CVE-2026-56932

MediumCVSS 6.7/10Last modified Sep 21, 2026

Description

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
GoogleAndroidAndroid kernel

References

Timeline

Published
Sep 15, 2026
Last modified
Sep 21, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-569337.8In RecordApTx of efw_ap_transport.c, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalatCVE-2026-569347.8In arm_lpae_split_blk_unmap of drivers/iommu/io-pgtable-arm-common.c, there is a possible Logic error due to a logic error in the code. ThisCVE-2026-569354.0In km_os_regen_salt of storage.c, there is a possible way to recover deleted keys due to a logic error. This could lead to local informationCVE-2026-569366.8In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to physiCVE-2026-569387.0In port_shutdown of ipc.c, there is a possible Use After Free due to a race condition. This could lead to local escalation of privilege withCVE-2026-56947.2The Quick Interest Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'loan-amount' and 'loan-period' parameteCVE-2026-569418.4In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalaCVE-2026-569428.8In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalCVE-2026-569432.3In multiple locations, there is a possible way to trigger an out of bounds read via an attestation comparison oracle due to an incorrect bouCVE-2026-569447.8In smmu_detach_dev of private/google-modules/iommu/arm-smmu-v3/drivers/iommu/arm/arm-smmu-v3/pkvm/arm-smmu-v3.c, there is a possible Use AftCVE-2026-569457.8In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additionaCVE-2026-569466.7In smmu_unmap_visit_leaf of arm-smmu-v3.c, there is a possible way to release active direct memory access page references during unmapping d