UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-58925
The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service, stemming from unsynchronized access to an `std::unordered_map`. An unprivileged application with access to the EVS manager can trigger this UAF by making concurrent calls to `setExtendedInfo` and `getExtendedInfo`, potentially enabling code execution within the privileged HAL process.
Properties
- Last source
- FIRST EPSS
- Nvd fetched at
- 2026-11-04T01:29:06.847378+00:00
- Epss score
- 0.00154
- Cve id
- CVE-2026-58925
- First seen by Signal
- 2026-11-03T00:56:41+00:00
- Name
- CVE-2026-58925
- Retrieved at
- 2026-11-04T01:32:29+00:00
- Published at
- 2026-11-02T21:17:36.040
- Last modified
- 2026-11-03T14:52:42.467
- Epss percentile
- 0.04535
Explore deeper with Ninja Signal's threat intelligence graph