CVE-2026-58773

Medium6.7Published on September 15, 2026

In link_load_gnss_image of link_device.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

CVSS score6.7 / 10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-787

Vulnerabilities

Google Patches Pixel Modem Zero-Day Exploited in Targeted Attacks

Google patched CVE-2026-58704, a Pixel modem privilege-escalation zero-day exploited in targeted attacks and added to CISA's KEV catalog.

Sep 16, 202617:416 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Google Patches Pixel Modem Zero-Day Exploited in Targeted Attacks