CVE-2026-56897
In multiple functions of attestation_object.c, there is a possible way to disclose uninitialized secure element stack memory in key attestat
CVSS
—
No CVSS
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Nov 10, 2026 · Last modified: Nov 10, 2026
Not enough EPSS history yet.
In multiple functions of attestation_object.c, there is a possible way to disclose uninitialized secure element stack memory in key attestation certificates due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
No related CVEs by CWE or product.