Live › vulnerability › CVE-2026-58857
A race condition in the decrypt path of CryptoHalHidl.cpp, an Android hardware crypto component, can cause a use-after-free. The description says this could lead to remote code execution without extra privileges or user interaction.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 20:35 UTC. All times on this page are UTC.
The sources do not name the affected Android versions or devices. The description says the flaw is reachable remotely with no user interaction, so any device running the affected crypto HAL may be exposed until a vendor patch is confirmed.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
This page as .md · .json · in your agent: get_signal("CVE-2026-58857")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.