CVE-2026-58835: Bluetooth Module Heap Buffer Overflow Vulnerability
Summary
CVE-2026-58835: In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. Affects platform/packages/modules/Bluetooth across 4 version ranges.
>= 16:0, < 16:2026-10-01
>= 16-qpr2:0, < 16-qpr2:2026-10-01
>= 17:0, < 17:2026-10-01
>= 17-next:0, < 17-next:2026-10-01
Fixed in 17-next:2026-10-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Bluetooth module in the Android ecosystem is responsible for managing Bluetooth connectivity and communication between devices. It is a critical component that enables wireless data exchange, audio streaming, and device pairing. This module is widely used across various Android devices, making it essential for seamless user experiences. However, it is susceptible to vulnerabilities that can compromise device security and user data.
Vulnerability Detail
In the cfg2prop function of btif_storage.cc, a heap buffer overflow vulnerability exists, which can lead to an out-of-bounds write. This flaw allows attackers to execute arbitrary code remotely without requiring additional execution privileges or user interaction. The vulnerability is critical as it can potentially allow unauthorized access to sensitive data and system resources, posing a significant risk to device integrity and user privacy.
How To Fix
Minimum fixed version
17-next:2026-10-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable Bluetooth functionality on their devices until the patch is applied. This can be done through the device settings under the Bluetooth section.
Conclusion
The CVE-2026-58835 vulnerability poses a significant threat to Android devices using the Bluetooth module, allowing for remote code execution due to a heap buffer overflow. It is crucial for users and developers to apply the necessary patches and monitor their systems for vulnerabilities to ensure device security.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
CVE-2026-58835 is a critical vulnerability in the Bluetooth module of Android that allows for remote code execution due to a heap buffer overflow.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The risks include unauthorized access to sensitive data, potential control over the device, and exploitation of other vulnerabilities within the system.
No, user interaction is not needed for exploitation, making this vulnerability particularly dangerous.
If immediate updates are not possible, consider disabling Bluetooth functionality until the patch is applied to mitigate risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
