{"api_version":"1","generated_at":"2026-11-03T15:35:09+00:00","cve":"CVE-2026-58945","urls":{"html":"https://cve.report/CVE-2026-58945","api":"https://cve.report/api/cve/CVE-2026-58945.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-58945","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-58945"},"summary":{"title":"CVE-2026-58945","description":"In multiple locations, there is a possible side channel information leak due to improperly used crypto. This could lead to paired device information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","state":"PUBLISHED","assigner":"google_android","published_at":"2026-11-02 20:17:51","updated_at":"2026-11-03 14:52:42"},"problem_types":["Information disclosure"],"metrics":[],"references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-11-01","name":"https://source.android.com/docs/security/bulletin/2026/2026-11-01","refsource":"security@android.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-58945","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58945","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Google","product":"Android","version":"affected 17","platforms":[]},{"source":"CNA","vendor":"Google","product":"Android","version":"affected 16-qpr2","platforms":[]},{"source":"CNA","vendor":"Google","product":"Android","version":"affected 16","platforms":[]},{"source":"CNA","vendor":"Google","product":"Android","version":"affected 15","platforms":[]},{"source":"CNA","vendor":"Google","product":"Android","version":"affected 14","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Android","vendor":"Google","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}]}],"descriptions":[{"lang":"en","value":"In multiple locations, there is a possible side channel information leak due to improperly used crypto. This could lead to paired device information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."}],"problemTypes":[{"descriptions":[{"description":"Information disclosure","lang":"en"}]}],"providerMetadata":{"dateUpdated":"2026-11-02T19:54:15.999Z","orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android"},"references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-11-01"}],"x_generator":{"engine":"cvelib 1.7.1"}}},"cveMetadata":{"assignerOrgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","assignerShortName":"google_android","cveId":"CVE-2026-58945","datePublished":"2026-11-02T19:54:15.999Z","dateReserved":"2026-07-02T06:15:30.445Z","dateUpdated":"2026-11-02T19:54:15.999Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-02 20:17:51","lastModifiedDate":"2026-11-03 14:52:42","problem_types":["Information disclosure"],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"58945","Ordinal":"1","Title":"CVE-2026-58945","CVE":"CVE-2026-58945","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"58945","Ordinal":"1","NoteData":"In multiple locations, there is a possible side channel information leak due to improperly used crypto. This could lead to paired device information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","Type":"Description","Title":"CVE-2026-58945"}]}}}