CVE-2026-0133
EUVD-2026-3721616.06.2026, 20:16
In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| android | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration