CVE-2026-56911

In handle_fips_hmac_req of hwcrypto_proxy.c, there is a possible heap buffer overflow due to missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

• CWE-119

• https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01

Published

Nov 10, 2026

Last Modified

Nov 11, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-56902In multiple locations, there is a possible information discl…4
• CVE-2026-56906In ep_free of eventpoll.c, there is a possible use-after-fre…7
• CVE-2026-56907In VPU, there is a possible shared memory overwrite due to i…6.7
• CVE-2026-56909In multiple functions of sswrp_cpm.dtsi, there is a possible…6.7
• CVE-2026-5691A vulnerability has been found in Totolink A7100RU 7.4cu.231…7.3
• CVE-2026-56910In multiple locations, there is a possible way to trigger an…8.4
• CVE-2026-56912In ac_remove_smmu_prot_internal of acfw_smmu.c, there is a p…7.8
• CVE-2026-56914In multiple locations, there is a possible use-after-free du…8.4
• CVE-2026-56915In bigo_worker_thread of bigo.c, there is a possible escalat…6.4
• CVE-2026-56916In _vqueue_get_avail_buf_locked of trusty/kernel/lib/trusty/…7.8
• CVE-2026-56919In PackageSignatureChecker of SystemUIGoogleModule.java, the…8.8
• CVE-2026-5692A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20…7.3