CVE-2026-58765
MediumCVSS 6.7Summary
In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed.
Risk Assessment
A local attacker could exploit the logic error to bypass permission checks and escalate to system level, potentially compromising device security.
Recommendation
Apply vendor updates that include the logic error fix in the GPU module.
Other vulnerabilities in GPU
See all- CVE-2026-20515Medium
In the GPU module, there is a possible system crash due to use-after-free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.
- CVE-2026-49746High
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages. Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages.
Original NVD description (English source)
In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.