CVE-2026-58731Medium· 6.2▾ SunlitIn multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not ne…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 34.1 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 18.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
— → 5.5
none → medium
5.5 → 6.2
Last analysed / modified upstream
0.08%
In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
androidRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-56978High· 8.4In get_global_config_item_addr of gc.c, there is a possible out-of-bounds read due to a missing bounds check
CVE-2026-58699High· 8.4In Vp9DecEndOfStream of vp9hwd_output.cc, there is a possible out-of-bounds read due to an incorrect bounds check
CVE-2026-58721Medium· 4.4In multiple locations, there is a possible information disclosure due to uninitialized memory use
CVE-2026-0142Medium· 4.0In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input validation
CVE-2026-58773Medium· 6.7In link_load_gnss_image of link_device.c, there is a possible out-of-bounds write due to a missing bounds check
CVE-2026-58765Medium· 6.7In GPU, there is a possible permission bypass due to a logic error in the code