PT-2026-92306 · Google · Android

CVE-2026-56879

·

Published

2026-09-15

·

Updated

2026-09-16

CVSS v3.1

6.7

Medium

VectorAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)
Description A memory corruption issue exists in the gmc mb msg handler function within gmc mba.c caused by a confused deputy. A confused deputy is a security issue where a privileged entity is tricked by a less privileged entity into performing an action it is not authorized to do. This flaw could allow for local escalation of privilege, requiring System execution privileges for exploitation, and does not require user interaction.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-56879

Affected Products

Android