{"id":"CVE-2026-58813","kind":"vulnerability","aliases":["CVE-2026-58813"],"related":[],"title":"mman.c mmap: size truncation enables out-of-bounds read and write","description":"In mmap of mman.c, there is a possible way to trigger an out of bounds read and write via mapping size truncation due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.","summary":"An incorrect bounds check in the mmap code of mman.c lets a size value get truncated, which causes out-of-bounds reads and writes. A local attacker with System-level execution privileges can use this to escalate privileges.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","local-privilege","mman"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:28+00:00","first_seen_at":"2026-11-10T20:46:12+00:00","triaged_at":"2026-11-10T20:50:07+00:00","updated_at":"2026-11-10T20:50:07+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-10T20:50:07Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"mman.c mmap: size truncation enables out-of-bounds read and write","impact":"high","summary":"An incorrect bounds check in the mmap code of mman.c lets a size value get truncated, which causes out-of-bounds reads and writes. A local attacker with System-level execution privileges can use this to escalate privileges.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["mman","local-privilege"],"confidence":0.4,"fix_status":"unknown","needs_auth":"yes","worst_case":"local attacker gains escalated privileges on the device","analyst_note":"Identify the affected product and vendor for mman.c (the description reads like an Android or similar platform advisory), then find the fixed version and patch level from the vendor bulletin.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000637,"input_tokens":4532,"output_tokens":368,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-58813':15A,18A 'attack':51B 'bound':9A,26B,45B,78C,90C 'caus':41B 'check':27B,91C 'code':31B 'could':93C 'cve':13A,16A 'due':86C 'enabl':5A 'escal':62B,97C 'execut':56B,102C 'exploit':111C 'get':38B 'incorrect':25B,89C 'infrastructur':19B 'interact':106C 'lead':94C 'let':34B 'level':55B 'local':21B,50B,96C 'local-privileg':20B 'map':83C 'mman':23B 'mman.c':1A,33B,67C 'mmap':2A,30B,65C 'need':104C,109C 'out-of-bound':6A,42B 'possibl':71C 'privileg':22B,57B,63B,99C,103C 'read':10A,46B,79C 'size':3A,36B,84C 'system':54B,101C 'system-level':53B 'trigger':74C 'truncat':4A,39B,85C 'use':59B 'user':105C 'valu':37B 'via':82C 'way':72C 'write':12A,48B,81C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","localprivilege","mman","unknown"],"campaign_type":null,"search_a":"'-2026':14A,17A '-58813':15A,18A 'bound':9A 'cve':13A,16A 'enabl':5A 'mman.c':1A 'mmap':2A 'out-of-bound':6A 'read':10A 'size':3A 'truncat':4A 'write':12A","search_b":"'attack':51B 'bound':26B,45B 'caus':41B 'check':27B 'code':31B 'escal':62B 'execut':56B 'get':38B 'incorrect':25B 'infrastructur':19B 'let':34B 'level':55B 'local':21B,50B 'local-privileg':20B 'mman':23B 'mman.c':33B 'mmap':30B 'out-of-bound':42B 'privileg':22B,57B,63B 'read':46B 'size':36B 'system':54B 'system-level':53B 'truncat':39B 'use':59B 'valu':37B 'write':48B","search_c":"'bound':78C,90C 'check':91C 'could':93C 'due':86C 'escal':97C 'execut':102C 'exploit':111C 'incorrect':89C 'interact':106C 'lead':94C 'local':96C 'map':83C 'mman.c':67C 'mmap':65C 'need':104C,109C 'possibl':71C 'privileg':99C,103C 'read':79C 'size':84C 'system':101C 'trigger':74C 'truncat':85C 'user':105C 'via':82C 'way':72C 'write':81C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:28+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-58813","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58813","severity":null,"published_at":"2026-11-10T20:19:28+00:00","modified_at":"2026-11-10T20:19:28+00:00","first_seen_at":"2026-11-10T20:46:12+00:00","fetched_at":"2026-11-10T20:46:12+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}