CVE-2026-58677

MediumCVSS 6.8/10Last modified Nov 12, 2026

Description

In get_secure_boot_mode of auth.rs, there is a possible way to bypass root signature verification via fault injection due to a logic error. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-693

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 12, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-586787.8In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege withCVE-2026-586798.4In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to locaCVE-2026-58688.8Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a saCVE-2026-58680In cpm_mbox_power_ctrl_sswrp of cpm_mbox.c, there is a possible permission bypass due to a precondition check failure. This could lead to loCVE-2026-58681In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution with no CVE-2026-586838.8In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code executiCVE-2026-58684In smmu_config_l3tt of smmu.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation oCVE-2026-58694.3Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information CVE-2026-586907.8In multiple functions of bitmap_image_buffer.h, there is a possible way to trigger an out of bounds write on the trusted execution environmeCVE-2026-586918.4In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of prCVE-2026-586957.8In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege due to a missing bounds check. This could CVE-2026-586966.7In multiple locations, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privile
CVE-2026-58677: Medium severity, CVSS 6.8 | Vulnix