CVE-2026-0197
MediumCVSS 4.4Summary
In VPU, an information disclosure is possible due to a logic error in the code. This could lead to local information disclosure requiring System execution privileges.
Risk Assessment
An attacker with System privileges could access sensitive information. This may compromise the confidentiality of data processed by the VPU.
Recommendation
Update the VPU software to a version containing the logic error fix. Restrict access to the VPU to trusted processes.
Other vulnerabilities in VPU
See all- CVE-2026-56982Unknown
In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local privilege escalation with System execution privileges needed. User interaction is not required for exploitation.
- CVE-2026-56945High
In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-56907Unknown
In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-55351High
In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Original NVD description (English source)
In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.