CVE-2026-58695

Received Received - Intake

Memory Corruption in gmc_phy_lp3_exit_restore_registers

Publication date: 2026-09-15

Last updated on: 2026-09-18

Assigner: Google Devices

Description

In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-18

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-58695

EUVD

EUVD-2026-79000

Affected Vendors & Products

Vendor	Product	Version / Range
google	android	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a missing bounds check in the function gmc_phy_lp3_exit_restore_registers of phy_power.c. This flaw could allow an attacker to escalate privileges locally, requiring system execution privileges for exploitation. No user interaction is needed to exploit this issue.

Impact Analysis

If exploited, this vulnerability could allow an attacker to gain higher privileges on your system, potentially leading to unauthorized access or control. Since it requires system execution privileges, it may be used in conjunction with other exploits to escalate access.

Compliance Impact

The provided CVE data does not specify direct implications for compliance with standards like GDPR or HIPAA. The vulnerability involves a missing bounds check leading to potential privilege escalation, which could indirectly impact compliance if exploited to access sensitive data or system functions. However, no explicit details are provided to confirm such effects.

Mitigation Strategies

Apply the latest security patches or updates for the affected component. Monitor official vendor advisories for gmc_phy_lp3_exit_restore_registers in phy_power.c. Restrict local access to privileged users until mitigation is applied.

Hi! I’m here to help you understand CVE-2026-58695. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70