Skip to content
OpenAdvisories
Medium · 6.4 CVE-2026-56949 EUVD-2026-122735GHSA-9rcp-j8fc-vvpx

In multiple locations, there is a possible way to modify authenticated coprocessor firmware in shared memory before loading due to a race c…

Published Nov 10, 2026 · Updated Nov 11, 2026 · Assigned by Google_Devices

Description

In multiple locations, there is a possible way to modify authenticated coprocessor firmware in shared memory before loading due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References