CVE-2026-58803: Android/:unknown: vulnerability

Q: What does an attacker need to exploit this issue?

Exploitation is local and does not require additional execution privileges or user interaction.

Q: Can affected Android versions or configurations be identified from the available information?

No. The available information lists the software version as unknown and does not state whether default configurations are affected.

Published Nov 1, 2026

Updated

In bytesareequal of lib.rs, there is a possible way to recover authentication keys due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What does an attacker need to exploit this issue?

Exploitation is local and does not require additional execution privileges or user interaction.

Can affected Android versions or configurations be identified from the available information?

No. The available information lists the software version as unknown and does not state whether default configurations are affected.

CVE-2026-58803: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Can affected Android versions or configurations be identified from the available information?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Can affected Android versions or configurations be identified from the available information?