CVE-2026-56907
No fix known EPSS <1%CVSS 6.7
In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Products: Google Android