CVE-2026-55261

HighCVSS 8.4/10Last modified Nov 9, 2026

Description

In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code execution due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-862

Affected software

VendorProductVersions
GoogleAndroid17; 16-qpr2; 16

References

Timeline

Published
Nov 2, 2026
Last modified
Nov 9, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-552628.4In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there is a possible policy desynchronization dueCVE-2026-552638.4In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading oCVE-2026-552644.0In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy. This could lead CVE-2026-552656.5In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This could lead to a remote dCVE-2026-552667.8In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could lead to local escalatioCVE-2026-552697.8In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. This could lead to locCVE-2026-55275.3A weakness has been identified in Tenda 4G03 Pro 1.0/1.0re/01.bin/04.03.01.53. Affected by this issue is some unknown functionality of the fCVE-2026-552707.8In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation oCVE-2026-552718.4In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection due to a confused deputy. This cCVE-2026-552726.2In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper input validation. This could lead to local CVE-2026-552737.8In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to CVE-2026-552758.4In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote escalation of privilege with no
CVE-2026-55261: High severity, CVSS 8.4 | Vulnix