Skip to content
fr Sign in
Not rated

CVE-2026-58925 The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL…

Description

The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service, stemming from unsynchronized access to an `std::unordered_map`. An unprivileged application with access to the EVS manager can trigger this UAF by making concurrent calls to `setExtendedInfo` and `getExtendedInfo`, potentially enabling code execution within the privileged HAL process.

Affected products and versions

Product Affected versions Fixed in
Android 17 No fix stated
Android 16 16-qpr2 → 16 No fix stated
Android 15 No fix stated
Android 14 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Android

The 1729 CVEs of Android →
CVE-2026-58977 In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check 6.7 Medium CVE-2026-58930 An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when… Not rated CVE-2026-58927 The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized… Not rated CVE-2026-58926 A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t`… 2.5 Low
Track this CVE