Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-56907

Android · Vulnerability

cve-program · severity unknownCVSS unknownCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-56907

Published

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-56907

Published

Android

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Google",
                    "product": "Android",
                    "versions": [
                        {
                            "version": "Android kernel",
                            "status": "affected"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON