Skip to content
OpenAdvisories
Unscored CVE-2026-59614 EUVD-2026-122659GHSA-fwrh-mh66-cxc4

In multiple functions of oem_svc_setup.c, there is a possible way to dump secure cache lines into non-secure memory on warm reset due to a …

Published Nov 10, 2026 · Assigned by Google_Devices

Description

In multiple functions of oem_svc_setup.c, there is a possible way to dump secure cache lines into non-secure memory on warm reset due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References