CVE-2026-56995

MediumCVSS 6.7/10Last modified Nov 13, 2026

Description

In multiple locations, there is a possible way to corrupt host allocator metadata in shared memory due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 13, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-569978.8In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote CVE-2026-57004.8Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a userCVE-2026-570048.4In PresenceDecoderV1::DecodeDataElements of presence_decoder_v1.cc, there is a possible out-of-bounds write due to a missing bounds check. TCVE-2026-570058.8In EuiccPort.buildUiccAccessRule of EuiccPort.java, there is a possible Confused Deputy due to a confused deputy. This could lead to remote CVE-2026-570064.4In acfw_ffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with SystemCVE-2026-570087.5In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure withCVE-2026-570098.4In GC2AvcDec of GC2AvcDec.cpp, there is a possible Logic error due to a logic error in the code. This could lead to local escalation of privCVE-2026-570109.8In EncodeLastScanBufferElement of data_manager.cc, there is a possible out-of-bounds write due to a logic error in the code. This could leadCVE-2026-570128.4In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of pCVE-2026-570136.7In access_control_enable of multiple files, there is a possible way to release secure coprocessors from reset via unclaimed firewall registeCVE-2026-570147.8In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bounds write due to a missing bounds check. This cCVE-2026-570196.5An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX
CVE-2026-56995: Medium severity, CVSS 6.7 | Vulnix