CVE-2026-58968 — Vulnerability intelligence
Google — Android
Published:
- CVSS
- 9.8
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.