Vulnerability Details CVE-2026-58990
In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible memory safety issue due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 11.5%
CVSS Severity
CVSS v3 Score 5.3
Products affected by CVE-2026-58990
-
cpe:2.3:o:google:android:14.0
-
cpe:2.3:o:google:android:16.0
-
cpe:2.3:o:google:android:17.0