{"id":"CVE-2026-56995","kind":"vulnerability","aliases":["CVE-2026-56995"],"related":[],"title":"Android: memory corruption in shared memory allocator enables local privilege escalation","description":"In multiple locations, there is a possible way to corrupt host allocator metadata in shared memory due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.","summary":"Multiple locations allow corruption of host allocator metadata in shared memory, caused by a memory corruption flaw. A local attacker with System-level execution can escalate privileges, and no user interaction is needed.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","other","shared-memory"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:17+00:00","first_seen_at":"2026-11-10T20:46:08+00:00","triaged_at":"2026-11-10T20:52:11+00:00","updated_at":"2026-11-10T20:52:11+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-11-10T20:52:11Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Android: memory corruption in shared memory allocator enables local privilege escalation","impact":"high","summary":"Multiple locations allow corruption of host allocator metadata in shared memory, caused by a memory corruption flaw. A local attacker with System-level execution can escalate privileges, and no user interaction is needed.","audience":"everyone","category":"other","nicknames":[],"who_cares":["android","shared-memory"],"confidence":0.4,"fix_status":"unknown","needs_auth":"yes","worst_case":"local code gains elevated system privileges on the device","analyst_note":"Identify the affected product and Android patch level from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-56995; the description does not name the component.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000641,"input_tokens":4518,"output_tokens":378,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-56995':14A,17A 'alloc':7A,29B,68C 'allow':25B 'android':1A,18B 'attack':42B 'caus':34B 'corrupt':3A,26B,38B,66C,76C 'could':78C 'cve':12A,15A 'due':73C 'enabl':8A 'escal':11A,49B,82C 'execut':47B,87C 'exploit':96C 'flaw':39B 'host':28B,67C 'interact':54B,91C 'lead':79C 'level':46B 'local':9A,41B,81C 'locat':24B,59C 'memori':2A,6A,22B,33B,37B,72C,75C 'metadata':30B,69C 'multipl':23B,58C 'need':56B,89C,94C 'possibl':63C 'privileg':10A,50B,84C,88C 'share':5A,21B,32B,71C 'shared-memori':20B 'system':45B,86C 'system-level':44B 'user':53B,90C 'way':64C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["android","other","sharedmemory","unknown"],"campaign_type":null,"search_a":"'-2026':13A,16A '-56995':14A,17A 'alloc':7A 'android':1A 'corrupt':3A 'cve':12A,15A 'enabl':8A 'escal':11A 'local':9A 'memori':2A,6A 'privileg':10A 'share':5A","search_b":"'alloc':29B 'allow':25B 'android':18B 'attack':42B 'caus':34B 'corrupt':26B,38B 'escal':49B 'execut':47B 'flaw':39B 'host':28B 'interact':54B 'level':46B 'local':41B 'locat':24B 'memori':22B,33B,37B 'metadata':30B 'multipl':23B 'need':56B 'privileg':50B 'share':21B,32B 'shared-memori':20B 'system':45B 'system-level':44B 'user':53B","search_c":"'alloc':68C 'corrupt':66C,76C 'could':78C 'due':73C 'escal':82C 'execut':87C 'exploit':96C 'host':67C 'interact':91C 'lead':79C 'local':81C 'locat':59C 'memori':72C,75C 'metadata':69C 'multipl':58C 'need':89C,94C 'possibl':63C 'privileg':84C,88C 'share':71C 'system':86C 'user':90C 'way':64C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:17+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-56995","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56995","severity":null,"published_at":"2026-11-10T20:19:17+00:00","modified_at":"2026-11-10T20:19:17+00:00","first_seen_at":"2026-11-10T20:46:08+00:00","fetched_at":"2026-11-10T20:46:08+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}