CVE-2026-0183

MediumCVSS 4.4/10Last modified Sep 21, 2026

Description

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-441

Affected software

No affected versions have been published.

Timeline

Published
Sep 15, 2026
Last modified
Sep 21, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-01866.7In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalCVE-2026-01876.7In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could leadCVE-2026-01898.4In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of CVE-2026-0191In event_set_sub of acropora_event.c, there is a possible Logic error due to a logic error in the code. This could lead to local escalation CVE-2026-01926.7In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privileCVE-2026-0193In handle_rx_msg of tipc_virtio_dev, there is a possible Double Fetch TOCTOU due to Double Fetch. This could lead to local information disclCVE-2026-01948.4In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege wiCVE-2026-0195In fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct memory access fills due to a logic error. ThCVE-2026-01974.4In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with SCVE-2026-01984.4In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local informationCVE-2026-01997.8In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation. This could lead to localCVE-2026-02008.8In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege
CVE-2026-0183: Medium severity, CVSS 4.4 | Vulnix