Skip to content
OpenAdvisories
Unscored CVE-2026-56897 EUVD-2026-122715GHSA-v7pp-7g7x-vm49

In multiple functions of attestation_object.c, there is a possible way to disclose uninitialized secure element stack memory in key attesta…

Published Nov 10, 2026 · Assigned by Google_Devices

Description

In multiple functions of attestation_object.c, there is a possible way to disclose uninitialized secure element stack memory in key attestation certificates due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References