MEDIUM
CVE-2026-56988
CVSS
6.4
Description
In multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Weakness (CWE)
CWE-362
Race Condition
CWE-416
Use After Free
EPSS Score
0.05%
Probability of exploitation in next 30 days
0th percentile
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.