CVE-2026-56907
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Risk Assessment
A local attacker could corrupt shared memory used by the VPU, potentially leading to privilege escalation and system instability.
Recommendation
Apply vendor security updates and consider restricting access to VPU interfaces for untrusted processes.
Other vulnerabilities in VPU
See all- CVE-2026-56982High
In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local privilege escalation with System execution privileges needed. User interaction is not required for exploitation.
- CVE-2026-56945High
In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-55351High
In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-0197Medium
In VPU, an information disclosure is possible due to a logic error in the code. This could lead to local information disclosure requiring System execution privileges.
Original NVD description (English source)
In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS