security
CVE-2026-58750: Kernel use-after-free in the Google Pixel
- severity
- High
- component
- Use-after-free in Pixel LWIS (kernel)
- reported
- Android VRP,
- status
- fix in progress
- write-up
- generic pass
Android Security Bulletins ↗ Android & Google Devices VRP ↗
In April 2026 I reported a use-after-free in the Google Pixel kernel to Android’s VRP. It lives in LWIS, the Pixel-specific driver that talks to the camera and imaging hardware. Google assigned it CVE-2026-58750 and rated it High.
Timeline#
- 2026-04-24: reported to the Android VRP
- 2026-07: CVE-2026-58750 assigned, rated High
- (fix / Android Security Bulletin: pending; embargoed)