CVE-2026-56899: Input Validation

Q: What level of access does an attacker need before exploiting this issue?

Exploitation requires System execution privileges. The issue is locally exploitable and does not require user interaction.

Q: What could successful exploitation allow?

A successful exploit could cause an out-of-bounds write in hypervisor memory and lead to local escalation of privilege.

Published Nov 1, 2026

Updated

In smmudomainconfigs1 of arm-smmu-v3.c, there is a possible way to trigger an out of bounds write in hypervisor memory due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need before exploiting this issue?

Exploitation requires System execution privileges. The issue is locally exploitable and does not require user interaction.

What could successful exploitation allow?

A successful exploit could cause an out-of-bounds write in hypervisor memory and lead to local escalation of privilege.

CVE-2026-56899: Input Validation

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need before exploiting this issue?

What could successful exploitation allow?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need before exploiting this issue?

What could successful exploitation allow?