Live › vulnerability › CVE-2026-58924
The Android EVS camera HAL reads attacker-supplied camera metadata without validation in its getStreamList() method, causing an out-of-bounds heap read. An attacker can use this to leak heap contents such as pointers and buffer handles.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 21:35 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The vulnerability is a heap out-of-bounds read in the EVS HAL's getStreamList() method. An attacker can craft a CameraDesc.metadata byte array, which is parsed without validation, leading to an out-of-bounds read at an attacker-controlled offset within the HAL process's heap. The read data is then exfiltrated back to the attacker, potentially leaking sensitive information like pointers and buffer handles.
This page as .md · .json · in your agent: get_signal("CVE-2026-58924")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.