Vulnerability in Google Android

CVE-2026-58822

In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-58822?
CVE-2026-58822 is a critical-severity vulnerability in Google Android, classified under Incorrect Type Conversion or Cast. CVSS score: 9.8/10. Published 2026-09-08.
How severe is CVE-2026-58822?
Critical severity. CVSS v3 base score is 9.8 out of 10.