Source: Ministry of education information & communication security contingency platform
| Publication Number | TACERT-ANA-2026110401115858 | Publication Time | 2026-11-04 13:46:00 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026-11-04 13:46:00 |
| Impact Level | Medium | ||
| [Subject] 【Vulnerability Alert】Google Android Has a High-Risk Security Vulnerability (CVE-2026-58882). Please Verify and Take Action as Soon as Possible |
|||
| [Content] Forwarded from the National Institute of Cyber Security NISAC-200-202611-00000003 Researchers have discovered an Out-of-Bounds Read vulnerability (CVE-2026-58882) in Google Android. An unauthenticated remote attacker can send a specially crafted WAP Push SMS message to trigger an Integer Overflow in the decodeWapPdu function of WapPushOverSms.java, resulting in an Out-of-Bounds Read and subsequently causing a denial of service. Please verify and take action as soon as possible. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] Google Android versions 14 through 17 |
|||
| [Recommended Actions] The vendor has released patches or updates to address this vulnerability. Please refer to the official instructions for remediation. The URL is as follows: https://source.android.com/docs/security/bulletin/2026/2026-11-01 |
|||
|
[Reference] 1. https://nvd.nist.gov/vuln/detail/CVE-2026-58882 |
|||