---
id: "CVE-2026-58813"
page: "https://infrastack.ai/live/CVE-2026-58813"
kind: "vulnerability"
aliases: ["CVE-2026-58813"]
title: "mman.c mmap: size truncation enables out-of-bounds read and write"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "local-privilege", "mman"]
not_affected_if: []
published_at: "2026-11-10T20:19:28+00:00"
first_seen_at: "2026-11-10T20:46:12+00:00"
updated_at: "2026-11-10T20:50:07+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58813", "first_seen_at": "2026-11-10T20:46:12+00:00"}]
exploit_sources: []
---

# mman.c mmap: size truncation enables out-of-bounds read and write

Link for people: https://infrastack.ai/live/CVE-2026-58813 (this .md is for agents)

An incorrect bounds check in the mmap code of mman.c lets a size value get truncated, which causes out-of-bounds reads and writes. A local attacker with System-level execution privileges can use this to escalate privileges.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T20:46:12+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-58813

## From the sources

In mmap of mman.c, there is a possible way to trigger an out of bounds read and write via mapping size truncation due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_