CVE-2026-56982
UnknownSummary
In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local privilege escalation with System execution privileges needed. User interaction is not required for exploitation.
Risk Assessment
An attacker with System privileges could gain even higher privileges, potentially leading to full system compromise.
Recommendation
Apply security patches from the vendor that fix the missing permission check in VPU.
Other vulnerabilities in VPU
See all- CVE-2026-56945High
In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-56907Unknown
In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-55351High
In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-0197Medium
In VPU, an information disclosure is possible due to a logic error in the code. This could lead to local information disclosure requiring System execution privileges.
Original NVD description (English source)
In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.