Out-of-Bounds Write Vulnerability in Wacom Device Driver by Wacom
CVE-2026-56936

6.8MEDIUM

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
6 October 2026

What is CVE-2026-56936?

An out-of-bounds write vulnerability exists in the Wacom device driver due to a missing bounds check in the wacom_hid_set_device_mode function. This flaw allows attackers to exploit the device without requiring user interaction, potentially leading to physical privilege escalation. The affected versions of the Wacom driver need immediate updates to patch this security issue and ensure device integrity.

Affected Version(s)

Android Android kernel

References

https://source.android.com/docs/security/bulletin/pixel/2...

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.