CVE-2026-56882

Analyzed Analyzed - Analysis Complete

Information Disclosure in Cellular Modem Leading to Remote Code Execution

Publication date: 2026-09-15

Last updated on: 2026-09-21

Assigner: Google Devices

Description

In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-21

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-56882

EUVD

EUVD-2026-78957

Affected Vendors & Products

Vendor	Product	Version / Range
google	android	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This is a logic error in Cellular Modem code that could allow remote code execution. It enables information disclosure and requires no extra privileges or user interaction to exploit.

Impact Analysis

An attacker could remotely execute code on your device, potentially accessing sensitive data or taking control without needing special permissions.

Compliance Impact

This vulnerability could lead to remote code execution with high impact on confidentiality, integrity, and availability. Such a flaw may violate compliance requirements under GDPR (e.g., unauthorized data access) and HIPAA (e.g., exposure of protected health information) due to potential data breaches and lack of user interaction required for exploitation.

Mitigation Strategies

Apply the latest security patches or updates provided by the device manufacturer or vendor. Disable unnecessary network services or modem features that could be exploited. Monitor network traffic for unusual activity and restrict access to critical systems.

Hi! I’m here to help you understand CVE-2026-56882. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70