{"id":"CVE-2026-57036","kind":"vulnerability","aliases":["CVE-2026-57036"],"related":[],"title":"Android-style firmware VDU driver: logic error allows local privilege escalation","description":"In send_vdu_directive of gdmc/gsp/dev/bmsm/plat/lga/vdu.c, there is a possible Logic error due to a logic error in the code. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.","summary":"A logic error in the send_vdu_directive function of a VDU (display) component in gdmc/gsp firmware can be triggered locally. The sources say it could let a local user escalate privileges.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android-device","firmware","infrastructure","local-privilege-escalation"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:18+00:00","first_seen_at":"2026-11-10T20:46:08+00:00","triaged_at":"2026-11-10T20:52:06+00:00","updated_at":"2026-11-10T20:52:06+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-11-10T20:52:06Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Android-style firmware VDU driver: logic error allows local privilege escalation","impact":"high","summary":"A logic error in the send_vdu_directive function of a VDU (display) component in gdmc/gsp firmware can be triggered locally. The sources say it could let a local user escalate privileges.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["firmware","android-device","local-privilege-escalation"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"local user gains elevated privileges on the device","analyst_note":"Identify the affected device or firmware vendor and the patched build from the NVD entry and vendor security bulletin; the sources give no product or version.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000635,"input_tokens":4555,"output_tokens":360,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-57036':15A,18A 'allow':9A 'android':2A,20B 'android-devic':19B 'android-styl':1A 'code':79C 'compon':41B 'could':53B,81C 'cve':13A,16A 'devic':21B 'direct':35B,63C 'display':40B 'driver':6A 'due':72C 'error':8A,30B,71C,76C 'escal':12A,27B,58B,85C 'execut':89C 'exploit':96C 'firmwar':4A,22B,44B 'function':36B 'gdmc/gsp':43B 'gdmc/gsp/dev/bmsm/plat/lga/vdu.c':65C 'infrastructur':23B 'interact':93C 'lead':82C 'let':54B 'local':10A,25B,48B,56B,84C 'local-privilege-escal':24B 'logic':7A,29B,70C,75C 'need':91C 'possibl':69C 'privileg':11A,26B,59B,87C,90C 'say':51B 'send':33B,61C 'sourc':50B 'style':3A 'trigger':47B 'user':57B,92C 'vdu':5A,34B,39B,62C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["androiddevice","firmware","infrastructure","localprivilegeescalation","unknown"],"campaign_type":null,"search_a":"'-2026':14A,17A '-57036':15A,18A 'allow':9A 'android':2A 'android-styl':1A 'cve':13A,16A 'driver':6A 'error':8A 'escal':12A 'firmwar':4A 'local':10A 'logic':7A 'privileg':11A 'style':3A 'vdu':5A","search_b":"'android':20B 'android-devic':19B 'compon':41B 'could':53B 'devic':21B 'direct':35B 'display':40B 'error':30B 'escal':27B,58B 'firmwar':22B,44B 'function':36B 'gdmc/gsp':43B 'infrastructur':23B 'let':54B 'local':25B,48B,56B 'local-privilege-escal':24B 'logic':29B 'privileg':26B,59B 'say':51B 'send':33B 'sourc':50B 'trigger':47B 'user':57B 'vdu':34B,39B","search_c":"'code':79C 'could':81C 'direct':63C 'due':72C 'error':71C,76C 'escal':85C 'execut':89C 'exploit':96C 'gdmc/gsp/dev/bmsm/plat/lga/vdu.c':65C 'interact':93C 'lead':82C 'local':84C 'logic':70C,75C 'need':91C 'possibl':69C 'privileg':87C,90C 'send':61C 'user':92C 'vdu':62C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:18+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-57036","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57036","severity":null,"published_at":"2026-11-10T20:19:18+00:00","modified_at":"2026-11-10T20:19:18+00:00","first_seen_at":"2026-11-10T20:46:08+00:00","fetched_at":"2026-11-10T20:46:08+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}