'run':45B 'say':38B 'sever':20B 'user':48B 'without':47B 'write':28B","search_c":"'addit':84C 'bound':68C 'cn_tai.cpp':57C 'code':80C 'corrupt':73C 'could':75C 'due':70C 'execut':81C,85C 'exploit':94C 'function':55C 'interact':89C 'lead':76C 'memori':72C 'multipl':54C 'need':87C,92C 'possibl':61C 'privileg':86C 'proximal/adjacent':79C 'remot':78C 'trigger':64C 'user':88C 'way':62C 'write':69C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:26+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-58798","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58798","severity":null,"published_at":"2026-11-10T20:19:26+00:00","modified_at":"2026-11-10T20:19:26+00:00","first_seen_at":"2026-11-10T20:46:11+00:00","fetched_at":"2026-11-10T20:46:11+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}