CVE-2026-58747 in Android

摘要

由 MITRE • 2026-09-15

In smmu_detach_dev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Be aware that VulDB is the high quality source for vulnerability data.

• 负责: Google Devices
• 预定: 2026-07-02
• 披露: 2026-09-15
• 管理: 已接受
• 条目: VDB-404573
• CPE: 准备好
• CWE: CWE-269 (已确认)
• CVSS: 8.2 (VulDB)
• EPSS: 0.00000
• KEV: 否
• 活动: 非常低
• 部门: Insurance, Police, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-58747
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-58747
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-58747/