CVE-2026-58751 in Android

摘要

由 MITRE • 2026-09-15

In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Be aware that VulDB is the high quality source for vulnerability data.

• 负责: Google Devices
• 预定: 2026-07-02
• 披露: 2026-09-15
• 管理: 已接受
• 条目: VDB-404572
• CPE: 准备好
• CWE: CWE-416 (已确认)
• CVSS: 8.8 (VulDB)
• EPSS: 0.00000
• KEV: 否
• 活动: 非常低
• 部门: Finance, Lawfirm, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-58751
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-58751
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-58751/