CVE WATCH / VULNERABILITY DETAIL
CVE-2026-58925
UNKNOWNCVSS 0NVD feed
Published 2 November 2026 · tracked since 3 November 2026
Description
The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service, stemming from unsynchronized access to an `std::unordered_map`. An unprivileged application with access to the EVS manager can trigger this UAF by making concurrent calls to
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-58915
- CVE-2026-49903
- CVE-2026-49906 HIGH 7.8
- CVE-2026-59042 HIGH 7.4
- CVE-2026-59046
- CVE-2026-59006
- CVE-2026-58985
- CVE-2026-58886
- CVE-2026-58934 HIGH 8.4
- CVE-2026-58866 HIGH 8.4