CVE-2026-58854: Memory Corruption Vulnerability in Android's Platform Frameworks AV
Summary
CVE-2026-58854: In multiple locations, there is a possible memory corruption due to type confusion. Affects platform/frameworks/av across 6 version ranges.
>= 14:0, < 14:2026-10-01
>= 15:0, < 15:2026-10-01
>= 16:0, < 16:2026-10-01
>= 16-qpr2:0, < 16-qpr2:2026-10-01
>= 17:0, < 17:2026-10-01
>= 17-next:0, < 17-next:2026-10-01
Fixed in 17-next:2026-10-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android platform frameworks AV (Audio/Video) provide essential services for media playback and recording on Android devices. This package is integral to handling multimedia content, enabling applications to utilize audio and video functionalities efficiently. However, it has been found to be vulnerable to a memory corruption issue due to type confusion, which could lead to serious security implications.
Vulnerability Detail
The vulnerability arises from a type confusion issue in multiple locations within the platform frameworks AV. This flaw can lead to memory corruption, allowing an attacker to escalate privileges locally without requiring additional execution privileges. The exploitation of this vulnerability does not necessitate user interaction, making it particularly dangerous as it can be triggered without any action from the user.
How To Fix
Minimum fixed version
17-next:2026-10-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the execution of applications that utilize the affected frameworks until the patch is applied. Additionally, monitoring tools like Vulert can be employed to alert on vulnerabilities in real-time, ensuring that any potential exploits are detected promptly.
Conclusion
The CVE-2026-58854 vulnerability in Android's platform frameworks AV poses a significant risk due to its potential for memory corruption and privilege escalation. It is crucial for users to apply the available patch promptly and consider utilizing monitoring tools to safeguard against exploitation.
See every vulnerability recorded for platform/frameworks/av →
FAQ
CVE-2026-58854 is a vulnerability in the Android platform frameworks AV that allows for memory corruption due to type confusion, potentially leading to local privilege escalation.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The primary risk is local privilege escalation, which could allow an attacker to gain unauthorized access to sensitive information or control over the affected device.
Yes, a patch is available. Users should update to the fixed version of the platform frameworks AV to mitigate the vulnerability.
If immediate patching is not possible, consider limiting the use of affected applications and utilize monitoring tools like Vulert to detect any potential exploitation attempts.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/av.
