{"affected":[{"defaultStatus":"unaffected","product":"Android","source":"CNA: google_android","vendor":"Google","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"}]}],"cveId":"CVE-2026-58953","cwes":[],"description":"In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793649260049,"publishedAt":1793649260049,"references":[{"source":"CNA: google_android","tags":[],"url":"https://source.android.com/docs/security/bulletin/2026/2026-11-01"}],"remediation":[],"revision":"619b16edeb48540fe81a0aa0851bcb80a683e36bcb8d8261ae61fb18b489ddaa","sources":[{"modifiedAt":1793649260049,"name":"CNA: google_android","retrievedAt":1793650511821,"url":"https://www.cve.org/CVERecord?id=CVE-2026-58953"}],"ssvc":null,"status":"published","title":"CVE-2026-58953","updatedAt":1793650511821}