DeutschShown in its original language — a full translation is planned for a future version.
Pixel Patchday September 2026: Mehrere Schwachstellen
view advisory published 2026-09-15
Ein Angreifer kann mehrere Schwachstellen in Google Android Pixel ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen und vertrauliche Informationen offenzulegen.
01
describes (110)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-58773US | — | — | ||
In link_load_gnss_image of link_device.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execut… | ||||
| CVE-2026-58767US | — | — | ||
In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System e… | ||||
| CVE-2026-58766US | — | — | ||
In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no addit… | ||||
| CVE-2026-58765US | — | — | ||
In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User inter… | ||||
| CVE-2026-58755US | — | — | ||
In smmu_install_nested_ste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with Sys… | ||||
| CVE-2026-58751US | — | — | ||
In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution… | ||||
| CVE-2026-58747US | — | — | ||
In smmu_detach_dev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution… | ||||
| CVE-2026-58744US | — | — | ||
In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution p… | ||||
| CVE-2026-58739US | — | — | ||
In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System e… | ||||
| CVE-2026-58734US | — | — | ||
In google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional ex… | ||||
| CVE-2026-58731US | — | — | ||
In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data. This could lead to local information disclosure with no additiona… | ||||
| CVE-2026-58728US | — | — | ||
In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges need… | ||||
| CVE-2026-58726US | — | — | ||
In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privilege… | ||||
| CVE-2026-58724US | — | — | ||
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User in… | ||||
| CVE-2026-58721US | — | — | ||
In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges… | ||||
| CVE-2026-58718US | — | — | ||
In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with Syst… | ||||
| CVE-2026-58716US | — | — | ||
In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System execution privileges n… | ||||
| CVE-2026-58710US | — | — | ||
In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional ex… | ||||
| CVE-2026-58704US | —OT critical | KEV | ||
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional… | ||||
| CVE-2026-58701US | — | — | ||
In trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution p… | ||||
showing 20 of 110
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan