{"id":"CVE-2026-56943","kind":"vulnerability","aliases":["CVE-2026-56943"],"related":[],"title":"Android: out-of-bounds read leaks attestation data to local system code","description":"In multiple locations, there is a possible way to trigger an out of bounds read via an attestation comparison oracle due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.","summary":"An incorrect bounds check in attestation comparison code allows an out-of-bounds read. An attacker with System-level execution privileges can use it to disclose information locally.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","infrastructure"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:16+00:00","first_seen_at":"2026-11-10T20:46:07+00:00","triaged_at":"2026-11-10T20:53:38+00:00","updated_at":"2026-11-10T20:53:38+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:53:38Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Android: out-of-bounds read leaks attestation data to local system code","impact":"low","summary":"An incorrect bounds check in attestation comparison code allows an out-of-bounds read. An attacker with System-level execution privileges can use it to disclose information locally.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["android"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local information disclosure from attestation comparison memory","analyst_note":"Confirm the affected Android component and patch level from the NVD entry or the Android security bulletin.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000619,"input_tokens":4526,"output_tokens":333,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-56943':16A,19A 'allow':30B 'android':1A,20B 'attack':38B 'attest':8A,27B,69C 'bound':5A,24B,35B,65C,76C 'check':25B,77C 'code':13A,29B 'comparison':28B,70C 'could':79C 'cve':14A,17A 'data':9A 'disclos':49B 'disclosur':84C 'due':72C 'execut':43B,87C 'exploit':96C 'incorrect':23B,75C 'inform':50B,83C 'infrastructur':21B 'interact':91C 'lead':80C 'leak':7A 'level':42B 'local':11A,51B,82C 'locat':54C 'multipl':53C 'need':89C,94C 'oracl':71C 'out-of-bound':2A,32B 'possibl':58C 'privileg':44B,88C 'read':6A,36B,66C 'system':12A,41B,86C 'system-level':40B 'trigger':61C 'use':46B 'user':90C 'via':67C 'way':59C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["android","infrastructure","unknown"],"campaign_type":null,"search_a":"'-2026':15A,18A '-56943':16A,19A 'android':1A 'attest':8A 'bound':5A 'code':13A 'cve':14A,17A 'data':9A 'leak':7A 'local':11A 'out-of-bound':2A 'read':6A 'system':12A","search_b":"'allow':30B 'android':20B 'attack':38B 'attest':27B 'bound':24B,35B 'check':25B 'code':29B 'comparison':28B 'disclos':49B 'execut':43B 'incorrect':23B 'inform':50B 'infrastructur':21B 'level':42B 'local':51B 'out-of-bound':32B 'privileg':44B 'read':36B 'system':41B 'system-level':40B 'use':46B","search_c":"'attest':69C 'bound':65C,76C 'check':77C 'comparison':70C 'could':79C 'disclosur':84C 'due':72C 'execut':87C 'exploit':96C 'incorrect':75C 'inform':83C 'interact':91C 'lead':80C 'local':82C 'locat':54C 'multipl':53C 'need':89C,94C 'oracl':71C 'possibl':58C 'privileg':88C 'read':66C 'system':86C 'trigger':61C 'user':90C 'via':67C 'way':59C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:16+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-56943","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56943","severity":null,"published_at":"2026-11-10T20:19:16+00:00","modified_at":"2026-11-10T20:19:16+00:00","first_seen_at":"2026-11-10T20:46:07+00:00","fetched_at":"2026-11-10T20:46:07+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}