CVE-2026-56950

Analyzed Analyzed - Analysis Complete

Improper Input Validation in Rust mbu_class Leads to Information Disclosure

Publication date: 2026-09-15

Last updated on: 2026-09-21

Assigner: Google Devices

Description

In validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-21

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-56950

EUVD

EUVD-2026-78971

Affected Vendors & Products

Vendor	Product	Version / Range
google	android	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability is an information disclosure issue in the function validate_ns_buf of mbu_class.rs. It occurs due to improper input validation, which could allow local attackers to access sensitive information. Exploitation requires system execution privileges but no user interaction.

Impact Analysis

If exploited, this vulnerability could allow an attacker with local system access to disclose confidential information. This may include sensitive data stored or processed on the affected system, potentially leading to further security breaches or unauthorized access.

Compliance Impact

This vulnerability could lead to local information disclosure with System execution privileges needed. It may impact compliance by potentially exposing sensitive data, which could violate GDPR's data protection requirements or HIPAA's confidentiality rules if the disclosed information includes personal or health-related data.

Mitigation Strategies

Apply patches or updates from the vendor if available. Restrict user privileges to minimize access. Monitor system logs for suspicious activity related to input validation failures.

Hi! I’m here to help you understand CVE-2026-56950. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70