---
id: "CVE-2026-56980"
page: "https://infrastack.ai/live/CVE-2026-56980"
kind: "vulnerability"
aliases: ["CVE-2026-56980"]
title: "Android: integer overflow in data flow code allows local privilege escalation"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["android", "local-privilege-escalation", "other"]
not_affected_if: []
published_at: "2026-11-10T20:19:17+00:00"
first_seen_at: "2026-11-10T20:46:08+00:00"
updated_at: "2026-11-10T20:52:12+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56980", "first_seen_at": "2026-11-10T20:46:08+00:00"}]
exploit_sources: []
---

# Android: integer overflow in data flow code allows local privilege escalation

Link for people: https://infrastack.ai/live/CVE-2026-56980 (this .md is for agents)

An integer overflow in createDataFlowAsync in data_flow_manager.cc can cause an out-of-bounds write in shared memory. A local attacker can use it to escalate privileges without extra execution rights and without user interaction.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T20:46:08+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-56980

## From the sources

In createDataFlowAsync of data_flow_manager.cc, there is a possible way to trigger an out of bounds write in shared memory due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_