Vulnerabilities

In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy.

In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Google

Product

Android

Exposure class

Mobile OS

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-58877 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 39
   CVE NVD 3h ago

   In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy.

   CVSS 8.4 CVE-2026-59028 Google
2. 26
   CVE NVD 3h ago

   In multiple locations, there is a possible permission bypass due to a confused deputy.

   CVE-2026-59015 Google
3. 39
   CVE NVD 3h ago

   In multiple locations, there is a possible permission bypass due to a confused deputy.

   CVSS 8.4 CVE-2026-59000 Google
4. 39
   CVE NVD 3h ago

   In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy.

   CVSS 8.4 CVE-2026-58965 Google
5. 39
   CVE NVD 3h ago

   In multiple locations, there is a possible permission bypass due to a confused deputy.

   CVSS 8.4 CVE-2026-58885 Google
6. 39
   CVE NVD 3h ago

   In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy.

   CVSS 8.4 CVE-2026-58884 Google
7. 39
   CVE NVD 3h ago

   In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confused deputy.

   CVSS 8.4 CVE-2026-49922 Google