CVE-2026-56912

HighCVSS 7.8/10Last modified Nov 13, 2026

Description

In ac_remove_smmu_prot_internal of acfw_smmu.c, there is a possible Logic error due to a logic error in the code. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-693

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
GoogleAndroidAndroid kernel

References

Timeline

Published
Nov 10, 2026
Last modified
Nov 13, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-569148.4In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no CVE-2026-569156.4In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation ofCVE-2026-569167.8In _vqueue_get_avail_buf_locked of trusty/kernel/lib/trusty/vqueue.c, there is a possible Double-read / TOCTOU due to a race condition. ThisCVE-2026-569198.8In PackageSignatureChecker of SystemUIGoogleModule.java, there is a possible background activity launch due to a confused deputy. This couldCVE-2026-56927.3A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function setGameSpeedCfg of the file /cgi-bin/cstecgi.cCVE-2026-569208.8In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to CVE-2026-569226.7In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System executiCVE-2026-569236.4In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalationCVE-2026-56926In multiple functions of PssSubscriptionManager.java, there is a possible way to spoof subscription switch results and trigger a device reboCVE-2026-569297.8In TrustyKeyMintManager::VerifyHat of trusty_keymint_manager.cc, there is a possible Security check bypass due to a logic error in the code.CVE-2026-56935.3The Smart Appointment & Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check anCVE-2026-569308.4In smmu_find_ste of smmu.c, there is a possible way to retain stale translation lookaside buffer entries across stream identifiers due to a
CVE-2026-56912: High severity, CVSS 7.8 | Vulnix