---
id: "CVE-2026-57013"
page: "https://infrastack.ai/live/CVE-2026-57013"
kind: "vulnerability"
aliases: ["CVE-2026-57013"]
title: "Android: insecure firewall default lets local code release secure coprocessors"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["android", "embedded", "firmware", "infrastructure"]
not_affected_if: ["unknown"]
published_at: "2026-11-10T20:19:18+00:00"
first_seen_at: "2026-11-10T20:46:08+00:00"
updated_at: "2026-11-10T20:52:07+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57013", "first_seen_at": "2026-11-10T20:46:08+00:00"}]
exploit_sources: []
---

# Android: insecure firewall default lets local code release secure coprocessors

Link for people: https://infrastack.ai/live/CVE-2026-57013 (this .md is for agents)

Multiple files in access_control_enable leave firewall registers unclaimed by default, so a local attacker can release secure coprocessors from reset. The flaw gives local privilege escalation with System-level execution and needs no user interaction.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T20:46:08+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-57013

## From the sources

In access_control_enable of multiple files, there is a possible way to release secure coprocessors from reset via unclaimed firewall registers due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_