{"id":"CVE-2026-58803","aliases":[],"cve":{"records":[{"id":"CVE-2026-58803","source":"Google_Devices","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-07-02T05:51:13.097Z","published":"2026-11-10T19:21:45.849Z","modified":"2026-11-13T15:20:20.940Z"}],"publishers":[{"name":"Google_Devices","role":"CNA","organizationId":"83238938-5644-45f0-9007-c0392bcf6222","modified":"2026-11-10T19:21:45.849Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-13T15:20:20.940Z"}],"references":[{"url":"https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01","tags":[],"source":"Google_Devices"}],"weaknesses":[{"id":"CWE-203","description":"CWE-203 Observable Discrepancy","source":"CISA-ADP"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-13T15:20:17.619025Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"In bytes_are_equal of lib.rs, there is a possible way to recover authentication keys due to side channel information disclosure.","titleSource":"Google_Devices","descriptionSource":"Google_Devices","description":"In bytes_are_equal of lib.rs, there is a possible way to recover authentication keys due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","score":2.9,"severity":"low","published":"2026-11-10T19:21:45.849Z","modified":"2026-11-13T15:20:20.940Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Google","name":"Android","platforms":[],"versions":[{"version":"Android kernel","status":"affected"}],"defaultStatus":"unaffected","cpes":[],"source":"Google_Devices","url":"https://www.cve.org/CVERecord?id=CVE-2026-58803"}],"remediation":[],"references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01"],"sources":[{"name":"CVE","id":"CVE-2026-58803","modified":"2026-11-13T15:20:20.940Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-58803"}],"assessments":[{"source":"CISA-ADP","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","score":2.9}],"sourceAffected":[],"observedAt":"2026-11-13T23:31:27.732Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T01:55:30.737Z"},"coverage":[{"source":"NVD","status":"refresh-failed","attemptedAt":"2026-11-14T06:10:32.454Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-14T06:05:31.375Z","attemptedAt":"2026-11-14T06:05:31.375Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-14T06:00:35.124Z","attemptedAt":"2026-11-14T06:00:35.124Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-14T06:00:34.448Z","attemptedAt":"2026-11-14T06:00:34.448Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-58803","url":"https://www.first.org/epss/","probability":0.00142,"percentile":0.03583,"date":"2026-11-13","checkedAt":"2026-11-14T06:00:34.448Z"},{"source":"ENISA EUVD","id":"EUVD-2026-122618","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-122618","modified":"Nov 13, 2026, 3:20:20 PM","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-14T06:00:35.124Z"},{"source":"GitHub Advisory Database","id":"GHSA-hm3v-jq5w-prr7","url":"https://github.com/advisories/GHSA-hm3v-jq5w-prr7","modified":"2026-11-13T18:32:07Z","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-14T06:05:31.375Z"}],"aiSummary":{"text":"A side channel information disclosure in Android's kernel may allow local information disclosure of authentication keys without additional execution privileges. User interaction is not needed. The affected version is the Android kernel.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-14T02:16:05.552Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-58803"}]}}