Live › vulnerability › CVE-2026-58926
The EVS (Extended View System) hardware abstraction layer has a use-after-free race: a privileged client can free a buffer handle while the producer thread still uses it, via doneWithFrame and setMaxFramesInFlight. An attacker could manipulate freed heap memory and leak file descriptors from the EVS HAL process.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 21:35 UTC. All times on this page are UTC.
The flaw is in the EVS HAL, the camera-view component used in vehicle and embedded Android systems, and requires a privileged client to trigger. unknown whether standard phones are affected; the sources do not say which builds or versions are vulnerable.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a buffer_handle_t while the producer thread is still using it. This race condition, triggered via doneWithFrame and setMaxFramesInFlight, enables an attacker to manipulate freed heap memory, potentially leading to the leakage of file descriptors from the EVS HAL process.
This page as .md · .json · in your agent: get_signal("CVE-2026-58926")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.