Skip to content
OpenAdvisories
Low · 2.3 CVE-2026-56943 EUVD-2026-122731GHSA-xr3c-vhw5-chpm

In multiple locations, there is a possible way to trigger an out of bounds read via an attestation comparison oracle due to an incorrect bo…

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by Google_Devices

Description

In multiple locations, there is a possible way to trigger an out of bounds read via an attestation comparison oracle due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References