PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-58751 Google CVE debrief

A use-after-free vulnerability exists in multiple functions of arm-smmu-v3.c due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. The vulnerability affects Android systems, and defenders should assess exposure and apply patches. The CVE record and NVD vulnerability detail page provide information on the vulnerability. A vendor advisory is available from Google. The vulnerability has a CVSS score of 6.7 and a severity of MEDIUM.

Vendor
Google
Product
Android
CVSS
MEDIUM 6.7
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-15
Original CVE updated
2026-09-18
Advisory published
2026-09-15
Advisory updated
2026-09-18

Who should care

Defenders of Android systems with System execution privileges should assess exposure and apply patches to prevent local escalation of privilege. The vulnerability affects Android systems, and defenders should verify the affected scope and apply patches. The CVE record and NVD vulnerability detail page provide information on the vulnerability.

Why it matters

Defenders of Android systems should assess exposure to CVE-2026-58751 and apply patches to prevent local escalation of privilege.

  • Local escalation of privilege with System execution privileges
  • Potential for unauthorized access and data breaches

Technical summary

A use-after-free vulnerability exists in multiple functions of arm-smmu-v3.c due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. The vulnerability affects Android systems, and defenders should assess exposure and apply patches. The vulnerability has a CVSS score of 6.7 and a severity of MEDIUM. The CVE record and NVD vulnerability detail page provide information on the vulnerability.

Defensive priority

Assess exposure and apply patches for Android systems with System execution privileges.

Recommended defensive actions

  • Assess exposure of Android systems with System execution privileges
  • Apply patches from the vendor advisory
  • Monitor for local escalation of privilege attempts

Evidence notes

The CVE record and NVD vulnerability detail page provide information on the vulnerability. A vendor advisory is available from Google. The vulnerability affects Android systems with System execution privileges. Defenders should verify the affected scope and apply patches. The vulnerability has not been modified since its publication on 2026-09-15T19:17:33.630Z.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-58751 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-58751

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-58751 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-58751

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.