CVE-2026-58867: High severity Google Android vulnerability

Q: What access does an attacker need to exploit this issue?

The attacker needs local access to the affected Android system. No privileges or user interaction are required.

Q: What is the potential impact of successful exploitation?

Successful exploitation could allow local escalation of privilege through a permission bypass in WifiP2pServiceImpl.java. The reported impact includes high confidentiality, integrity, and availability effects.

Q: Which component should be prioritized for remediation?

Prioritize the Android Wi-Fi module, specifically the android/platform/packages/modules/wifi component containing WifiP2pServiceImpl.java.

Published Nov 1, 2026

Updated

In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

7 affected componentsFixes available

android/platform/packages/modules/wifi>=17-qpr2-next:0<17-qpr2-next:2026-11-01

17-qpr2-next:2026-11-01

android/platform/packages/modules/wifi>=15:0<15:2026-11-01

15:2026-11-01

android/platform/packages/modules/wifi>=16:0<16:2026-11-01

16:2026-11-01

android/platform/packages/modules/wifi>=16-qpr2:0<16-qpr2:2026-11-01

16-qpr2:2026-11-01

android/platform/packages/modules/wifi>=17:0<17:2026-11-01

17:2026-11-01

android/platform/packages/modules/wifi>=14:0<14:2026-11-01

14:2026-11-01

Google Android

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Nov 2, 2026

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

CVE Published

via MITRE·07:53 PM

Data Sourced

via MITRE·07:53 PM

DescriptionWeakness

Data Sourced

via NVD·08:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attacker needs local access to the affected Android system. No privileges or user interaction are required.

What is the potential impact of successful exploitation?

Successful exploitation could allow local escalation of privilege through a permission bypass in WifiP2pServiceImpl.java. The reported impact includes high confidentiality, integrity, and availability effects.

Which component should be prioritized for remediation?

Prioritize the Android Wi-Fi module, specifically the android/platform/packages/modules/wifi component containing WifiP2pServiceImpl.java.

CVE-2026-58867: High severity Google Android vulnerability

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

Which component should be prioritized for remediation?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

Which component should be prioritized for remediation?