CVE-2026-56945: High severity vulnerability
Published Sep 15, 2026
·Updated
In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Event History
Sep 15, 2026
CVE Published
via MITRE·06:34 PM
Data Sourced
via MITRE·06:34 PM
DescriptionWeakness
Data Sourced
via NVD·07:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
An attacker needs local access with low privileges. Exploitation does not require user interaction or additional execution privileges.
2
What is the potential impact of successful exploitation?
Successful exploitation could allow local escalation of privilege and may affect confidentiality, integrity, and availability at a high level.