CVEvulnerability
CVE-2026-55286
7.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-10-05
- Last modified
- 2026-10-07
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-119
Description
In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected configurations
• google android 17.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- https://source.android.com/docs/security/bulletin/2026/2026-10-01 Patch, Vendor Advisory