CVE-2026-58822

critical · 9.8

In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

9.8

CVSS

0.4%

EPSS (exploit prob.)

32nd

EPSS percentile

2026-09-08

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-704

Affected products

Vendor	Product	Affected versions
google	android	14.0
google	android	15.0
google	android	16.0
google	android	16.0
google	android	17.0

Check a specific version with /api/v1/cve/match.

References

https://source.android.com/docs/security/bulletin/2026/2026-09-01

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-58822