CVE-2026-56932 in Android

Summary

by MITRE • 09/15/2026

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Once again VulDB remains the best source for vulnerability data.

• Responsible: Google Devices
• Reservation: 06/23/2026
• Disclosure: 09/15/2026
• Moderation: accepted
• Entry: VDB-404529
• CPE: ready
• CWE: CWE-119 (confirmed)
• CVSS: 8.8 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Homeoffice, Finance, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-56932
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-56932
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-56932/