{"id":"CVE-2026-56980","kind":"vulnerability","aliases":["CVE-2026-56980"],"related":[],"title":"Android: integer overflow in data flow code allows local privilege escalation","description":"In createDataFlowAsync of data_flow_manager.cc, there is a possible way to trigger an out of bounds write in shared memory due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"An integer overflow in createDataFlowAsync in data_flow_manager.cc can cause an out-of-bounds write in shared memory. A local attacker can use it to escalate privileges without extra execution rights and without user interaction.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","local-privilege-escalation","other"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:17+00:00","first_seen_at":"2026-11-10T20:46:08+00:00","triaged_at":"2026-11-10T20:52:12+00:00","updated_at":"2026-11-10T20:52:12+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-11-10T20:52:12Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Android: integer overflow in data flow code allows local privilege escalation","impact":"high","summary":"An integer overflow in createDataFlowAsync in data_flow_manager.cc can cause an out-of-bounds write in shared memory. A local attacker can use it to escalate privileges without extra execution rights and without user interaction.","audience":"everyone","category":"other","nicknames":[],"who_cares":["android","local-privilege-escalation"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"local attacker gains elevated privileges on the device","analyst_note":"Identify the affected product and patch level from the NVD entry or the vendor bulletin for CVE-2026-56980; the sources name no product or fixed version.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000637,"input_tokens":4543,"output_tokens":366,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-56980':14A,17A 'addit':92C 'allow':8A 'android':1A,18B 'attack':43B 'bound':36B,72C 'caus':31B 'code':7A 'could':83C 'createdataflowasync':27B,59C 'cve':12A,15A 'data':5A 'data_flow_manager.cc':29B,61C 'due':77C 'escal':11A,22B,48B,87C 'execut':52B,93C 'exploit':102C 'extra':51B 'flow':6A 'integ':2A,24B,80C 'interact':57B,97C 'lead':84C 'local':9A,20B,42B,86C 'local-privilege-escal':19B 'memori':40B,76C 'need':95C,100C 'out-of-bound':33B 'overflow':3A,25B,81C 'possibl':65C 'privileg':10A,21B,49B,89C,94C 'right':53B 'share':39B,75C 'trigger':68C 'use':45B 'user':56B,96C 'way':66C 'without':50B,55B 'write':37B,73C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["android","localprivilegeescalation","other","unknown"],"campaign_type":null,"search_a":"'-2026':13A,16A '-56980':14A,17A 'allow':8A 'android':1A 'code':7A 'cve':12A,15A 'data':5A 'escal':11A 'flow':6A 'integ':2A 'local':9A 'overflow':3A 'privileg':10A","search_b":"'android':18B 'attack':43B 'bound':36B 'caus':31B 'createdataflowasync':27B 'data_flow_manager.cc':29B 'escal':22B,48B 'execut':52B 'extra':51B 'integ':24B 'interact':57B 'local':20B,42B 'local-privilege-escal':19B 'memori':40B 'out-of-bound':33B 'overflow':25B 'privileg':21B,49B 'right':53B 'share':39B 'use':45B 'user':56B 'without':50B,55B 'write':37B","search_c":"'addit':92C 'bound':72C 'could':83C 'createdataflowasync':59C 'data_flow_manager.cc':61C 'due':77C 'escal':87C 'execut':93C 'exploit':102C 'integ':80C 'interact':97C 'lead':84C 'local':86C 'memori':76C 'need':95C,100C 'overflow':81C 'possibl':65C 'privileg':89C,94C 'share':75C 'trigger':68C 'user':96C 'way':66C 'write':73C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:17+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-56980","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56980","severity":null,"published_at":"2026-11-10T20:19:17+00:00","modified_at":"2026-11-10T20:19:17+00:00","first_seen_at":"2026-11-10T20:46:08+00:00","fetched_at":"2026-11-10T20:46:08+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}