CVE-2026-56897
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In multiple functions of attestation_object.c, there is a possible way to disclose uninitialized secure element stack memory in key attestation certificates due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
| Vendor | |
| Product | android |
| Ecosystems | |
| Industries | TechnologyMobile |
| Published | Nov 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for google android
Be the first to know when new unknown vulnerabilities affecting google android are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Google / Android
Android kernel