CVE-2026-58766

CVE-2026-58766 affects the ARM SMMUv3 driver (arm-smmu-v3.c) in the Linux kernel, as shipped in Android Pixel devices. The vulnerability stems from a logic error in multiple functions of that file, enabling a local privilege escalation requiring only low privileges and no user interaction . The C...

CVE-2026-58765

CVE-2026-58765 is a permission bypass in the GPU component of Android/Pixel, caused by a logic error in the code. It allows a local escalation of privilege when the attacker already holds System execution privileges , with no user interaction required. The CVSS 3.1 score is 6.7 (Medium) , and CIS...

CVE-2026-58755

CVE-2026-58755 is a local privilege escalation vulnerability in the ARM SMMU-v3 driver (smmu_install_nested_ste in arm-smmu-v3.c) affecting Android Pixel devices , as referenced in the Pixel September 2026 security bulletin. The root cause is a logic error in the nested STE installation path. An ...

CVE-2026-58751

CVE-2026-58751 is a use-after-free vulnerability in multiple functions of arm-smmu-v3.c (the ARM System MMU v3 driver), caused by a logic error. The flaw allows local escalation of privilege to System execution privileges, with no user interaction required. The vulnerability is tracked in the And...

CVE-2026-58747

CVE-2026-58747 is a permission bypass in the ARM SMMU v3 driver, specifically in the smmu_detach_dev function of arm-smmu-v3.c. A logic error allows a local attacker with System execution privileges to escalate privileges, resulting in high impact to confidentiality, integrity, and availability (...

CVE-2026-58744

CVE-2026-58744 affects Android/Pixel devices (per the 2026-09-01 Pixel security bulletin ). The vulnerability is an improper input validation flaw in multiple locations that allows a local privilege escalation with low privileges required and no user interaction, resulting in high impact to confi...

CVE-2026-58739

CVE-2026-58739 is a confused deputy vulnerability in platform_msg_handler_init of default_msg_handlers.c within the GDMC subcomponent of Google Pixel devices. It enables a local elevation of privilege requiring System execution privileges and no user interaction. The Pixel Update Bulletin rates i...

CVE-2026-58734

CVE-2026-58734 is a local elevation of privilege vulnerability in the GDMC subcomponent of Google Pixel devices. The flaw resides in the google_mba_recv_msg function of google_mba_poll.c, where an out-of-bounds write can be triggered by a race condition . Exploitation requires no additional execu...

CVE-2026-58731

CVE-2026-58731 affects multiple functions in physmem_extmem_linux.c within the Android Pixel platform, where an out-of-bounds read caused by uninitialized data can lead to local information disclosure . No additional execution privileges or user interaction are required. The CVSS 3.1 score is 5.5...

CVE-2026-58728

CVE-2026-58728 is a race condition in the ARM64_TLBI function of mmu.h within the Trusty secure execution environment on Pixel devices, leading to possible memory corruption and local elevation of privilege (rated Critical by Google). No user interaction or additional execution privileges are req...

CVE-2026-58726

CVE-2026-58726 is a local privilege escalation vulnerability in the GPCA subcomponent of Google Pixel devices. The flaw resides in the FsmReleaseKey function of fsm.c , where a missing permission check allows a permission bypass. Exploitation requires System-level execution privileges but no user...

CVE-2026-58724

CVE-2026-58724 is a use-after-free vulnerability in Android Pixel devices, caused by a race condition in multiple locations. It permits local privilege escalation requiring System execution privileges, with no user interaction needed. The CNA-assigned CVSS 3.1 score is 7.0 (HIGH) , reflecting hig...

CVE-2026-58721

CVE-2026-58721 is a local information disclosure vulnerability in the GSA subcomponent of Google Pixel devices, caused by uninitialized memory use in multiple locations. Exploitation requires System execution privileges and no user interaction. Google classifies this as Critical severity in the P...

CVE-2026-58718

This vulnerability affects the ARM SMMUv3 driver in Android (Pixel), specifically in the smmu_detach_dev_nested function of arm-smmu-v3.c. The root cause is improper input validation , which can lead to a local escalation of privilege with System execution privileges required and no user interact...

CVE-2026-58716

CVE-2026-58716 is a time-of-check to time-of-use (TOCTOU) race condition in the GSA (Google Secure Architecture) component of Google Pixel devices, classified as a Critical severity elevation of privilege (EoP). The vulnerability requires System execution privileges and no user interaction, enabl...

CVE-2026-58710

CVE-2026-58710 is an out-of-bounds write in DecodeFilmGrainParams of film_grain_dec.cc in Google Pixel devices, caused by a missing bounds check . It enables remote code execution with low privileges and no user interaction. The Pixel Security Bulletin classifies it under the BigOcean subcomponen...

CVE-2026-58704

CVE-2026-58704 is a high-severity (CVSS 8.0) privilege escalation vulnerability in the Cellular Modem of Google Pixel devices, caused by a logic error that allows an attacker to bypass permission checks. The flaw enables remote proximal/adjacent escalation of privilege with low privileges require...

CVE-2026-58701

CVE-2026-58701 affects the Trusty Trusted Execution Environment on Google Pixel devices. The vulnerable code is in the trusty_dputc function within generic-arm64-smcall.c , where a race condition can lead to an out-of-bounds write , enabling local elevation of privilege. Exploitation requires Sys...

CVE-2026-58699

CVE-2026-58699 affects the Vp9DecEndOfStream function in vp9hwd_output.cc (Android VP9 hardware decoder output path). An incorrect bounds check allows an out-of-bounds read , which can be leveraged for local privilege escalation with only low privileges and no user interaction. The CNA-assigned C...

CVE-2026-58698

CVE-2026-58698 is a confused deputy vulnerability in the ap_pmic_poll_msg_handler function of ap_pmic_ipc.c, allowing a local escalation of privilege when the attacker already holds System execution privileges . No user interaction is required. The flaw is tied to the Android Pixel security bulle...