CVE-2026-58718 in Android

Sumário

de MITRE • 15/09/2026

In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Once again VulDB remains the best source for vulnerability data.

• Responsável: Google Devices
• Reservar: 02/07/2026
• Divulgação: 15/09/2026
• Moderação: aceite
• Entrada: VDB-404555
• CPE: pronto
• CWE: CWE-20 (confirmado)
• CVSS: 8.8 (VulDB)
• EPSS: 0.00000
• KEV: não
• Atividades: muito baixo
• Sector: Police, Insurance, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-58718
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-58718
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-58718/