In EncodeT140 of TextRtpPayloadEncoderNode.cpp, there is a possible Heap Buffer Overflow due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
History

Sat, 14 Nov 2026 23:45:00 +0000

Type Values Removed Values Added
Title Heap Buffer Overflow in Android TextRtpPayloadEncoderNode Enables Remote Code Execution

Sat, 14 Nov 2026 07:00:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google android
Vendors & Products Google
Google android

Fri, 13 Nov 2026 21:30:00 +0000

Type Values Removed Values Added
Title Heap Buffer Overflow in Android TextRtpPayloadEncoderNode Enables Remote Code Execution

Fri, 13 Nov 2026 16:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-122
CWE-693
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}


Thu, 12 Nov 2026 22:15:00 +0000

Type Values Removed Values Added
Title Heap Buffer Overflow in Android Text RTP Payload Encoder Allows Remote Code Execution
Weaknesses CWE-122

Thu, 12 Nov 2026 03:30:00 +0000

Type Values Removed Values Added
Title Heap Buffer Overflow in Android Text RTP Payload Encoder Allows Remote Code Execution
Weaknesses CWE-122

Tue, 10 Nov 2026 19:30:00 +0000

Type Values Removed Values Added
Description In EncodeT140 of TextRtpPayloadEncoderNode.cpp, there is a possible Heap Buffer Overflow due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: Google_Devices

Published: 2026-11-10T19:20:54.733Z

Updated: 2026-11-13T15:42:59.759Z

Reserved: 2026-06-23T16:15:23.846Z

Link: CVE-2026-56956

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-11-10T20:19:17.003

Modified: 2026-11-13T16:19:11.347

Link: CVE-2026-56956

cve-icon Redhat

No data.