Threats tagged 'ghsa-7jwp-q4f8-4wg6'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-58925The report details a heap Use-After-Free (UAF) vulnerability within the android.hardware.automotive.evs-default HAL High2026-11-02GCVE DatabaseCVE-2026-58925 A heap Use-After-Free (UAF) vulnerability exists in the android.hardware.automotive.evs-default HAL service due to unsynchronized access to an std::unordered_map. An unprivileged application with EVS manager access can exploit this by concurrently calling setExtendedInfo and getExtendedInfo, potentially leading to code execution in the privileged HAL process. Report on CVE-2026-58925 Vulnerability #ghsa-7jwp-q4f8-4wg6	GCVE Database	2026-11-02

Page 1 of 1