CVE-2026-55292

MediumCVSS 5.3/10Last modified Nov 9, 2026

Description

In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer underflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
Google	Android	17; 16-qpr2; 16

References

https://source.android.com/docs/security/bulletin/2026/2026-11-01

Timeline

Published: Nov 2, 2026
Last modified: Nov 9, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-552947.8In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to loca CVE-2026-552976.4In handle_chan_msg of tipc_virtio_dev.c, there is a possible way to bypass memory tag access controls via concurrent shared memory modificat CVE-2026-55306.3A flaw has been found in Ollama up to 0.18.1. This issue affects some unknown processing of the file server/download.go of the component Mod CVE-2026-553018.4In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation o CVE-2026-553026.7In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privil CVE-2026-553046.7In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local CVE-2026-553067.5In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with CVE-2026-553074.4In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to l CVE-2026-553098.4In multiple functions of verifier.rs, there is a possible way to bypass secure boot signature verification via fault injection due to a logi CVE-2026-55315.3A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /login_cr CVE-2026-553118.4In N/A of gdmc/gsp/project/gdmc.mk, there is a possible Logic error due to a logic error in the code. This could lead to local escalation of CVE-2026-553127.8In insert_node of remap.c, there is a possible way to trigger an out of bounds write in the address remapping table due to a non-heap buffer