CVE-2026-56949

In multiple locations, there is a possible way to modify authenticated coprocessor firmware in shared memory before loading due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

• CWE-362

• https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01

Published

Nov 10, 2026

Last Modified

Nov 11, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-56942In ReadTileInfo of vp9hwd_headers.cc, there is a possible ou…8.8
• CVE-2026-56943In multiple locations, there is a possible way to trigger an…2.3
• CVE-2026-56944In smmu_detach_dev of private/google-modules/iommu/arm-smmu-…7.8
• CVE-2026-56945In VPU, there is a possible out-of-bounds write due to a con…7.8
• CVE-2026-56946In smmu_unmap_visit_leaf of arm-smmu-v3.c, there is a possib…6.7
• CVE-2026-56947In getCarrierRestrictionStatus of PhoneInterfaceManager.java…4
• CVE-2026-5695Arbitrary file upload vulnerability due to a lack of proper …8.4
• CVE-2026-56950In validate_ns_buf of mbu_class.rs, there is a possible info…4.4
• CVE-2026-56951In on_vkUpdateDescriptorSetWithTemplateSized2GOOGLE of vk_de…8.4
• CVE-2026-56952In platform_msg_handler_init of default_msg_handlers.c, ther…6.7
• CVE-2026-56956In EncodeT140 of TextRtpPayloadEncoderNode.cpp, there is a p…5.3
• CVE-2026-56958In gf_algo_get_cached_dump_data of gf_algo.c, there is a pos…5.5