Description
In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Published: 2026-10-05
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Apply Latest Update
AI Analysis

Impact

A heap buffer overflow occurs in the cfg2prop function of btif_storage.cc, enabling an attacker to overwrite memory and execute arbitrary code without requiring elevated privileges. This flaw permits remote code execution and does not need any user interaction.

Affected Systems

The vulnerability affects devices running Google Android, specifically those that use the Bluetooth stack component containing btif_storage.cc. Version information is not supplied, so any Android device deploying the impacted code is potentially affected.

Risk and Exploitability

The CVSS score is 8.8 and the EPSS score is not available, and the vulnerability is not catalogued in CISA KEV. The high CVSS score indicates a severe threat for remote code execution. Because the flaw can be triggered remotely without user interaction, it presents an immediate risk to affected systems, especially where Bluetooth services are enabled.

Generated by OpenCVE AI on October 5, 2026 at 21:39 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update your device to the latest Android release that includes a fix for this heap buffer overflow.
  • Disable or restrict Bluetooth functionality on devices that do not require it, reducing the attack surface for this component.
  • If an immediate update is not possible, implement network segmentation or firewall rules to block external Bluetooth traffic to the device.

Generated by OpenCVE AI on October 5, 2026 at 21:39 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 07 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*
cpe:2.3:o:google:android:16.0:qpr2_beta_1:*:*:*:*:*:*
cpe:2.3:o:google:android:16.0:qpr2_beta_2:*:*:*:*:*:*
cpe:2.3:o:google:android:16.0:qpr2_beta_3:*:*:*:*:*:*
cpe:2.3:o:google:android:17.0:-:*:*:*:*:*:*

Mon, 05 Oct 2026 22:00:00 +0000

Type Values Removed Values Added
Title Android Bluetooth Buffer Overflow Allows Remote Code Execution

Mon, 05 Oct 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google android
Vendors & Products Google
Google android

Mon, 05 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 05 Oct 2026 20:00:00 +0000

Type Values Removed Values Added
Title Android Bluetooth Buffer Overflow Allows Remote Code Execution
Weaknesses CWE-122

Mon, 05 Oct 2026 18:45:00 +0000

Type Values Removed Values Added
Description In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
References

Subscriptions

Google Android
cve-icon MITRE

Status: PUBLISHED

Assigner: google_android

Published:

Updated: 2026-10-06T03:56:04.439Z

Reserved: 2026-07-02T05:58:50.041Z

Link: CVE-2026-58835

cve-icon Vulnrichment

Updated: 2026-10-05T19:15:29.738Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-05T19:17:24.650

Modified: 2026-10-07T15:12:08.233

Link: CVE-2026-58835

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-05T21:45:20Z

Weaknesses
  • CWE-122

    Heap-based Buffer Overflow