CVE-2026-58683

Received Received - Intake

Out-of-Bounds Write in IP Multimedia Subsystem

Publication date: 2026-09-15

Last updated on: 2026-09-18

Assigner: Google Devices

Description

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-18

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-58683

EUVD

EUVD-2026-78998

Affected Vendors & Products

Vendor	Product	Version / Range
google	android	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds write vulnerability in the IP Multimedia Subsystem caused by improper input validation. It allows remote code execution without requiring additional privileges or user interaction.

Impact Analysis

An attacker could exploit this to execute arbitrary code on affected systems, potentially gaining control over the system or network. This could lead to data breaches, service disruptions, or further compromise of connected systems.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations may face legal penalties, fines, or reputational damage if exploited.

Mitigation Strategies

Apply vendor patches or updates for the IP Multimedia Subsystem as soon as they become available. Monitor official security advisories from the vendor for mitigation guidance. Restrict network access to the subsystem where possible and implement network segmentation to limit exposure.

Hi! I’m here to help you understand CVE-2026-58683. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70