CVE-2026-56900
In restore_quickboot_csrs_s2m of training.rs, there is a possible out-of-bounds write due to improper input validation. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
What each source reports
OSVPUB-A-508716780No score
In restore_quickboot_csrs_s2m of training.rs, there is a possible out-of-bounds write due to improper input validation. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Record
PUB-A-508716780- Updated
- 2026-11-10
Affected packages
| Package | Affected | Fixed |
|---|---|---|
:unknown:Android | Pixel-family specific:0 up to Pixel-family specific:2026-09-05, plus listed versions Pixel-family specific | Pixel-family specific:2026-09-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-56900 is a vulnerability with no CVSS score yet in :unknown:, published September 1, 2026. No source lists public exploit code. Fixed in :unknown: Pixel-family specific:2026-09-05.