---
id: "CVE-2026-56943"
page: "https://infrastack.ai/live/CVE-2026-56943"
kind: "vulnerability"
aliases: ["CVE-2026-56943"]
title: "Android: out-of-bounds read leaks attestation data to local system code"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["android", "infrastructure"]
not_affected_if: []
published_at: "2026-11-10T20:19:16+00:00"
first_seen_at: "2026-11-10T20:46:07+00:00"
updated_at: "2026-11-10T20:53:38+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56943", "first_seen_at": "2026-11-10T20:46:07+00:00"}]
exploit_sources: []
---

# Android: out-of-bounds read leaks attestation data to local system code

Link for people: https://infrastack.ai/live/CVE-2026-56943 (this .md is for agents)

An incorrect bounds check in attestation comparison code allows an out-of-bounds read. An attacker with System-level execution privileges can use it to disclose information locally.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T20:46:07+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-56943

## From the sources

In multiple locations, there is a possible way to trigger an out of bounds read via an attestation comparison oracle due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_