CVE-2026-56911 is a vulnerability in Google Android
Published on November 10, 2026
In handle_fips_hmac_req of hwcrypto_proxy.c, there is a possible heap buffer overflow due to missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Vulnerability Analysis
CVE-2026-56911 can be exploited with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
What is a Buffer Overflow Vulnerability?
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
CVE-2026-56911 has been classified to as a Buffer Overflow vulnerability or weakness.
Products Associated with CVE-2026-56911
Want to know whenever a new CVE is published for Google Android? stack.watch will email you.