Live › vulnerability › CVE-2026-58990
A flaw in the Bluetooth L2CAP code (l2c_fcr_process_peer_cfg_req in l2c_fcr.cc) causes an integer overflow that leads to a memory safety issue. A nearby or remote attacker could disclose information from the device without user interaction or extra privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 20:35 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible memory safety issue due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
This page as .md · .json · in your agent: get_signal("CVE-2026-58990")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.