Logic Error Vulnerability in Cellular Modem by Android
CVE-2026-58704
Key Information:
Badges
What is CVE-2026-58704?
CVE-2026-58704 is a critical vulnerability found in the cellular modem components of Android devices, developed by Google. This vulnerability arises from a logic error within the code, which leads to a potential permission bypass. Exploiting this flaw allows an attacker to escalate privileges without the need for additional execution permissions or user interaction, facilitating unauthorized access to sensitive system resources. The implications of this vulnerability are particularly concerning for organizations relying on Android devices, as it can compromise security and privacy protections inherent in mobile communications.
Potential impact of CVE-2026-58704
-
Privilege Escalation: The most significant impact is the ability for an attacker to escalate privileges without requiring user actions. This means that malicious entities could gain access to higher-level permissions within the device, potentially exposing sensitive data and critical system functionalities.
-
Remote Exploitation: The vulnerability allows for remote exploitation in proximal or adjacent scenarios, meaning that attackers do not need to be directly interacting with the device, which increases the risk of widespread targeting in environments where multiple devices may be within a close vicinity.
-
Security Breach: The exploitation of CVE-2026-58704 could lead to severe security breaches within an organization. Compromised devices may become entry points for further attacks, potentially facilitating data theft, malware installation, and disruption of services connected to the affected mobile infrastructure.
CISA has reported CVE-2026-58704
CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2026-58704 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace
The CISA's recommendation is: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Affected Version(s)
Android Android kernel
News Articles
International Business TimesCVE-2026-58704Is the Google Pixel Modem Flaw Being Exploited? What Owners Need to Know
Google's September Pixel update fixes CVE-2026-58704, a high-severity modem flaw requiring no user interaction that may be under targeted exploitation.
1 month ago
CISA Gives Agencies 3 Days to Patch Exploited Pixel Zero-Day
Google says a Pixel modem zero-day was under targeted exploitation. CISA has added CVE-2026-58704 to KEV as users are urged to patch.
1 month ago
TechtimesCVE-2026-58704Google Patches Actively Exploited Pixel Modem Flaw Linked to Spyware Tradecraft
Google Pixel modem vulnerability CVE-2026-58704 is under active exploitation, Google’s September 2026 bulletin confirms. CISA added it to its Known Exploited Vulnerabilities catalog with a September
1 month ago
References
CVSS V3.1
Timeline
- 🥇
Vulnerability reached the number 1 worldwide trending spot
- 📈
Vulnerability started trending
- 👾
Exploit known to exist
- 🦅
CISA Reported
- 📰
First article discovered by Securityweek
Vulnerability published
Vulnerability Reserved