# CVE-2026-56995: Pixel devices host allocator metadata corruption in shared memory

Source: https://junglewise.ai/threats/cve-2026-56995-in-multiple-locations-there-is-a-possible-way-to-corrupt-host  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-10. Updated: 2026-11-10  
License: CC BY 4.0 with a link back

CVE-2026-56995 · Severity: info · Published 2026-11-10

Pixel smartphones contain a memory corruption vulnerability in the host allocator metadata that manages shared memory. An attacker with local access to a device can exploit this to gain system-level privileges and take complete control of the phone. No user interaction is required for the attack to succeed.

## Quick answers

**Is CVE-2026-56995 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-56995 being exploited in the wild.

**How severe is CVE-2026-56995?** Informational severity, published 10 November 2026.

**Which products and versions are affected?** Pixel devices.

**Is there a fix for CVE-2026-56995?** Yes: fixed in Pixel security patch level 2026-11-05 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-56995 attacked?** It is attacked with local access, in device firmware.

**Am I affected by CVE-2026-56995?** Check whether you run Pixel devices. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Pixel security patch level 2026-11-05 or later

## Technical details

A memory corruption vulnerability exists in multiple locations where host allocator metadata in shared memory can be corrupted. The vulnerability allows local escalation of privilege (EoP) to system execution level without requiring user interaction. The issue affects Pixel device firmware and is addressed in the November 2026 security update.

## Affected products

- Pixel devices

## Timeline

- 2026-11-10: disclosed

## References

- [https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01](https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01)