PT-2026-144555
CVE-2026-59606
·
Published
2026-11-10
·
Updated
2026-11-10
Description by
CVSS 3.1
6.7
MediumMetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
In multiple functions of sswrp cpm.dtsi, there is a possible way to modify global reset registers from non-secure software due to a permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾