EUVD-2026-37216

In smmuattachdev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0133

The CVE describes a vulnerability in ARM SMMU v3 code (smmu_attach_dev in arm-smmu-v3.c) where a missing permission check could allow signing of malicious Android Runtime bootclass artifacts, enabling local privilege escalation without extra execution privileges and without user interaction. The ...

PUB-A-373409261

In smmuattachdev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...