VulnSocial

CVE-2026-0059Disclosure(google / android)

LOWCVSS 8.0 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

google CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • android

Threat summary

  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-06-02); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
google
Products
android

3 versions affected across 1 product

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-06-02: 1Mentions · 2026-06-16: 1Mentions · 2026-08-04: 1Technical Details · 2026-06-16: 1Technical Details · 2026-08-04: 106-0206-1608-04
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-021
General1
2026-06-161
Disclosure1
2026-08-041
Disclosure1
Full discourse3 posts
  • Alt43@BurpWeb
    Disclosure

    Hay otro fallo en el componente Bluetooth, CVE-2026-0059, que puede ejecutar código en un dispositivo cercano sin interacción del usuario. El atacante solo necesita estar en rango. Combinado con el anterior, el vector es bastante concreto.

    Post summary

    The post announces a new Bluetooth component vulnerability (CVE‑2026‑0059) that enables remote code execution on nearby devices without user input.

    1000056
    84 followersView on X
  • Alex de la cruz@lexs17
    Disclosure

    Unisoc T606 - CVE-2026-0059 Bluetooth RCE - IOC-001 HOST longcheer: http://sh-16-52.rnd.longcheer.net - IOC-002 BOARD lion + ums9230 - IOC-003 BOOTLOADER lion-2026-03-18_LOCAL - IOC-004 CA Longcheer 2051 - IOC-005 58 CVEs sin parchear - IOC-007 http://com.glance + IOC-008 http://com.taboola - IOC-009 /vendor/overlay/unisoc_overlay_power_qogirl6.apk 12.34KB - IOC-010 Fecha instalacion falsa 31/12/2008 - IOC-012 Glance Gesture sensor 24 Sprd wakeup always - IOC-014 Battery Cycle 2111->2193 desgaste por wakelocks - IOC-015 tun0 fd00:2:fd00:1:fd00:1:fd00:1/128 persistente incluso con WiFi Disconnected https://attackerkb.com/topics/qEMG3DxtZz/cve-2026-0059?referrer=profile

    Post summary

    CVE-2026-0059 regarding Unisoc T606 Bluetooth RCE is disclosed along with associated IOCs. No active exploitation, PoC, or patch information is provided.

    0000090
    180 followersView on X
  • DailyCVE@dailycve
    General

    🔴 #Android, Heap Buffer Overflow, #CVE-2026-0059 (Critical) -DC-Jun2026-152 https://dailycve.com/android-heap-buffer-overflow-cve-2026-0059-critical-dc-jun2026-152/

    Post summary

    The post merely announces CVE‑2026‑0059 and links to a DailyCVE article, offering no substantive technical or exploit information.

    0000038
    209 followersView on X
CPE platform detail6 entries

6 of 6 entries

PartVendorProductVersionTarget SWTarget HW
OSgoogleandroid14.0--
OSgoogleandroid15.0--
OSgoogleandroid16.0--
OSgoogleandroid16.0--
OSgoogleandroid16.0--
OSgoogleandroid16.0--

Explore more

Back to dashboardgoogle CVEsandroid vulnerabilities