Dashboard / CVE-2026-58882

CVE-2026-58882

1 PoC
INFO Priority: 0.00 BB Relevance: 10/100
Published: 2026-11-02 Modified: 2026-11-03 First seen: 2026-11-02 Status: pending_score

Description

In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software (5)

VendorProductVersion
Google Android 17
Google Android 16-qpr2
Google Android 16
Google Android 15
Google Android 14

References & Advisories (1)

Proof of Concept (1)

★ 3
https://github.com/Ignema/WapGuard
nomi-sec

Bug Bounty Relevance

10 / 100
✓ PoC available (1)

CVSS Score

Unscored

EPSS — Exploitation Probability

0.19%
Raw Score 0.001880
Percentile 8.6%
Date 2026-11-05

EPSS Trend

2026-11-05
0.00188
2026-11-04
0.00188
2026-11-03
0.00188

Intelligence Sources

mitre ref →
nvd ref →

External Links