---
id: "CVE-2026-58817"
kind: "vulnerability"
aliases: ["CVE-2026-58817"]
title: "Android: certificate parsing flaw allows permanent local denial of service"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["android", "other"]
not_affected_if: []
published_at: "2026-11-02T20:17:47+00:00"
first_seen_at: "2026-11-02T20:35:30+00:00"
updated_at: "2026-11-02T20:39:13+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58817", "first_seen_at": "2026-11-02T20:35:30+00:00"}]
---

# Android: certificate parsing flaw allows permanent local denial of service

A flaw in the parseKnownActivityEmbeddingCerts function in ParsingUtils.java causes a permanent denial of service through improper input validation. A local app or process can trigger it without extra privileges or user interaction.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-02T20:35:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-58817

## From the sources

In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_