Jump to the main content block

【Vulnerability Alert】Google Android Has a High-Risk Security Vulnerability (CVE-2026-58882). Please Verify and Take Action as Soon as Possible

publish date : 2026-11-06 update date : 2026-11-06

Source: Ministry of education information & communication security contingency platform

Publication Number TACERT-ANA-2026110401115858 Publication Time 2026-11-04 13:46:00
Incident Type ANA-Vulnerability Alert Discovery Time 2026-11-04 13:46:00
Impact Level Medium  
[Subject]
【Vulnerability Alert】Google Android Has a High-Risk Security Vulnerability (CVE-2026-58882). Please Verify and Take Action as Soon as Possible
[Content]
Forwarded from the National Institute of Cyber Security NISAC-200-202611-00000003

Researchers have discovered an Out-of-Bounds Read vulnerability (CVE-2026-58882) in Google Android. An unauthenticated remote attacker can send a specially crafted WAP Push SMS message to trigger an Integer Overflow in the decodeWapPdu function of WapPushOverSms.java, resulting in an Out-of-Bounds Read and subsequently causing a denial of service. Please verify and take action as soon as possible.

Information Sharing Level: WHITE (Information content can be publicly disclosed)
[Affected Platform]
Google Android versions 14 through 17
[Recommended Actions]
The vendor has released patches or updates to address this vulnerability. Please refer to the official instructions for remediation. The URL is as follows:
https://source.android.com/docs/security/bulletin/2026/2026-11-01

[Reference]

 1. https://nvd.nist.gov/vuln/detail/CVE-2026-58882
2. https://source.android.com/docs/security/bulletin/2026/2026-11-01

(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
Organizer: Computer Center
Click Num: