PT-2026-92306 · Google · Android
CVE-2026-56879
·
Published
2026-09-15
·
Updated
2026-09-16
CVSS v3.1
6.7
Medium
| Vector | AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
The product name cannot be determined (affected versions not specified)
Description
A memory corruption issue exists in the
gmc mb msg handler function within gmc mba.c caused by a confused deputy. A confused deputy is a security issue where a privileged entity is tricked by a less privileged entity into performing an action it is not authorized to do. This flaw could allow for local escalation of privilege, requiring System execution privileges for exploitation, and does not require user interaction.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Android