cyfenced.com →

[ CVE-2026-56936 · Published 6 Oct 2026 ]

Vulnerability in Google Android

CVSS 6.8 EPSS <1%2 agency advisoriesFix available

[ Description ]Official description

In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

[ Fixes ]Fixes and patches

  • Security bulletin: PixelVendor patch or bulletin · CERT-FR · source.android.com/docs/security/bulletin/pixel/2026/2026-10-01, cited by CERT-FR CERTFR-2026-AVI-1270

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1270

    Multiple vulnerabilities in Google Pixel Translated from French

    Multiple vulnerabilities have been discovered in Google Pixel. They allow an attacker to cause privilege escalation and a breach of data confidentiality.

    CVE-2026-55330CVE-2026-56952CVE-2026-56906+3 more CVEs
  • BSI CERT-BundWID-SEC-2026-3786

    Pixel Patchday Oktober 2026: Multiple vulnerabilities Translated from German

    CVE-2026-56952CVE-2026-56906CVE-2026-56936+3 more CVEs

[ References ]References