AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

GoogleCVE-2026-56941

Google Android: use after free

Google

CVE-2026-56941 · Published Sep 15, 2026 · updated Sep 21, 2026

High8.4
No fix yet
Google advisory

In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected versions

PackageAffectedFixed in
Android
Product
<= Android kernelNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-693

More Google advisories

All Google
High 8.3Sep 15Google Chrome: race conditionCVE-2026-91743fixed in 153.0.8010.47Medium 5.3Sep 15Google Chrome: race conditionCVE-2026-91744fixed in 153.0.8010.47High 8.8Sep 15Google Chrome: use after freeCVE-2026-91745fixed in 153.0.8010.47Medium 4.3Sep 15Google Chrome: integer overflowCVE-2026-91746fixed in 153.0.8010.47Low 3.1Sep 15Google Chrome: use after freeCVE-2026-91747fixed in 153.0.8010.47High 8.3Sep 15Google Chrome: race conditionCVE-2026-91748fixed in 153.0.8010.47