PT-2026-144451
CVE-2026-56909
·
Published
2026-11-10
·
Updated
2026-11-10
Description by
CVSS 3.1
6.7
MediumMetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
In multiple functions of sswrp cpm.dtsi, there is a possible way to modify voltage control registers from non-secure software due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾